Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: 79yyXd8dA+b39LPAtOhDcnZky8AidwI/1jPhzNrJ0U8=
Subject key identifier: 20:0D:17:8B:A9:7E:DF:E1:8F:7A:31:95:8A:21:4A:D8:FA:27:DE:E4
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 019A4EF459E08E0B42546BE345155BCFD0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: FeeN19Tq6KjyjydV7t1ccZoPY0TZTowM86tZboERLwI=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:59:e0:8e:0b:42:54:6b:e3:45:15:5b:cf:d0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=200d178ba97edfe18f7a31958a214ad8fa27dee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:db:8a:04:68:70:84:41:da:eb:57:8d:aa:
da:42:8a:9c:68:da:53:98:25:71:41:02:de:6c:5c:
0c:0e:3a:9b:ef:bb:5a:29:15:24:4e:e4:f1:c2:31:
33:5e:c3:a7:57:71:2f:c3:94:93:cd:c7:db:aa:48:
70:5c:14:b2:95:2c:bf:fb:6d:fd:63:5c:4f:cc:0f:
a4:46:c0:26:52:27:35:01:ee:7d:a4:7d:a0:95:ee:
a9:1f:ba:f8:d7:6d:5e:73:01:e1:aa:92:c5:be:27:
1f:1b:30:8d:d5:4f:25:0e:19:80:70:d2:3d:46:f2:
d9:c0:1a:d4:12:a4:8c:0f:9c:4e:7a:fb:04:2b:5f:
46:fa:6e:e9:f2:3d:83:51:12:e3:78:b0:c1:22:00:
71:77:90:04:3e:20:41:b6:b3:8b:7b:1a:1e:5b:92:
97:60:f9:dc:86:92:0f:18:86:00:24:7d:e8:e9:0a:
9d:67:44:1a:f9:13:ec:f6:3f:02:05:ad:bf:e4:ba:
a2:59:d8:50:94:43:36:cd:fb:80:62:41:7f:33:a2:
b6:fb:e8:51:be:13:ee:09:95:2d:66:5f:27:d3:97:
88:e6:6d:53:66:8a:b7:a7:59:8a:68:01:15:ed:2e:
60:a9:e0:e1:34:30:8c:98:aa:ef:60:f1:de:96:26:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:17:8B:A9:7E:DF:E1:8F:7A:31:95:8A:21:4A:D8:FA:27:DE:E4
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:1c:91:60:2b:51:db:9a:50:ca:b4:cc:bd:62:b8:09:6b:
27:69:35:bc:9d:48:e0:44:58:4a:9b:48:6f:ff:b5:a9:af:18:
d0:ad:e5:03:71:8b:2d:f1:c5:85:c0:c9:d0:98:9d:92:06:4b:
9e:19:19:21:c6:45:ab:bd:c9:23:7b:83:98:55:a5:77:4f:05:
10:70:f5:9b:69:3f:33:4b:7f:b1:e8:08:f6:50:96:15:48:32:
96:0c:9a:ef:12:c0:a6:8a:cc:55:59:04:3d:45:9d:fb:4b:85:
cf:fd:6e:49:d2:d8:81:ef:65:8c:a7:ea:da:5f:39:49:51:b8:
24:0c:bf:b9:ed:76:64:2c:57:6d:e4:aa:60:8d:dd:d6:34:ba:
c3:00:00:10:52:ef:3e:7a:53:00:9d:ac:c6:21:0e:83:b1:2a:
05:b2:85:45:ff:34:dd:35:0b:ac:17:3c:cb:30:ba:5f:d7:84:
cb:cd:c2:e8:9c:9f:80:1d:13:83:7c:36:36:ae:8d:bf:db:30:
23:37:4c:8c:af:f1:73:d6:e6:92:44:0c:ca:d0:82:07:8b:b0:
94:e7:b0:54:10:a9:ea:c9:e7:53:c6:04:92:cd:f9:fd:0e:44:
a7:05:e1:c6:49:85:0b:3b:08:03:d9:ed:1f:62:56:a0:15:41:
1e:1e:3d:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9FngjgtCVGvjRRVbz9D4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh
ODU2NGEwHhcNMjUxMTA0MTMwMDI3WhcNMjUxMTA1MTMwMDI3WjAzMTEwLwYDVQQD
EygyMDBkMTc4YmE5N2VkZmUxOGY3YTMxOTU4YTIxNGFkOGZhMjdkZWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFPbigRocIRB2utXjaraQoqcaNpT
mCVxQQLebFwMDjqb77taKRUkTuTxwjEzXsOnV3Evw5STzcfbqkhwXBSylSy/+239
Y1xPzA+kRsAmUic1Ae59pH2gle6pH7r4121ecwHhqpLFvicfGzCN1U8lDhmAcNI9
RvLZwBrUEqSMD5xOevsEK19G+m7p8j2DURLjeLDBIgBxd5AEPiBBtrOLexoeW5KX
YPnchpIPGIYAJH3o6QqdZ0Qa+RPs9j8CBa2/5LqiWdhQlEM2zfuAYkF/M6K2++hR
vhPuCZUtZl8n05eI5m1TZoq3p1mKaAEV7S5gqeDhNDCMmKrvYPHelibGlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCANF4upft/hj3oxlYohStj6J97kMB8GA1UdIwQY
MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt
ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj
LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh0ckWAr
UduaUMq0zL1iuAlrJ2k1vJ1I4ERYSptIb/+1qa8Y0K3lA3GLLfHFhcDJ0JidkgZL
nhkZIcZFq73JI3uDmFWld08FEHD1m2k/M0t/segI9lCWFUgylgya7xLAporMVVkE
PUWd+0uFz/1uSdLYge9ljKfq2l85SVG4JAy/ue12ZCxXbeSqYI3d1jS6wwAAEFLv
PnpTAJ2sxiEOg7EqBbKFRf803TULrBc8yzC6X9eEy83C6JyfgB0Tg3w2Nq6Nv9sw
IzdMjK/xc9bmkkQMytCCB4uwlOewVBCp6snnU8YEks35/Q5EpwXhxkmFCzsIA9nt
H2JWoBVBHh49uw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:41 2025 by rpki-client