Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: VYHPdfQn5NzvvRSjz0KfjDZue186cHfWY2DqvOegZ/I=
Subject key identifier: A4:8C:52:50:01:9E:27:24:79:27:2B:A8:F7:12:CF:D6:86:CC:74:E1
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 019A50071C142FAB6F9C02EEEB9D5644512B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 18:00:34 +0000
Manifest this update: Tue 04 Nov 2025 18:00:34 +0000
Manifest next update: Wed 05 Nov 2025 18:00:34 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: Ym2wCx3ZETt/krRZgAGS88+JvKiYsmaadRSrejX9KB8=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1c:14:2f:ab:6f:9c:02:ee:eb:9d:56:44:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Nov 4 18:00:34 2025 GMT
Not After : Nov 5 18:00:34 2025 GMT
Subject: CN=a48c5250019e272479272ba8f712cfd686cc74e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:9f:0e:93:06:7f:38:e9:d2:c4:3b:2e:e9:
4c:7b:33:7e:a5:db:eb:01:3d:ad:5e:49:ca:67:ab:
96:98:a8:e9:0a:55:3c:1d:4b:38:1a:6a:c4:f6:d4:
d2:24:9b:36:c2:a5:f8:c7:44:09:bc:e2:26:c7:49:
44:0a:56:d9:84:64:34:e6:39:1a:de:cf:7e:b4:df:
57:b3:ac:1f:17:08:a5:45:f6:89:d9:fd:18:52:e8:
6a:5c:80:2e:5c:79:2f:85:42:92:60:4d:72:ef:61:
4e:ac:53:7e:22:ba:a2:3c:88:79:fc:7b:af:52:8c:
61:ef:7d:d8:40:17:61:14:20:e9:ed:64:28:29:db:
45:be:3c:8e:f2:b5:35:19:2d:ac:41:c4:71:57:8f:
5f:30:2b:f1:81:3e:3b:a7:7b:5a:68:20:e1:8f:66:
e5:15:f7:07:21:e0:a7:6d:a1:a7:2c:b2:ca:e5:d3:
71:bb:10:6d:8a:24:4e:22:6b:c5:c5:7e:0e:ef:ec:
73:4f:cb:1a:fd:20:c0:ef:d6:11:b7:68:a9:ff:d9:
12:90:ab:a7:2d:5e:21:da:09:2c:e6:69:45:94:c9:
d7:ca:45:e4:3e:93:57:18:f2:f3:a9:5e:f0:5a:66:
a8:9f:3f:d9:c9:23:6c:75:d3:ec:40:18:10:c8:07:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8C:52:50:01:9E:27:24:79:27:2B:A8:F7:12:CF:D6:86:CC:74:E1
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:38:3a:80:1f:eb:c7:c9:44:d2:51:30:ca:84:d0:08:3e:b2:
f2:e5:32:94:d1:bb:70:c6:8f:f2:4d:5a:b0:b5:f7:92:97:9e:
b2:06:a8:3b:22:a3:f3:bc:d4:97:ab:55:f8:df:84:86:c3:53:
53:3a:e6:b1:fa:e4:65:99:dd:60:2e:55:28:dd:a9:ea:4b:fb:
b9:e1:c2:96:02:9d:c8:8e:36:a6:de:94:cf:ce:25:74:17:60:
02:7f:29:28:a6:42:a6:b7:22:4f:6c:cf:6f:e6:8e:09:3b:ca:
76:bd:e1:40:14:c5:1d:49:b6:30:48:fa:1f:79:e9:cc:d3:96:
43:4d:6e:ca:62:0b:61:73:20:b7:ba:cc:6e:eb:ba:cf:b4:20:
56:6c:97:19:f7:a8:3e:49:19:6b:6f:35:0b:a0:bd:38:e4:2e:
9f:58:91:4e:54:c7:b1:0b:66:f6:4b:ee:ca:b0:73:0b:bf:dc:
13:6f:e6:d0:35:51:62:21:f5:1f:06:85:93:56:a6:c0:9a:26:
e6:f4:4d:4e:2b:75:77:61:a4:ca:0b:65:8a:67:4b:80:4e:3a:
b7:64:5b:58:e2:dc:12:55:d7:86:f5:1f:15:36:c3:48:75:6e:
63:fa:db:4d:d1:ce:31:1f:7b:dd:12:d1:e8:39:89:e8:b0:aa:
8c:a8:0f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQBxwUL6tvnALu651WRFErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjUxMTA0MTgwMDM0WhcNMjUxMTA1MTgwMDM0WjAzMTEwLwYDVQQD
EyhhNDhjNTI1MDAxOWUyNzI0NzkyNzJiYThmNzEyY2ZkNjg2Y2M3NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpWfDpMGfzjp0sQ7LulMezN+pdvr
AT2tXknKZ6uWmKjpClU8HUs4GmrE9tTSJJs2wqX4x0QJvOImx0lEClbZhGQ05jka
3s9+tN9Xs6wfFwilRfaJ2f0YUuhqXIAuXHkvhUKSYE1y72FOrFN+IrqiPIh5/Huv
Uoxh733YQBdhFCDp7WQoKdtFvjyO8rU1GS2sQcRxV49fMCvxgT47p3taaCDhj2bl
FfcHIeCnbaGnLLLK5dNxuxBtiiROImvFxX4O7+xzT8sa/SDA79YRt2ip/9kSkKun
LV4h2gks5mlFlMnXykXkPpNXGPLzqV7wWmaonz/ZySNsddPsQBgQyAf62QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSMUlABnickeScrqPcSz9aGzHThMB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDg6gB/r
x8lE0lEwyoTQCD6y8uUylNG7cMaP8k1asLX3kpeesgaoOyKj87zUl6tV+N+EhsNT
UzrmsfrkZZndYC5VKN2p6kv7ueHClgKdyI42pt6Uz84ldBdgAn8pKKZCprciT2zP
b+aOCTvKdr3hQBTFHUm2MEj6H3npzNOWQ01uymILYXMgt7rMbuu6z7QgVmyXGfeo
PkkZa281C6C9OOQun1iRTlTHsQtm9kvuyrBzC7/cE2/m0DVRYiH1HwaFk1amwJom
5vRNTit1d2GkygtlimdLgE46t2RbWOLcElXXhvUfFTbDSHVuY/rbTdHOMR973RLR
6DmJ6LCqjKgPiQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:23:10 2025 by rpki-client