Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
File: _o6FIymApj8NTfWwSRY-P9AvVLM.mft (raw, json)
Hash identifier: bKzf+Kzm8kUiE0azEx0ukLeTtCjdMc2zPq5b3hpOgM4=
Subject key identifier: 67:F2:DF:08:20:88:C0:2A:16:9E:F4:6A:B9:52:81:60:F8:D1:63:4C
Authority key identifier: FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
Certificate issuer: /CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Certificate serial: 019A4F62934A0924EAB7C1EC6EFA02DE93C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
Manifest number: 0B85
Signing time: Tue 04 Nov 2025 15:00:51 +0000
Manifest this update: Tue 04 Nov 2025 15:00:51 +0000
Manifest next update: Wed 05 Nov 2025 15:00:51 +0000
Files and hashes: 1: 7IkFNxuEd7zYMJ5GFmWYCrb0D3k.roa (hash: EbQqPJKQBhTvoE7/qrp3Wi8FH8cq4X28q+E9y9x/db0=)
2: _o6FIymApj8NTfWwSRY-P9AvVLM.crl (hash: cus7UN4rbNy6cgjgpNj17EQUUvwCBVtYJuKXJCRpVUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:93:4a:09:24:ea:b7:c1:ec:6e:fa:02:de:93:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8e85232980a63f0d4df5b049163e3fd02f54b3
Validity
Not Before: Nov 4 15:00:51 2025 GMT
Not After : Nov 5 15:00:51 2025 GMT
Subject: CN=67f2df082088c02a169ef46ab9528160f8d1634c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9f:9c:b9:11:d0:50:1f:8d:22:ec:e5:08:e6:
5f:98:4f:e3:fe:6c:26:23:c0:6d:25:6e:1f:5b:f5:
c0:91:36:ca:96:bf:78:79:06:a0:3c:aa:e7:ed:c5:
b7:e7:bd:36:ac:42:04:bd:a0:63:05:a3:e8:e0:27:
e0:2e:76:78:64:0a:da:df:ec:72:9b:5f:16:ef:ba:
45:a2:e2:a1:48:73:93:f8:f8:9a:5a:3e:4c:3d:43:
e3:cc:ed:12:4d:5c:39:09:d6:e4:51:e4:9d:54:9d:
13:45:a9:05:06:eb:a8:8d:65:fd:91:44:82:b3:2e:
d4:2f:f7:bd:57:92:2a:59:6d:04:93:eb:4a:e9:b5:
7b:40:53:c3:be:27:19:c9:b3:7b:96:91:c5:61:8e:
b4:01:b3:ba:8b:19:7d:ce:73:af:98:40:7e:28:3c:
e1:40:54:37:1d:6b:d8:4c:cb:72:07:05:73:d2:e7:
70:e4:4c:5d:34:6d:1e:62:78:3a:f0:c4:4a:86:91:
b4:39:d7:c7:ad:d3:fa:6b:df:ee:53:dc:51:8d:4c:
0e:a7:93:85:ee:2a:ab:e7:ce:20:21:2e:c5:8c:7b:
6c:51:32:5e:8d:05:b4:2d:22:0a:38:4a:e8:f6:9d:
09:f7:d8:26:81:b7:57:6f:a1:8d:54:37:9f:7f:9e:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:DF:08:20:88:C0:2A:16:9E:F4:6A:B9:52:81:60:F8:D1:63:4C
X509v3 Authority Key Identifier:
keyid:FE:8E:85:23:29:80:A6:3F:0D:4D:F5:B0:49:16:3E:3F:D0:2F:54:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_o6FIymApj8NTfWwSRY-P9AvVLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/d36b8b-8656-485b-93b2-3892aca277b0/1/_o6FIymApj8NTfWwSRY-P9AvVLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:88:81:16:08:3e:e7:40:dd:ef:3c:9a:d7:28:86:78:e0:91:
