Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: TdbMh6MDBwYj96ElbH7lCOl1IRP4/BR2W7RgzNp0bSM=
Subject key identifier: 8B:D8:3C:38:50:D2:49:C0:79:93:C0:76:30:CB:55:12:13:90:EB:55
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 019A55D1FECE4BFE38CEBE776C282077B23D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 21:00:16 +0000
Manifest this update: Wed 05 Nov 2025 21:00:16 +0000
Manifest next update: Thu 06 Nov 2025 21:00:16 +0000
Files and hashes: 1: NFVItNq2OuycBZAKwujdNRPdjR4.roa (hash: kFLAiEsjdkmomPuGBpZgEpCt6qeMdIVgeardYp2BucY=)
2: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: r8DaLiL9cmFAGxmwejDoqfpocDPSeGf/k+8gx8Sthl8=)
3: QheNcxsOMuaxLgjUMz8IKhAE4zI.roa (hash: 1qU8I97VIdY7GQVn2XafsvIYaI5J0RtyUS8ikCjbw40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d1:fe:ce:4b:fe:38:ce:be:77:6c:28:20:77:b2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Nov 5 21:00:16 2025 GMT
Not After : Nov 6 21:00:16 2025 GMT
Subject: CN=8bd83c3850d249c07993c07630cb55121390eb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c1:64:a9:84:59:84:af:1b:b6:fb:08:b4:cf:
0f:bc:fb:8f:60:26:a1:80:79:e8:9d:15:b8:f9:8d:
32:ed:bc:c9:0c:c4:bf:46:bf:4a:79:cf:04:b0:41:
05:90:8b:18:c0:ef:0b:83:6b:c6:54:d1:e6:62:f7:
7e:53:f2:64:6f:89:8b:87:4e:44:b3:d5:7f:c6:06:
a9:8e:af:f1:97:87:70:2f:ac:42:37:b5:9c:51:cd:
ca:3d:f6:08:f5:f4:f5:8b:58:05:3a:20:47:ca:89:
92:8f:92:05:71:23:92:20:74:22:cf:be:77:c9:00:
a6:d2:9f:8d:9a:9c:80:98:47:d8:e2:6d:d4:d1:9e:
b6:28:aa:f4:7a:74:6d:92:a2:b5:bd:c9:d5:89:7a:
dd:4d:39:50:47:87:f4:34:df:5c:a9:fb:a8:ba:fc:
46:40:28:26:95:75:7a:03:3e:2a:89:a6:f2:3d:e5:
4a:16:82:11:13:4a:4a:9d:27:83:a5:53:ba:79:81:
b3:ed:c8:6d:f4:da:e8:82:9b:46:10:03:97:62:ae:
85:00:cc:97:5b:9c:e3:c0:d2:40:2a:58:bb:c3:3b:
8a:d4:4c:e2:92:1d:f6:5e:68:36:18:cc:12:30:ed:
33:c0:10:69:59:10:b1:71:18:ac:d7:0b:d8:b8:27:
b6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D8:3C:38:50:D2:49:C0:79:93:C0:76:30:CB:55:12:13:90:EB:55
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:80:d8:38:d9:b0:b3:db:8a:0b:e6:18:9e:f9:1a:7d:0f:10:
34:eb:d3:a6:43:16:a9:2a:7c:cd:81:fc:cd:33:5b:4d:7a:d9:
95:26:1a:c0:a4:b1:c0:80:f2:f9:05:6e:8f:a0:a8:43:57:31:
7f:cc:df:a5:ee:d4:ef:43:3c:be:f0:8f:4f:00:2e:b7:f6:f5:
0a:7f:ca:8b:b9:36:40:cc:69:b0:9e:d0:6b:94:59:63:08:74:
e5:a0:a3:09:db:b1:e8:1d:8a:62:26:bc:69:90:f0:fe:f4:71:
8a:5d:06:3d:bc:bb:8f:20:ce:44:d5:6e:63:d0:eb:61:02:c4:
f2:6e:af:8c:e8:5a:51:ff:15:b2:f1:72:ec:d2:74:4b:39:3a:
e6:02:96:af:bb:aa:44:43:c5:cd:3b:f2:de:dc:4b:7a:18:81:
19:bb:7e:95:bb:13:94:07:dc:2e:2e:39:8b:aa:af:5b:b9:41:
56:f4:07:b9:2c:12:8a:2d:b2:1e:d2:3b:1d:70:29:94:15:07:
5c:81:5e:35:bf:a0:91:b1:c4:4d:9d:18:02:b3:f0:a1:f5:17:
50:9a:f8:75:e7:2d:c8:64:99:37:2a:47:5c:9d:ff:50:dc:1f:
88:af:be:6b:93:53:95:cd:1b:05:d2:5c:61:d2:61:0e:96:f9:
7c:c7:15:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpV0f7OS/44zr53bCggd7I9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGUyY2Q1MjE1ZTkzYmZhMGNhNmRmOGIyYzFmNWVkMmM5
NGFmNzQwHhcNMjUxMTA1MjEwMDE2WhcNMjUxMTA2MjEwMDE2WjAzMTEwLwYDVQQD
Eyg4YmQ4M2MzODUwZDI0OWMwNzk5M2MwNzYzMGNiNTUxMjEzOTBlYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMFkqYRZhK8btvsItM8PvPuPYCah
gHnonRW4+Y0y7bzJDMS/Rr9Kec8EsEEFkIsYwO8Lg2vGVNHmYvd+U/Jkb4mLh05E
s9V/xgapjq/xl4dwL6xCN7WcUc3KPfYI9fT1i1gFOiBHyomSj5IFcSOSIHQiz753
yQCm0p+NmpyAmEfY4m3U0Z62KKr0enRtkqK1vcnViXrdTTlQR4f0NN9cqfuouvxG
QCgmlXV6Az4qiabyPeVKFoIRE0pKnSeDpVO6eYGz7cht9NrogptGEAOXYq6FAMyX
W5zjwNJAKli7wzuK1Ezikh32Xmg2GMwSMO0zwBBpWRCxcRis1wvYuCe23QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvYPDhQ0knAeZPAdjDLVRITkOtVMB8GA1UdIwQY
MBaAFDveLNUhXpO/oMpt+LLB9e0slK90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmIt
ZGIzMTlhMzFiZGY3LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9jNTNhM2UtZjkwZC00NzQyLTg0ZmItZGIzMTlhMzFiZGY3
LzEvTzk0czFTRmVrNy1neW0zNHNzSDE3U3lVcjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroDYONmw
s9uKC+YYnvkafQ8QNOvTpkMWqSp8zYH8zTNbTXrZlSYawKSxwIDy+QVuj6CoQ1cx
f8zfpe7U70M8vvCPTwAut/b1Cn/Ki7k2QMxpsJ7Qa5RZYwh05aCjCdux6B2KYia8
aZDw/vRxil0GPby7jyDORNVuY9DrYQLE8m6vjOhaUf8VsvFy7NJ0Szk65gKWr7uq
REPFzTvy3txLehiBGbt+lbsTlAfcLi45i6qvW7lBVvQHuSwSii2yHtI7HXAplBUH
XIFeNb+gkbHETZ0YArPwofUXUJr4dectyGSZNypHXJ3/UNwfiK++a5NTlc0bBdJc
YdJhDpb5fMcV+w==
-----END CERTIFICATE-----
Generated at Thu Nov 6 05:56:34 2025 by rpki-client