Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
File: o0kR6dK76mamwkAxnd4wez3vSME.mft (raw, json)
Hash identifier: gE+2PacCIZHy8yyzCUCOC5DrL9Vzp3h6TjslMlSWFH0=
Subject key identifier: 5C:FD:3A:2D:F7:8D:1A:6E:17:FA:84:22:30:16:A3:4E:CD:E4:75:D8
Authority key identifier: A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
Certificate issuer: /CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Certificate serial: 019A4EF49A1FBAD26206AD6AFBBAB6CE24F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:44 +0000
Manifest this update: Tue 04 Nov 2025 13:00:44 +0000
Manifest next update: Wed 05 Nov 2025 13:00:44 +0000
Files and hashes: 1: o0kR6dK76mamwkAxnd4wez3vSME.crl (hash: P1ausdFi3YlkG6b5wY2zoVDtE1PrKSEZSRxQAk6uOPw=)
2: xtKHi03X1rn73LOhmyBcH9uojR8.roa (hash: zBGWZf4vklDM0mAZkH6NtmjYXdkW+BEyoU8BQG385Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9a:1f:ba:d2:62:06:ad:6a:fb:ba:b6:ce:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34911e9d2bbea66a6c240319dde307b3def48c1
Validity
Not Before: Nov 4 13:00:44 2025 GMT
Not After : Nov 5 13:00:44 2025 GMT
Subject: CN=5cfd3a2df78d1a6e17fa84223016a34ecde475d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:03:da:1c:65:9c:67:51:d0:e8:da:00:e8:b2:
1c:50:fc:6f:fb:0b:ab:61:ba:de:0c:e2:14:72:c3:
fc:12:a3:02:9a:0c:03:ba:7e:fe:62:00:21:0e:d6:
f3:50:35:ce:72:ca:ea:b0:b7:2f:2a:f1:1a:21:2c:
94:50:72:40:65:51:cc:cc:f8:a1:13:d8:2c:d7:09:
c7:cd:4f:33:7f:ce:0c:7f:8f:b9:3d:5b:55:4b:bb:
11:35:9e:b9:f1:b0:43:d6:ed:8d:b3:ab:8a:d7:7e:
e8:6f:dc:85:f3:e3:05:bc:5a:72:1c:fc:d2:ef:5b:
d3:9e:3b:51:0f:33:8b:a7:37:53:55:f8:84:7e:c8:
04:d3:00:e5:e3:b3:71:dd:1d:8c:8e:94:65:bd:3f:
5b:e8:88:66:63:2e:cc:bf:c5:11:85:ad:dc:f8:ad:
42:ae:bc:ac:07:a4:5a:2d:ef:bf:4a:b7:a3:45:f8:
f5:d1:1d:e1:a4:05:4e:da:74:d4:ca:f7:82:17:c9:
1d:32:dc:a7:bf:d3:b5:f8:35:df:16:97:1b:bf:6e:
90:f6:82:10:5f:7d:72:7f:22:9f:a4:de:bb:ab:00:
78:03:40:2f:95:da:e0:37:3f:36:3f:58:e5:2a:25:
fd:b7:ac:78:7d:25:87:f8:6b:3a:4d:dd:14:1b:16:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FD:3A:2D:F7:8D:1A:6E:17:FA:84:22:30:16:A3:4E:CD:E4:75:D8
X509v3 Authority Key Identifier:
keyid:A3:49:11:E9:D2:BB:EA:66:A6:C2:40:31:9D:DE:30:7B:3D:EF:48:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o0kR6dK76mamwkAxnd4wez3vSME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/14486a-a7e6-4113-93b1-15cdc9a8c38f/1/o0kR6dK76mamwkAxnd4wez3vSME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:cf:d6:f9:ef:12:61:40:61:5c:a6:11:bb:77:9c:c3:67:
