Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
File: O85exzYI4kiFKD6RDrh78e-COgI.mft (raw, json)
Hash identifier: tL6mhkxdYMzQlSefp1ixgrvOto3+WSbgjnKMSmSavOM=
Subject key identifier: D1:03:74:E3:81:3F:F4:CA:01:2C:24:60:3C:E3:B5:91:1C:EC:71:60
Authority key identifier: 3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
Certificate issuer: /CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Certificate serial: 019A4FCFEFB8786F87F832E299AF361BA84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
Manifest number: 0670
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: 7cL3elWEFj-zEjkndRVYAEQ9BU4.roa (hash: BiE9iKHIrEyTAK4OlfqCnHobFVMclVFQTAE1yqSmgDQ=)
2: O85exzYI4kiFKD6RDrh78e-COgI.crl (hash: +GHFUUZb5CmIWtWGbZv/pR5QN2dT5CNpiWwARtg8sGo=)
3: Wt4F1aNYpi_rzNFrCL_NrPrA99M.roa (hash: 7DVwsBm/G3K9SUMur3fB8M/J4z9MO5eSnY7FeGY9wFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:ef:b8:78:6f:87:f8:32:e2:99:af:36:1b:a8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce5ec73608e24885283e910eb87bf1ef823a02
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=d10374e3813ff4ca012c24603ce3b5911cec7160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:50:10:4c:4f:db:f4:c4:35:ed:cb:c2:0b:
84:cd:3d:6a:53:32:e2:7b:9b:12:74:b8:38:32:25:
87:a7:24:5a:4e:fb:ab:66:98:39:f6:7e:fc:64:bc:
e7:2a:c1:85:e3:62:82:d7:bf:48:30:7a:41:7a:86:
55:ce:f1:bd:7f:9e:2c:aa:da:43:b8:64:aa:12:a9:
7d:10:d3:c7:87:00:77:34:22:b9:e0:59:3d:a2:c2:
d8:4c:78:f6:38:00:a7:50:fb:73:ae:60:df:40:c5:
70:9c:36:4d:a6:1a:dc:75:36:03:5f:8a:ce:fb:c9:
95:45:8c:d9:7b:b7:13:f7:de:8d:98:20:57:72:57:
a3:1c:83:6f:4e:69:fe:73:82:92:a7:4e:aa:54:5c:
fb:89:3f:b0:99:4e:f2:26:44:c2:ed:32:f8:24:5c:
85:63:62:89:6c:fe:e6:d0:e0:92:9a:47:75:46:7a:
76:e6:19:25:e8:ce:54:ff:db:ae:75:02:76:a2:d2:
3e:3f:02:a8:d4:69:23:7d:1c:b5:95:6a:53:2d:e0:
a4:94:f0:59:f1:31:c6:a5:5b:53:3b:df:64:d6:f1:
24:b3:e7:41:a0:0a:1f:18:b2:3f:0e:9e:b5:b1:ea:
62:f3:16:42:a4:3d:3c:27:40:cf:49:b8:b6:be:e4:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:03:74:E3:81:3F:F4:CA:01:2C:24:60:3C:E3:B5:91:1C:EC:71:60
X509v3 Authority Key Identifier:
keyid:3B:CE:5E:C7:36:08:E2:48:85:28:3E:91:0E:B8:7B:F1:EF:82:3A:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O85exzYI4kiFKD6RDrh78e-COgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fff514-1e0e-493e-9ee5-6e99b79da520/1/O85exzYI4kiFKD6RDrh78e-COgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a9:25:b6:0c:d9:fb:e2:b3:f9:19:eb:c5:d5:ab:b3:ec:fa:
b1:64:68:27:89:13:db:37:4a:49:51:77:c3:08:8d:25:31:0f:
f2:2d:a8:57:e4:04:4a:50:e3:11:62:1c:4b:6e:14:40:45:c0:
42:94:f5:9f:b6:08:75:cf:51:dc:e0:6e:86:e6:48:d6:a0:52:
74:a3:04:ca:35:26:f1:21:de:a7:17:4e:bb:ed:75:50:55:d6:
de:60:3e:30:bc:76:74:5d:69:43:42:e5:86:59:3c:36:e7:16:
a7:69:7f:01:ab:e4:73:20:61:62:a8:83:93:3b:8d:5b:30:74:
11:26:60:b0:9d:3d:66:bc:88:53:02:9a:c3:42:f3:3d:6b:2f:
d8:0a:c0:bd:07:69:a9:f5:41:f2:19:d5:4f:31:06:2c:22:4b:
92:fa:a5:c6:d0:35:1b:e8:77:03:01:b5:d7:39:44:8d:73:15:
70:40:c4:83:48:a4:5a:74:26:ea:f4:bc:14:5d:0a:7a:f3:7c:
86:81:96:1e:62:17:c8:f1:8b:f3:f2:0d:dd:f4:b6:d5:fd:ec:
9b:be:72:d3:5f:d9:40:fb:9b:2e:65:37:ed:c2:19:e4:ae:cd:
b6:4d:b5:ff:db:d1:7e:3b:34:fd:a5:9a:6a:26:73:a4:de:3a:
40:61:ee:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPz++4eG+H+DLima82G6hMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2U1ZWM3MzYwOGUyNDg4NTI4M2U5MTBlYjg3YmYxZWY4
MjNhMDIwHhcNMjUxMTA0MTcwMDE4WhcNMjUxMTA1MTcwMDE4WjAzMTEwLwYDVQQD
EyhkMTAzNzRlMzgxM2ZmNGNhMDEyYzI0NjAzY2UzYjU5MTFjZWM3MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV5QEExP2/TENe3LwguEzT1qUzLi
e5sSdLg4MiWHpyRaTvurZpg59n78ZLznKsGF42KC179IMHpBeoZVzvG9f54sqtpD
uGSqEql9ENPHhwB3NCK54Fk9osLYTHj2OACnUPtzrmDfQMVwnDZNphrcdTYDX4rO
+8mVRYzZe7cT996NmCBXclejHINvTmn+c4KSp06qVFz7iT+wmU7yJkTC7TL4JFyF
Y2KJbP7m0OCSmkd1Rnp25hkl6M5U/9uudQJ2otI+PwKo1GkjfRy1lWpTLeCklPBZ
8THGpVtTO99k1vEks+dBoAofGLI/Dp61sepi8xZCpD08J0DPSbi2vuTuOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEDdOOBP/TKASwkYDzjtZEc7HFgMB8GA1UdIwQY
MBaAFDvOXsc2COJIhSg+kQ64e/HvgjoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUt
NmU5OWI3OWRhNTIwLzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZmY1MTQtMWUwZS00OTNlLTllZTUtNmU5OWI3OWRhNTIw
LzEvTzg1ZXh6WUk0a2lGS0Q2UkRyaDc4ZS1DT2dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqkltgzZ
++Kz+RnrxdWrs+z6sWRoJ4kT2zdKSVF3wwiNJTEP8i2oV+QESlDjEWIcS24UQEXA
QpT1n7YIdc9R3OBuhuZI1qBSdKMEyjUm8SHepxdOu+11UFXW3mA+MLx2dF1pQ0Ll
hlk8NucWp2l/AavkcyBhYqiDkzuNWzB0ESZgsJ09ZryIUwKaw0LzPWsv2ArAvQdp
qfVB8hnVTzEGLCJLkvqlxtA1G+h3AwG11zlEjXMVcEDEg0ikWnQm6vS8FF0KevN8
hoGWHmIXyPGL8/IN3fS21f3sm75y01/ZQPubLmU37cIZ5K7Ntk21/9vRfjs0/aWa
aiZzpN46QGHutQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:34 2025 by rpki-client