ec:e2:1a:01:e8:3a:15:c1:88:26:72:4b:13:eb:7c:05:39:67:
ed:a1:65:20:66:cd:45:6a:86:ce:8b:d1:11:e6:ea:c9:76:72:
9e:d5:c0:1d:93:85:b3:6e:a8:ef:af:f1:a3:a8:72:a8:ff:16:
a3:e8:ad:fa:92:e8:1b:a4:cf:db:bf:54:2a:0a:3e:c7:86:a2:
49:5d:80:43:f1:6d:3a:6e:39:2f:2b:42:34:f5:65:09:14:d9:
d3:e8:af:79:b7:16:8a:8e:7b:d8:95:16:38:b3:85:06:02:7c:
0d:7e:9d:8b:86:1a:55:d7:29:68:d5:bb:19:0a:cb:35:bd:94:
83:ca:31:0b:05:3f:66:3a:5d:11:36:0a:fb:a5:d6:de:6e:f6:
94:09:28:b3:40:11:54:e1:ff:e5:86:46:96:b8:24:25:89:92:
72:12:2a:11:66:8b:8b:3e:88:b1:ce:81:55:fb:84:58:c1:0e:
9a:bd:fa:0c:c5:68:cf:d6:05:14:66:6f:31:63:8c:2e:20:ed:
87:ff:b3:54:b3:7a:b5:fb:3d:0c:9f:34:81:b8:e9:fb:4f:7d:
8f:48:2c:9d:1f:58:6c:b6:07:be:64:07:4c:f1:a6:e5:44:7b:
bb:0c:29:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYpNKCSTqt8HsbvoC3pPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlOGU4NTIzMjk4MGE2M2YwZDRkZjViMDQ5MTYzZTNmZDAy
ZjU0YjMwHhcNMjUxMTA0MTUwMDUxWhcNMjUxMTA1MTUwMDUxWjAzMTEwLwYDVQQD
Eyg2N2YyZGYwODIwODhjMDJhMTY5ZWY0NmFiOTUyODE2MGY4ZDE2MzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvp+cuRHQUB+NIuzlCOZfmE/j/mwm
I8BtJW4fW/XAkTbKlr94eQagPKrn7cW35702rEIEvaBjBaPo4CfgLnZ4ZAra3+xy
m18W77pFouKhSHOT+PiaWj5MPUPjzO0STVw5CdbkUeSdVJ0TRakFBuuojWX9kUSC
sy7UL/e9V5IqWW0Ek+tK6bV7QFPDvicZybN7lpHFYY60AbO6ixl9znOvmEB+KDzh
QFQ3HWvYTMtyBwVz0udw5ExdNG0eYng68MRKhpG0OdfHrdP6a9/uU9xRjUwOp5OF
7iqr584gIS7FjHtsUTJejQW0LSIKOEro9p0J99gmgbdXb6GNVDeff55AVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGfy3wggiMAqFp70arlSgWD40WNMMB8GA1UdIwQY
MBaAFP6OhSMpgKY/DU31sEkWPj/QL1SzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjIt
Mzg5MmFjYTI3N2IwLzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9kMzZiOGItODY1Ni00ODViLTkzYjItMzg5MmFjYTI3N2Iw
LzEvX282Rkl5bUFwajhOVGZXd1NSWS1QOUF2VkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYiBFgg+
50Dd7zya1yiGeOCR7OIaAeg6FcGIJnJLE+t8BTln7aFlIGbNRWqGzovREebqyXZy
ntXAHZOFs26o76/xo6hyqP8Wo+it+pLoG6TP279UKgo+x4aiSV2AQ/FtOm45LytC
NPVlCRTZ0+ivebcWio572JUWOLOFBgJ8DX6di4YaVdcpaNW7GQrLNb2Ug8oxCwU/
ZjpdETYK+6XW3m72lAkos0ARVOH/5YZGlrgkJYmSchIqEWaLiz6Isc6BVfuEWMEO
mr36DMVoz9YFFGZvMWOMLiDth/+zVLN6tfs9DJ80gbjp+099j0gsnR9YbLYHvmQH
TPGm5UR7uwwpPA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:15 2025 by rpki-client