ba:86:d6:9f:83:6b:5d:ea:31:64:6f:c9:db:4d:da:6c:71:cb:
87:7d:2b:7b:0c:32:3b:ec:38:4a:b6:94:6a:56:26:51:31:cb:
45:05:d8:2e:6b:a5:93:75:5f:e2:f7:df:b6:96:30:ad:50:4b:
00:97:0d:ed:a2:5c:71:48:88:e8:6b:57:ac:98:4a:d7:f0:7c:
9f:e8:7c:ee:b6:b9:72:f8:c9:c8:b0:86:e0:a5:6a:1e:84:e4:
eb:14:53:04:c0:19:3c:01:be:1b:28:17:04:98:3e:b2:fe:dd:
2d:1e:81:41:42:54:37:0e:1a:4f:4f:9a:59:89:d1:ea:f6:b4:
45:fc:8e:79:97:5d:26:1b:45:23:36:7e:70:c8:f7:16:1e:b9:
8a:3b:ef:90:20:28:bf:2d:c4:d2:c7:d0:25:d1:ed:12:6d:e3:
81:dd:9b:9a:4e:71:20:4a:84:06:31:55:6e:05:ed:fb:2f:61:
56:54:e3:55:45:38:eb:de:9b:f5:79:63:a3:7b:e8:af:f2:1a:
1b:04:31:5b:79:e4:55:e4:08:28:ce:80:b9:41:97:a3:51:90:
a4:bf:35:c0:ab:c3:5c:df:59:55:ab:96:21:72:b1:f2:20:ec:
8a:d6:ee:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9JofutJiBq1q+7q2ziT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNDkxMWU5ZDJiYmVhNjZhNmMyNDAzMTlkZGUzMDdiM2Rl
ZjQ4YzEwHhcNMjUxMTA0MTMwMDQ0WhcNMjUxMTA1MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg1Y2ZkM2EyZGY3OGQxYTZlMTdmYTg0MjIzMDE2YTM0ZWNkZTQ3NWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgPaHGWcZ1HQ6NoA6LIcUPxv+wur
YbreDOIUcsP8EqMCmgwDun7+YgAhDtbzUDXOcsrqsLcvKvEaISyUUHJAZVHMzPih
E9gs1wnHzU8zf84Mf4+5PVtVS7sRNZ658bBD1u2Ns6uK137ob9yF8+MFvFpyHPzS
71vTnjtRDzOLpzdTVfiEfsgE0wDl47Nx3R2MjpRlvT9b6IhmYy7Mv8URha3c+K1C
rrysB6RaLe+/SrejRfj10R3hpAVO2nTUyveCF8kdMtynv9O1+DXfFpcbv26Q9oIQ
X31yfyKfpN67qwB4A0AvldrgNz82P1jlKiX9t6x4fSWH+Gs6Td0UGxbC7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFz9Oi33jRpuF/qEIjAWo07N5HXYMB8GA1UdIwQY
MBaAFKNJEenSu+pmpsJAMZ3eMHs970jBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEt
MTVjZGM5YThjMzhmLzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xNDQ4NmEtYTdlNi00MTEzLTkzYjEtMTVjZGM5YThjMzhm
LzEvbzBrUjZkSzc2bWFtd2tBeG5kNHdlejN2U01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2nP1vnv
EmFAYVymEbt3nMNnuobWn4NrXeoxZG/J203abHHLh30rewwyO+w4SraUalYmUTHL
RQXYLmulk3Vf4vfftpYwrVBLAJcN7aJccUiI6GtXrJhK1/B8n+h87ra5cvjJyLCG
4KVqHoTk6xRTBMAZPAG+GygXBJg+sv7dLR6BQUJUNw4aT0+aWYnR6va0RfyOeZdd
JhtFIzZ+cMj3Fh65ijvvkCAovy3E0sfQJdHtEm3jgd2bmk5xIEqEBjFVbgXt+y9h
VlTjVUU4696b9Xljo3vor/IaGwQxW3nkVeQIKM6AuUGXo1GQpL81wKvDXN9ZVauW
IXKx8iDsitbuhQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:38 2025 by rpki-client