Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: FyaKOVsc4Id2SZqg8BUn8CqJA7B32zwVMS1Mbr5bR4A=
Subject key identifier: 3C:75:05:48:34:B5:EC:6B:7C:F0:FF:B0:24:D1:93:F5:C7:FD:24:F1
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 019A4D3D3DEE397476A41B9723B403D3215A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 07F1
Signing time: Tue 04 Nov 2025 05:00:50 +0000
Manifest this update: Tue 04 Nov 2025 05:00:50 +0000
Manifest next update: Wed 05 Nov 2025 05:00:50 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: lqe6nemCwo9L/skA0fHWqrYD7D5vFBS55xrUj5SZxwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3d:ee:39:74:76:a4:1b:97:23:b4:03:d3:21:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Nov 4 05:00:50 2025 GMT
Not After : Nov 5 05:00:50 2025 GMT
Subject: CN=3c75054834b5ec6b7cf0ffb024d193f5c7fd24f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5a:f4:b6:f6:d6:f8:11:75:07:8c:c7:53:e2:
29:02:ca:4a:e2:ba:f1:dd:93:f7:1f:3e:1b:fb:1f:
76:ae:0a:5d:a4:da:05:f3:8c:11:2d:b2:a7:3e:ac:
9a:c6:5e:57:1d:58:7a:36:6e:43:ec:ea:ac:fe:fb:
c7:f1:31:d2:ba:f4:08:49:ff:62:5d:47:eb:54:50:
60:08:d6:da:3e:47:b6:89:0f:3c:79:9e:20:1d:4f:
e6:c6:24:87:09:13:18:3a:ff:55:2e:b5:4e:da:82:
38:22:e6:38:f4:84:d6:57:1c:18:9e:76:b3:b6:43:
71:ff:5e:03:ae:92:5a:14:ec:bb:90:bb:1e:22:e6:
ff:87:83:c9:7f:2b:66:cd:68:d8:fd:ea:73:7d:95:
8d:d7:e3:40:d8:d9:66:34:7d:28:97:47:bc:57:ce:
7b:ad:50:3e:39:94:f7:b2:53:8b:33:60:24:31:3f:
e3:35:72:6b:b9:59:11:96:07:24:f3:bf:46:81:5f:
30:0f:79:61:64:13:ab:d9:32:3c:5e:14:13:d7:d4:
4a:c1:00:c6:85:d7:f7:5d:2b:ae:d3:80:8f:12:b3:
16:35:bb:f3:00:24:a0:4a:3a:bc:be:8b:50:45:95:
34:3a:00:11:be:f9:9f:af:2a:3e:c9:34:20:3f:4d:
4c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:75:05:48:34:B5:EC:6B:7C:F0:FF:B0:24:D1:93:F5:C7:FD:24:F1
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d7:86:41:83:12:f1:6d:92:6b:7b:91:29:10:b3:26:3e:e7:
be:bc:13:75:19:05:4f:34:d6:d4:6a:84:cc:70:38:82:fe:77:
8b:39:60:06:61:51:81:b4:81:47:69:18:f9:e2:59:52:e7:4c:
ba:a1:0c:05:de:f4:08:2f:fd:35:d4:0e:4c:65:fc:96:31:9a:
c7:98:85:96:bf:d0:4b:f0:e0:39:0c:49:de:a1:30:52:53:76:
a0:f7:44:99:ed:aa:1d:87:5f:f3:e4:bf:08:91:d2:f0:d6:28:
5a:86:ac:dd:56:35:08:e6:5b:b3:21:af:02:a9:5b:fa:92:d2:
e2:2e:b3:32:61:04:6b:b6:ff:b8:ad:92:5b:7c:43:ab:ae:e1:
ba:bd:a1:65:db:5f:20:db:0e:81:d5:d5:b9:37:47:b1:35:aa:
f9:0a:13:db:3a:ed:2e:54:55:15:82:d9:e2:f2:f0:49:b6:0d:
a1:d8:ad:98:c6:ab:5c:88:12:f6:63:d6:b2:98:dc:ab:8e:ae:
76:bc:cb:fb:0c:57:83:ba:3b:8f:55:4a:1d:91:99:ed:61:b5:
60:4d:6b:fa:8d:e1:47:27:90:c7:3c:64:0e:37:8a:e3:fe:2e:
66:c3:5b:5a:48:a0:30:18:1e:66:92:a6:d6:4b:62:a1:fb:0c:
6a:0b:ab:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPT3uOXR2pBuXI7QD0yFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzU2YmRlOTYzZWVmN2MyNTBiYzg0M2M2OTVjYTNmZTA3
ZmJhYzQwHhcNMjUxMTA0MDUwMDUwWhcNMjUxMTA1MDUwMDUwWjAzMTEwLwYDVQQD
EygzYzc1MDU0ODM0YjVlYzZiN2NmMGZmYjAyNGQxOTNmNWM3ZmQyNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1r0tvbW+BF1B4zHU+IpAspK4rrx
3ZP3Hz4b+x92rgpdpNoF84wRLbKnPqyaxl5XHVh6Nm5D7Oqs/vvH8THSuvQISf9i
XUfrVFBgCNbaPke2iQ88eZ4gHU/mxiSHCRMYOv9VLrVO2oI4IuY49ITWVxwYnnaz
tkNx/14DrpJaFOy7kLseIub/h4PJfytmzWjY/epzfZWN1+NA2NlmNH0ol0e8V857
rVA+OZT3slOLM2AkMT/jNXJruVkRlgck879GgV8wD3lhZBOr2TI8XhQT19RKwQDG
hdf3XSuu04CPErMWNbvzACSgSjq8votQRZU0OgARvvmfryo+yTQgP01MuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx1BUg0texrfPD/sCTRk/XH/STxMB8GA1UdIwQY
MBaAFDrFa96WPu98JQvIQ8aVyj/gf7rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2It
Y2U5YzlmM2FhODU1LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8wZGNmOTgtYThkMi00NmMwLWI3Y2ItY2U5YzlmM2FhODU1
LzEvT3NWcjNwWS03M3dsQzhoRHhwWEtQLUJfdXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9eGQYMS
8W2Sa3uRKRCzJj7nvrwTdRkFTzTW1GqEzHA4gv53izlgBmFRgbSBR2kY+eJZUudM
uqEMBd70CC/9NdQOTGX8ljGax5iFlr/QS/DgOQxJ3qEwUlN2oPdEme2qHYdf8+S/
CJHS8NYoWoas3VY1COZbsyGvAqlb+pLS4i6zMmEEa7b/uK2SW3xDq67hur2hZdtf
INsOgdXVuTdHsTWq+QoT2zrtLlRVFYLZ4vLwSbYNoditmMarXIgS9mPWspjcq46u
drzL+wxXg7o7j1VKHZGZ7WG1YE1r+o3hRyeQxzxkDjeK4/4uZsNbWkigMBgeZpKm
1ktiofsMagurDQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:34 2025 by rpki-client