Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: +5KoDB30XvjnP4Bq/GVV8q7NA6xGbAnj2JIfi2RXRBE=
Subject key identifier: 01:62:CD:97:BB:AA:E6:3F:1D:35:98:47:CF:06:5B:D1:74:6A:9F:A0
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019A4FCFE37BA3D2D36DDC561085A9073D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 17:00:15 +0000
Manifest this update: Tue 04 Nov 2025 17:00:15 +0000
Manifest next update: Wed 05 Nov 2025 17:00:15 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: xcSjhAA7U3iaA32+to+NuID2ZeBW692LAPJw//SsHaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:e3:7b:a3:d2:d3:6d:dc:56:10:85:a9:07:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Nov 4 17:00:15 2025 GMT
Not After : Nov 5 17:00:15 2025 GMT
Subject: CN=0162cd97bbaae63f1d359847cf065bd1746a9fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:ae:de:55:32:61:4b:83:af:65:4f:d8:57:
e3:9a:2d:7a:1c:73:98:3b:92:0b:e3:aa:2c:b3:e4:
de:2b:e5:38:9b:f3:10:57:06:33:39:a2:0d:92:17:
d1:46:e5:02:a8:9f:af:cb:22:78:9c:1f:52:c1:39:
3c:c6:35:02:1d:d3:c5:33:57:c2:de:40:a0:45:19:
97:10:f1:e4:01:dc:ff:a0:4f:30:75:3c:06:d1:34:
c1:a9:39:ee:f4:c5:44:59:35:1a:88:6a:a9:15:be:
07:e5:25:8b:92:ec:f4:c6:3e:4a:b6:35:27:cb:83:
fb:d8:8c:85:9d:4f:67:f4:9c:c7:09:ec:d9:e2:75:
e4:a9:42:1e:e3:8b:69:38:da:9b:78:74:99:ed:2c:
0d:a4:22:21:a5:93:35:12:5f:50:7d:e5:59:56:0f:
03:11:23:8a:e7:8a:65:d8:52:94:34:22:e3:19:2b:
07:7d:ae:b7:71:08:26:45:9a:18:9f:f5:e0:d1:ae:
31:eb:9e:82:c0:9a:b3:ad:e9:ea:2a:14:d5:fe:3d:
05:29:85:8d:10:2c:47:70:4b:a7:e7:06:c2:23:6a:
d5:71:89:79:85:c9:fa:3c:6f:94:1d:78:6e:fc:82:
23:b8:7d:c4:a7:c7:a4:f4:39:95:62:1c:ec:8c:73:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:62:CD:97:BB:AA:E6:3F:1D:35:98:47:CF:06:5B:D1:74:6A:9F:A0
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:27:fc:89:4e:a2:1a:98:09:e8:85:8c:d1:5f:1f:ad:58:11:
6c:40:1a:b4:79:af:08:74:24:aa:ba:f5:02:7c:6c:fc:32:12:
65:1b:01:e9:35:39:5e:f8:8b:21:c6:59:8a:21:de:66:81:5e:
ec:8d:06:fe:d2:c3:6e:c6:9b:57:75:4d:43:e8:61:bd:20:78:
e0:50:35:18:c8:c1:1b:13:ec:4d:de:1e:fd:bf:28:8b:9b:1c:
cb:c1:84:c6:47:54:cf:11:b3:c8:f7:90:79:ca:e1:4f:b4:92:
a0:e9:d1:8f:0e:1e:30:f3:25:eb:e3:bb:05:98:95:1d:d3:61:
83:bc:31:9b:3c:55:36:f6:56:ec:67:04:82:d5:ab:dd:6e:a8:
67:ec:4b:98:f1:1b:21:b3:6b:d7:09:0c:31:33:21:03:58:4f:
6f:96:8f:18:c9:24:f6:01:af:7f:8b:ff:e8:19:18:46:ed:6c:
39:f1:64:7d:95:2b:72:99:82:f8:8f:84:b6:16:54:4d:6d:bd:
9c:62:fe:cb:9f:da:68:b5:04:df:7d:e4:69:63:97:13:82:81:
3d:0c:37:3a:b5:8d:8f:e1:08:74:21:96:ff:d2:cf:03:39:b4:
e8:d7:de:54:d2:97:ee:98:f0:0f:b8:6e:1c:03:03:46:2e:cc:
ec:69:50:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz+N7o9LTbdxWEIWpBz14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlODIzZjZkZGE2N2QyODNhOWY0MWE3MjkwOTkwNmFj
OWE4MzcwHhcNMjUxMTA0MTcwMDE1WhcNMjUxMTA1MTcwMDE1WjAzMTEwLwYDVQQD
EygwMTYyY2Q5N2JiYWFlNjNmMWQzNTk4NDdjZjA2NWJkMTc0NmE5ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreeu3lUyYUuDr2VP2Ffjmi16HHOY
O5IL46oss+TeK+U4m/MQVwYzOaINkhfRRuUCqJ+vyyJ4nB9SwTk8xjUCHdPFM1fC
3kCgRRmXEPHkAdz/oE8wdTwG0TTBqTnu9MVEWTUaiGqpFb4H5SWLkuz0xj5KtjUn
y4P72IyFnU9n9JzHCezZ4nXkqUIe44tpONqbeHSZ7SwNpCIhpZM1El9QfeVZVg8D
ESOK54pl2FKUNCLjGSsHfa63cQgmRZoYn/Xg0a4x656CwJqzrenqKhTV/j0FKYWN
ECxHcEun5wbCI2rVcYl5hcn6PG+UHXhu/IIjuH3Ep8ek9DmVYhzsjHNxPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFizZe7quY/HTWYR88GW9F0ap+gMB8GA1UdIwQY
MBaAFKPm6CP23aZ9KDqfQacpCZBqyag3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUt
MDBmMDBhZjFjOGQ3LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xOGExYmMtOTY3Yy00OTMxLTg1YjUtMDBmMDBhZjFjOGQ3
LzEvby1ib0lfYmRwbjBvT3A5QnB5a0prR3JKcURjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyf8iU6i
GpgJ6IWM0V8frVgRbEAatHmvCHQkqrr1Anxs/DISZRsB6TU5XviLIcZZiiHeZoFe
7I0G/tLDbsabV3VNQ+hhvSB44FA1GMjBGxPsTd4e/b8oi5scy8GExkdUzxGzyPeQ
ecrhT7SSoOnRjw4eMPMl6+O7BZiVHdNhg7wxmzxVNvZW7GcEgtWr3W6oZ+xLmPEb
IbNr1wkMMTMhA1hPb5aPGMkk9gGvf4v/6BkYRu1sOfFkfZUrcpmC+I+EthZUTW29
nGL+y5/aaLUE333kaWOXE4KBPQw3OrWNj+EIdCGW/9LPAzm06NfeVNKX7pjwD7hu
HAMDRi7M7GlQYA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:48 2025 by rpki-client