Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
File: o6_ki_2taeNcg9MTDTWJfM_F788.mft (raw, json)
Hash identifier: Th5UZ5rB6o0Z2UAsgzBkNkDOu7HLRz8iu/ybfBsh7Bo=
Subject key identifier: 7E:95:1C:22:A2:38:C1:19:C7:82:A1:A9:77:E0:1B:C7:ED:1B:E9:98
Authority key identifier: A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
Certificate issuer: /CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Certificate serial: 019A5150B4B114186DB0392977A6AD17397F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 00:00:34 +0000
Manifest this update: Wed 05 Nov 2025 00:00:34 +0000
Manifest next update: Thu 06 Nov 2025 00:00:34 +0000
Files and hashes: 1: o6_ki_2taeNcg9MTDTWJfM_F788.crl (hash: rp2RnjDOq1cdAXb/wDWN38CO7sb1uF74fQlGDvf98Jo=)
2: yJJQVGNjQhmrsnJJE0kyWxcJ5BQ.roa (hash: CX3qQ5t9dhBSwuFe9dR68/qAqasgLIYBBJFzVhxytCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b4:b1:14:18:6d:b0:39:29:77:a6:ad:17:39:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3afe48bfdad69e35c83d3130d35897ccfc5efcf
Validity
Not Before: Nov 5 00:00:34 2025 GMT
Not After : Nov 6 00:00:34 2025 GMT
Subject: CN=7e951c22a238c119c782a1a977e01bc7ed1be998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:49:6b:4b:b2:50:f1:92:0f:0f:f6:86:bf:1c:
27:6b:2e:0e:f9:b6:31:8e:79:40:df:47:ba:53:2b:
05:da:b0:ac:17:0b:2c:e7:27:47:73:7f:4c:ee:ee:
1c:93:73:ba:56:ed:69:aa:cb:e4:4d:e8:12:f8:fc:
67:53:3b:28:d4:49:07:70:f4:18:ed:83:1d:78:d7:
0a:36:d5:88:b7:70:f3:e6:ea:b4:cf:2f:82:ca:55:
cd:ff:c7:a5:c9:d4:5a:71:8b:e6:74:74:2d:7b:05:
f9:6f:66:8a:78:2c:e7:bf:d1:7f:68:aa:72:90:96:
c2:bc:69:20:87:72:3e:11:14:bb:ca:ec:07:e0:75:
8e:2a:83:fc:5e:f7:dd:da:3a:a2:21:c3:00:24:9d:
e3:70:f8:0f:53:47:e9:e6:17:f5:c6:4c:3d:32:3c:
c5:dc:10:9e:65:f7:a5:07:91:1d:da:48:ce:fd:da:
81:4a:71:ae:94:20:f9:1e:c2:06:57:0a:59:da:4e:
f2:e7:2a:30:25:80:18:f6:75:66:44:dd:a7:23:d8:
6d:84:5c:75:c6:7f:c0:7a:b0:9f:db:d1:f5:fe:b9:
9d:2d:e4:e6:a0:20:17:65:49:04:db:96:b7:50:e5:
b5:dd:37:b6:2f:fe:be:08:19:71:d7:67:34:2d:a1:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:95:1C:22:A2:38:C1:19:C7:82:A1:A9:77:E0:1B:C7:ED:1B:E9:98
X509v3 Authority Key Identifier:
keyid:A3:AF:E4:8B:FD:AD:69:E3:5C:83:D3:13:0D:35:89:7C:CF:C5:EF:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_ki_2taeNcg9MTDTWJfM_F788.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8dad1a-f2ce-4939-8b0f-2fc16d2c0016/1/o6_ki_2taeNcg9MTDTWJfM_F788.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:11:c6:ca:51:8f:b2:d6:13:01:48:3c:43:24:3d:fd:10:dd:
85:55:19:af:dc:af:bf:1f:bd:9b:a7:01:75:ea:fb:c4:03:1f:
83:9d:bd:e5:e7:8c:d7:0c:63:76:e1:30:d0:0b:5b:e7:84:e1:
b9:01:f2:8b:15:59:72:1a:4e:43:90:6d:27:a9:08:0b:a7:c3:
fc:0c:27:40:f8:69:16:06:d5:c1:d0:bf:61:e5:be:f8:36:5c:
20:7a:5c:f9:6c:10:62:dc:ca:f3:e5:99:6d:85:6c:78:95:9e:
fc:c0:0e:25:43:55:77:b2:aa:bb:aa:3e:c9:13:e4:8f:56:72:
c0:bd:2e:6c:e5:05:7a:e2:bf:f8:83:60:1c:02:6a:b4:c1:30:
32:51:82:ee:b4:04:46:a3:4f:9f:8a:02:8d:58:e9:9f:4c:6d:
89:66:b4:76:97:86:fa:18:ae:55:4d:5b:1c:c6:bc:38:08:1d:
6d:13:fa:c5:0a:7e:ce:f7:12:c2:5e:37:41:d3:6a:97:a6:86:
7c:c6:3a:33:09:a7:f3:71:15:66:d8:9e:b3:a0:f7:82:0d:46:
20:ab:fd:9a:55:16:d2:e8:a2:2c:da:bf:92:b5:80:e2:a6:08:
b4:33:9d:e3:b3:5c:f7:50:c0:03:dc:f1:7f:eb:2c:50:15:62:
d6:45:68:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRULSxFBhtsDkpd6atFzl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZlNDhiZmRhZDY5ZTM1YzgzZDMxMzBkMzU4OTdjY2Zj
NWVmY2YwHhcNMjUxMTA1MDAwMDM0WhcNMjUxMTA2MDAwMDM0WjAzMTEwLwYDVQQD
Eyg3ZTk1MWMyMmEyMzhjMTE5Yzc4MmExYTk3N2UwMWJjN2VkMWJlOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0lrS7JQ8ZIPD/aGvxwnay4O+bYx
jnlA30e6UysF2rCsFwss5ydHc39M7u4ck3O6Vu1pqsvkTegS+PxnUzso1EkHcPQY
7YMdeNcKNtWIt3Dz5uq0zy+CylXN/8elydRacYvmdHQtewX5b2aKeCznv9F/aKpy
kJbCvGkgh3I+ERS7yuwH4HWOKoP8Xvfd2jqiIcMAJJ3jcPgPU0fp5hf1xkw9MjzF
3BCeZfelB5Ed2kjO/dqBSnGulCD5HsIGVwpZ2k7y5yowJYAY9nVmRN2nI9hthFx1
xn/AerCf29H1/rmdLeTmoCAXZUkE25a3UOW13Te2L/6+CBlx12c0LaHutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6VHCKiOMEZx4KhqXfgG8ftG+mYMB8GA1UdIwQY
MBaAFKOv5Iv9rWnjXIPTEw01iXzPxe/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYt
MmZjMTZkMmMwMDE2LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84ZGFkMWEtZjJjZS00OTM5LThiMGYtMmZjMTZkMmMwMDE2
LzEvbzZfa2lfMnRhZU5jZzlNVERUV0pmTV9GNzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohHGylGP
stYTAUg8QyQ9/RDdhVUZr9yvvx+9m6cBder7xAMfg5295eeM1wxjduEw0Atb54Th
uQHyixVZchpOQ5BtJ6kIC6fD/AwnQPhpFgbVwdC/YeW++DZcIHpc+WwQYtzK8+WZ
bYVseJWe/MAOJUNVd7Kqu6o+yRPkj1ZywL0ubOUFeuK/+INgHAJqtMEwMlGC7rQE
RqNPn4oCjVjpn0xtiWa0dpeG+hiuVU1bHMa8OAgdbRP6xQp+zvcSwl43QdNql6aG
fMY6Mwmn83EVZties6D3gg1GIKv9mlUW0uiiLNq/krWA4qYItDOd47Nc91DAA9zx
f+ssUBVi1kVofA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:00:57 2025 by rpki-client