Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: QNpralmRCXuoL0Oeoo1S6Lj64o+GZtG/3ZxQ1yGPjd4=
Subject key identifier: 4B:8B:7D:56:3B:5F:93:55:C9:C7:A3:9C:55:35:AA:9A:83:28:34:56
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019A53AD3886C01B39164B98A4C64904ECD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 0162
Signing time: Wed 05 Nov 2025 11:00:52 +0000
Manifest this update: Wed 05 Nov 2025 11:00:52 +0000
Manifest next update: Thu 06 Nov 2025 11:00:52 +0000
Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=)
2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: i5A53jeNdJ1Ul8dnPOGYX5L4hoedONdHlLS8RdG5tx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:38:86:c0:1b:39:16:4b:98:a4:c6:49:04:ec:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Nov 5 11:00:52 2025 GMT
Not After : Nov 6 11:00:52 2025 GMT
Subject: CN=4b8b7d563b5f9355c9c7a39c5535aa9a83283456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:36:cc:d5:4f:e0:eb:f6:cc:4b:03:4d:1c:
97:34:a5:2d:8e:0e:64:5b:c7:5d:b1:05:f6:f1:5d:
23:2f:dd:3c:44:50:48:bc:d6:f6:6f:00:22:fb:9e:
a3:52:0e:f2:22:1a:cd:96:45:9d:c8:2d:2e:6e:15:
cc:c2:68:82:90:ca:a8:8f:94:15:99:92:80:9f:24:
2a:03:2e:2a:07:17:8c:ef:76:15:1b:af:da:38:49:
db:7f:1a:c3:ff:33:72:9b:c2:e4:3a:d3:8f:e8:32:
5c:8f:30:5e:75:f4:b8:a9:a3:47:f9:3d:44:13:92:
40:0d:42:39:95:8a:95:f3:21:9f:d1:ef:6b:8e:cb:
cd:53:d3:b6:09:0f:b6:9d:0b:de:12:17:5b:97:52:
39:0f:f6:0b:a6:3d:94:7e:72:c0:46:25:63:01:39:
3d:82:d7:3d:7b:7d:9f:88:de:eb:4f:9f:ee:a7:ed:
58:dc:39:c4:b4:67:51:a4:ab:ea:e7:57:62:fb:74:
fa:10:a0:24:e2:8a:44:dc:93:3f:b6:8f:37:04:a8:
3d:b5:48:f6:74:84:d5:41:32:85:37:b4:12:21:42:
9a:1d:7e:bb:62:11:d0:9f:23:52:86:ec:c0:be:cb:
5a:37:f8:00:a8:81:8d:84:d2:da:8a:e5:f2:be:e0:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:7D:56:3B:5F:93:55:C9:C7:A3:9C:55:35:AA:9A:83:28:34:56
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:71:dc:5a:4d:e3:2e:64:48:67:64:cb:e7:3e:8a:f1:c6:10:
bb:fa:c9:82:a6:53:2c:3b:06:6b:57:84:03:a1:64:1a:d4:54:
43:2b:37:19:07:e8:64:60:6e:e7:f4:a7:a3:5e:b7:44:dd:28:
d6:40:85:08:2c:41:f6:65:87:f6:f2:0c:32:9a:19:08:e5:5a:
34:6c:4d:a5:68:f6:84:01:21:75:ee:d7:6b:6e:1f:f6:9f:3a:
80:88:4c:1b:d0:de:02:1e:94:17:12:59:45:31:83:f5:1a:8b:
6c:8d:a5:32:87:0d:5e:ef:99:b6:ff:9e:98:e3:fe:8e:c4:81:
28:f9:b1:fe:69:e8:57:d4:f7:46:e7:97:7b:66:3d:3c:84:cd:
8a:54:3a:5a:48:c2:c2:22:dd:cd:2e:d1:75:47:b0:94:68:f2:
1d:14:3e:37:03:19:aa:04:af:0f:fb:3f:6b:74:65:74:52:c8:
49:6a:f7:6d:ce:9b:69:2d:6f:6a:6f:42:1f:62:96:6b:d5:00:
e1:a4:e3:77:1b:88:89:51:95:dc:d0:a3:53:44:0d:e3:fc:04:
17:fd:d9:16:a2:c4:14:b8:44:b6:e8:af:f2:a2:72:c9:90:af:
13:e7:4c:9f:99:3a:bf:a2:ca:69:ae:a7:98:72:84:64:5b:a6:
71:02:9b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrTiGwBs5FkuYpMZJBOzSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzY2Y5YjY0NjUxNjkyOGI1ZDA2YzJhODE5ZWIyZGJjMGZl
OTkyMGEwHhcNMjUxMTA1MTEwMDUyWhcNMjUxMTA2MTEwMDUyWjAzMTEwLwYDVQQD
Eyg0YjhiN2Q1NjNiNWY5MzU1YzljN2EzOWM1NTM1YWE5YTgzMjgzNDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquU2zNVP4Ov2zEsDTRyXNKUtjg5k
W8ddsQX28V0jL908RFBIvNb2bwAi+56jUg7yIhrNlkWdyC0ubhXMwmiCkMqoj5QV
mZKAnyQqAy4qBxeM73YVG6/aOEnbfxrD/zNym8LkOtOP6DJcjzBedfS4qaNH+T1E
E5JADUI5lYqV8yGf0e9rjsvNU9O2CQ+2nQveEhdbl1I5D/YLpj2UfnLARiVjATk9
gtc9e32fiN7rT5/up+1Y3DnEtGdRpKvq51di+3T6EKAk4opE3JM/to83BKg9tUj2
dITVQTKFN7QSIUKaHX67YhHQnyNShuzAvstaN/gAqIGNhNLaiuXyvuA4WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuLfVY7X5NVycejnFU1qpqDKDRWMB8GA1UdIwQY
MBaAFKPPm2RlFpKLXQbCqBnrLbwP6ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYt
Mjg5Njk2Y2M5OWI5LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zOTRkMDctMDVjYy00ZjcyLWJkNDYtMjg5Njk2Y2M5OWI5
LzEvbzgtYlpHVVdrb3RkQnNLb0dlc3R2QV9wa2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXHcWk3j
LmRIZ2TL5z6K8cYQu/rJgqZTLDsGa1eEA6FkGtRUQys3GQfoZGBu5/Sno163RN0o
1kCFCCxB9mWH9vIMMpoZCOVaNGxNpWj2hAEhde7Xa24f9p86gIhMG9DeAh6UFxJZ
RTGD9RqLbI2lMocNXu+Ztv+emOP+jsSBKPmx/mnoV9T3RueXe2Y9PITNilQ6WkjC
wiLdzS7RdUewlGjyHRQ+NwMZqgSvD/s/a3RldFLISWr3bc6baS1vam9CH2KWa9UA
4aTjdxuIiVGV3NCjU0QN4/wEF/3ZFqLEFLhEtuiv8qJyyZCvE+dMn5k6v6LKaa6n
mHKEZFumcQKb8Q==
-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:39 2025 by rpki-client