Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
File: o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft (raw, json)
Hash identifier: CT3M6rgrR2LO5GQAd+Pw7gN1Ij6tF5pRHkPLCnSnxyo=
Subject key identifier: DB:03:A1:14:A9:5B:4D:43:E4:19:D3:77:26:32:E8:50:5A:6E:47:B9
Authority key identifier: A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
Certificate issuer: /CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Certificate serial: 019A53AD4B375A3F19B6682ACB44EB9CA3C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
Manifest number: 0C44
Signing time: Wed 05 Nov 2025 11:00:57 +0000
Manifest this update: Wed 05 Nov 2025 11:00:57 +0000
Manifest next update: Thu 06 Nov 2025 11:00:57 +0000
Files and hashes: 1: c6Nj79I3Har3nGytaNZUrH4rLp8.roa (hash: pFirwTzGIzOGXK1Oft6HDqGlSVO899FoeQfzjWxGxFc=)
2: o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl (hash: DLuxvxk2aj97LPU84Y/fQVw629Ijk0xnPCy9JCmQFFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:4b:37:5a:3f:19:b6:68:2a:cb:44:eb:9c:a3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a82ee9aa1106ed720d63c3844e666440e34438
Validity
Not Before: Nov 5 11:00:57 2025 GMT
Not After : Nov 6 11:00:57 2025 GMT
Subject: CN=db03a114a95b4d43e419d3772632e8505a6e47b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ce:2d:c9:92:16:e0:6c:36:80:c0:5e:75:ba:
12:7c:bc:e8:04:2c:55:be:e8:ed:de:18:cf:3f:80:
ad:62:2a:81:43:6b:7e:99:6b:a7:dd:1f:0c:02:88:
20:47:6a:9f:75:91:5d:b2:f2:06:f4:f0:e8:53:d1:
74:19:ef:7e:e5:b5:c5:06:b6:0b:ba:37:f5:67:75:
3d:8d:c8:37:87:02:c8:8f:4b:f3:99:a0:df:c1:98:
74:3f:8e:a6:0e:43:57:7a:fe:1d:9f:7b:45:6b:9c:
b4:f5:55:37:43:01:d8:2e:a9:28:2d:93:43:f2:f1:
74:d0:4c:4a:dd:97:70:7e:0a:b7:02:79:b3:e5:f9:
4f:7a:a6:fd:b3:38:76:47:4c:f8:1c:07:68:6c:94:
7f:6b:aa:a8:b9:53:d7:3b:0f:a2:a0:ba:73:82:52:
ba:a8:fa:01:a3:04:3d:95:97:7e:7a:a0:4d:84:7e:
5d:ff:7e:2b:97:28:1c:5e:3d:69:30:6f:7d:26:d2:
32:9e:de:b0:54:7a:23:5c:84:fe:55:99:43:ef:be:
2a:05:65:c2:9e:f9:4d:0c:3c:e3:02:28:3e:29:d0:
6a:5b:f9:3a:35:31:e9:86:c4:a8:de:e3:a5:58:bd:
75:63:7b:b4:2d:bf:28:90:71:b8:a3:8c:8e:e7:7d:
53:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:A1:14:A9:5B:4D:43:E4:19:D3:77:26:32:E8:50:5A:6E:47:B9
X509v3 Authority Key Identifier:
keyid:A3:A8:2E:E9:AA:11:06:ED:72:0D:63:C3:84:4E:66:64:40:E3:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6gu6aoRBu1yDWPDhE5mZEDjRDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c720b4-1acb-4703-bc24-467e009daed0/1/o6gu6aoRBu1yDWPDhE5mZEDjRDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:c1:12:ac:49:04:04:3e:79:8e:0d:e8:e4:29:2f:e2:95:
ce:00:25:09:fb:38:94:38:31:2d:be:29:15:a7:ab:3a:7f:6f:
67:09:65:58:a4:92:b4:d8:bf:93:69:8b:0c:33:a6:f6:1a:00:
3d:4f:d6:fe:d9:a6:97:81:32:ff:10:62:6f:eb:f9:97:69:13:
bc:e4:61:d3:0b:58:78:e9:ed:5e:f5:03:37:5d:bd:f1:14:59:
2a:ec:37:d1:f0:e2:ac:9b:a6:17:71:00:77:f5:cd:2f:53:c3:
d8:c4:0d:31:06:c5:a8:5c:e7:4c:75:93:6d:f3:a0:6d:33:2b:
d7:94:c5:16:2e:c8:a6:de:2c:2b:bd:7b:99:74:94:ad:6b:a7:
30:9e:0f:65:35:c7:61:61:4d:b2:25:fc:88:e5:3c:dd:61:c7:
5c:2b:ab:50:f4:81:a4:6d:63:76:e6:b4:fe:99:a8:ec:ec:f4:
dc:c2:46:54:29:85:e7:c1:01:a6:b3:a8:01:c7:e4:82:68:ea:
60:5d:56:9c:ef:84:4e:fe:4d:03:6d:e5:31:6b:5d:62:76:7c:
95:8e:ed:89:d6:db:ea:92:61:b3:ba:02:63:c1:35:87:17:48:
3e:16:e1:dc:73:db:e7:f9:96:5f:6c:d8:5b:39:2d:ad:62:b1:
75:3b:84:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpTrUs3Wj8Ztmgqy0TrnKPEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTgyZWU5YWExMTA2ZWQ3MjBkNjNjMzg0NGU2NjY0NDBl
MzQ0MzgwHhcNMjUxMTA1MTEwMDU3WhcNMjUxMTA2MTEwMDU3WjAzMTEwLwYDVQQD
EyhkYjAzYTExNGE5NWI0ZDQzZTQxOWQzNzcyNjMyZTg1MDVhNmU0N2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1s4tyZIW4Gw2gMBedboSfLzoBCxV
vujt3hjPP4CtYiqBQ2t+mWun3R8MAoggR2qfdZFdsvIG9PDoU9F0Ge9+5bXFBrYL
ujf1Z3U9jcg3hwLIj0vzmaDfwZh0P46mDkNXev4dn3tFa5y09VU3QwHYLqkoLZND
8vF00ExK3Zdwfgq3Anmz5flPeqb9szh2R0z4HAdobJR/a6qouVPXOw+ioLpzglK6
qPoBowQ9lZd+eqBNhH5d/34rlygcXj1pMG99JtIynt6wVHojXIT+VZlD774qBWXC
nvlNDDzjAig+KdBqW/k6NTHphsSo3uOlWL11Y3u0Lb8okHG4o4yO531TsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsDoRSpW01D5BnTdyYy6FBabke5MB8GA1UdIwQY
MBaAFKOoLumqEQbtcg1jw4ROZmRA40Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQt
NDY3ZTAwOWRhZWQwLzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jNzIwYjQtMWFjYi00NzAzLWJjMjQtNDY3ZTAwOWRhZWQw
LzEvbzZndTZhb1JCdTF5RFdQRGhFNW1aRURqUkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtnBEqxJ
BAQ+eY4N6OQpL+KVzgAlCfs4lDgxLb4pFaerOn9vZwllWKSStNi/k2mLDDOm9hoA
PU/W/tmml4Ey/xBib+v5l2kTvORh0wtYeOntXvUDN1298RRZKuw30fDirJumF3EA
d/XNL1PD2MQNMQbFqFznTHWTbfOgbTMr15TFFi7Ipt4sK717mXSUrWunMJ4PZTXH
YWFNsiX8iOU83WHHXCurUPSBpG1jdua0/pmo7Oz03MJGVCmF58EBprOoAcfkgmjq
YF1WnO+ETv5NA23lMWtdYnZ8lY7tidbb6pJhs7oCY8E1hxdIPhbh3HPb5/mWX2zY
WzktrWKxdTuEMA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:31 2025 by rpki-client