Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: dXsbDxC+HR/Fggn/BP16UtrmNXphTrxsUQsCDhVSaNU=
Subject key identifier: D5:8A:FA:3B:8C:FE:DF:7D:B6:8B:9F:BE:13:EE:18:D5:4A:76:0D:5C
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 019A52D1544256EDD1E125A82D0331C8C24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 1289
Signing time: Wed 05 Nov 2025 07:00:41 +0000
Manifest this update: Wed 05 Nov 2025 07:00:41 +0000
Manifest next update: Thu 06 Nov 2025 07:00:41 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: ltHtNSv7CGNzOfXoMmqWcEaede61c4GGtsAYDN4piW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:54:42:56:ed:d1:e1:25:a8:2d:03:31:c8:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Nov 5 07:00:41 2025 GMT
Not After : Nov 6 07:00:41 2025 GMT
Subject: CN=d58afa3b8cfedf7db68b9fbe13ee18d54a760d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:30:1f:68:a3:ff:65:c1:5d:0c:34:ad:d3:9c:
db:14:a6:07:17:27:f4:fa:fd:22:0a:a3:9d:1a:2d:
32:65:08:7c:a4:1a:b7:1b:60:34:4f:45:5d:6a:d3:
2e:10:3a:d6:49:ba:ec:0f:96:ea:f0:d8:fc:7d:72:
c5:b1:6b:0a:e5:82:1a:a0:45:2a:70:22:f7:e0:08:
30:b3:4d:b3:44:0e:db:d6:1f:62:f0:a8:a9:0b:c2:
9f:f4:5a:3d:24:c0:72:6f:fd:a8:45:4a:92:d0:ac:
d3:f7:01:2a:19:a2:9a:0a:35:d7:49:a9:b7:b8:28:
97:d6:58:bd:c8:2b:e0:68:7c:b6:26:de:9f:03:58:
32:4e:ed:10:b3:4f:e1:3d:a8:64:76:67:58:e9:85:
f4:ce:88:48:7a:8a:61:5c:48:50:19:25:eb:c0:7f:
ad:de:7f:74:f3:25:8f:2e:76:1d:55:eb:da:55:25:
b3:a6:c8:98:90:66:92:c9:85:e1:76:0e:bc:f3:24:
b3:52:9e:66:98:a5:06:22:d9:a4:e8:78:f7:1c:84:
bc:51:cf:d1:71:d1:2f:0d:dd:da:09:f1:1c:30:81:
b8:05:ee:31:1a:40:16:ca:eb:a6:86:e3:f8:06:4a:
d4:31:9f:7e:ba:c3:fc:84:71:b4:cb:1f:eb:a5:c5:
0a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8A:FA:3B:8C:FE:DF:7D:B6:8B:9F:BE:13:EE:18:D5:4A:76:0D:5C
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e1:f9:e4:a1:1b:87:2e:54:fa:23:d1:13:13:54:e6:65:1b:
8a:54:ff:71:be:dc:8b:7e:ea:51:bf:e2:56:f6:47:ba:24:76:
33:36:ef:a4:30:77:54:f5:e7:a4:ea:cf:89:04:7e:ed:f4:25:
5b:95:0d:50:4c:8c:bd:cd:53:e4:25:ea:05:81:36:65:ef:f9:
0b:41:6e:f3:fd:5a:f1:54:1a:86:e9:3f:bb:dd:46:b3:ce:9d:
4a:6d:42:8b:b3:c2:34:22:15:7a:63:68:34:37:4f:55:99:28:
ac:81:b1:43:3b:68:40:f9:63:93:3e:a9:77:22:16:a4:5e:cf:
f9:ff:cc:83:d7:f9:3e:5e:f7:a5:2b:de:88:64:68:35:a9:b4:
9a:b6:99:de:ab:72:03:bd:11:76:98:23:30:eb:43:be:f6:d1:
aa:3e:81:32:2c:3f:66:9d:96:a5:62:a2:fb:05:85:69:2e:03:
fd:dd:46:8b:66:18:9d:3f:e6:91:0b:a5:cb:c3:35:fb:cc:fc:
1b:5a:07:d9:df:50:03:6f:3b:c1:a3:4b:b4:84:21:98:d1:82:
a9:27:ac:22:94:be:50:44:33:45:74:3d:01:f0:2e:76:28:27:
fd:18:27:16:b3:33:6f:92:0e:67:d0:be:5a:49:cf:fc:b1:e2:
52:a4:5a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0VRCVu3R4SWoLQMxyMJPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTU1YzYwNzI1NGQxZTJiMDUxMWE4NTZlNzAwMzlmZmFm
NDMwMzIwHhcNMjUxMTA1MDcwMDQxWhcNMjUxMTA2MDcwMDQxWjAzMTEwLwYDVQQD
EyhkNThhZmEzYjhjZmVkZjdkYjY4YjlmYmUxM2VlMThkNTRhNzYwZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTAfaKP/ZcFdDDSt05zbFKYHFyf0
+v0iCqOdGi0yZQh8pBq3G2A0T0VdatMuEDrWSbrsD5bq8Nj8fXLFsWsK5YIaoEUq
cCL34Agws02zRA7b1h9i8KipC8Kf9Fo9JMByb/2oRUqS0KzT9wEqGaKaCjXXSam3
uCiX1li9yCvgaHy2Jt6fA1gyTu0Qs0/hPahkdmdY6YX0zohIeophXEhQGSXrwH+t
3n908yWPLnYdVevaVSWzpsiYkGaSyYXhdg688ySzUp5mmKUGItmk6Hj3HIS8Uc/R
cdEvDd3aCfEcMIG4Be4xGkAWyuumhuP4BkrUMZ9+usP8hHG0yx/rpcUK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWK+juM/t99toufvhPuGNVKdg1cMB8GA1UdIwQY
MBaAFKPlXGByVNHisFEahW5wA5/69DAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEt
MmQzNjFlNGYzNDVjLzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEtMmQzNjFlNGYzNDVj
LzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOH55KEb
hy5U+iPRExNU5mUbilT/cb7ci37qUb/iVvZHuiR2MzbvpDB3VPXnpOrPiQR+7fQl
W5UNUEyMvc1T5CXqBYE2Ze/5C0Fu8/1a8VQahuk/u91Gs86dSm1Ci7PCNCIVemNo
NDdPVZkorIGxQztoQPljkz6pdyIWpF7P+f/Mg9f5Pl73pSveiGRoNam0mraZ3qty
A70RdpgjMOtDvvbRqj6BMiw/Zp2WpWKi+wWFaS4D/d1Gi2YYnT/mkQuly8M1+8z8
G1oH2d9QA287waNLtIQhmNGCqSesIpS+UEQzRXQ9AfAudign/RgnFrMzb5IOZ9C+
WknP/LHiUqRaZA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:33:23 2025 by rpki-client