Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: yFicZHv2DWSC/AnwrlvoUVc4c7v0XeXQavrlmElivU4=
Subject key identifier: 50:33:2D:11:E2:55:81:7A:46:6A:0C:6B:EC:40:CC:29:7B:3F:BF:B1
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019A5451F3516DD9DF26B2A3E798BF5CE9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 09FE
Signing time: Wed 05 Nov 2025 14:00:48 +0000
Manifest this update: Wed 05 Nov 2025 14:00:48 +0000
Manifest next update: Thu 06 Nov 2025 14:00:48 +0000
Files and hashes: 1: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: oCQ9QQ4tx9T0VJiTYBs+3jimynxg4+YXfOgHQO575Kg=)
2: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
3: YDaMnob-poIuRLZ4wAjLgOqFZQM.roa (hash: EN3W1yByHMOyyQbNASn6BXFzScIQPAOmgfjXpvzxDJ0=)
4: ocQ6hkGGlpLFqJevmWMP4yG9kcg.roa (hash: V2gAUafgNGkT92VkWusvaTxnq34wT53AXCaLQN/T3EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:f3:51:6d:d9:df:26:b2:a3:e7:98:bf:5c:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Nov 5 14:00:48 2025 GMT
Not After : Nov 6 14:00:48 2025 GMT
Subject: CN=50332d11e255817a466a0c6bec40cc297b3fbfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6f:0f:ea:c5:36:65:fb:33:52:26:d2:55:cc:
a1:c9:ed:1c:8b:b8:50:78:79:74:8a:dd:bc:50:75:
40:0c:d2:ca:e8:63:3e:76:81:d5:9b:a2:cb:ef:34:
8e:3b:9e:92:67:88:3b:d9:e8:d6:f9:b4:25:bb:fc:
ef:81:ea:19:33:a3:88:37:92:2c:43:f9:e6:66:76:
de:f4:d4:4a:4f:2d:54:d7:be:e5:e2:bf:7b:37:a1:
f4:f9:b4:58:bd:56:3e:00:54:a9:27:df:08:bc:af:
3a:18:b6:8f:7b:07:19:d7:29:47:e4:aa:3c:af:96:
9a:01:d2:0d:13:e0:43:52:e5:eb:84:db:9d:8c:36:
a1:77:c4:27:eb:ef:cc:11:ba:50:58:cb:40:04:4c:
e6:36:52:d2:f4:b4:55:04:86:0e:92:75:d2:37:02:
6c:af:ee:49:62:7d:a9:24:60:8f:50:30:6b:6f:d4:
75:fa:56:34:d9:52:49:3f:41:63:0b:c2:b9:c9:f7:
48:49:81:8a:bc:ff:94:4e:32:ba:b7:2e:c8:87:4e:
86:af:1c:c7:03:f3:95:0a:c0:07:15:48:a8:cb:a9:
04:96:4a:ac:e4:61:f9:c2:81:4f:7a:33:15:75:d4:
ab:cf:29:1a:ff:46:44:bb:ba:2a:7a:2d:b7:f5:ae:
e7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:33:2D:11:E2:55:81:7A:46:6A:0C:6B:EC:40:CC:29:7B:3F:BF:B1
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:8d:aa:cf:db:3a:c4:f9:22:5c:fa:8d:b5:f1:ac:e7:9d:4b:
00:2e:f2:27:4b:aa:21:b8:29:44:0f:62:7c:64:73:1a:38:ea:
57:27:e2:1f:79:8c:a5:7e:c5:a2:22:30:04:eb:33:4d:7f:4b:
43:4b:8a:ad:80:eb:57:0c:e0:81:b1:b0:2b:53:e1:d7:e6:f0:
44:e3:0e:0e:05:bb:e3:d7:08:6f:0d:6b:c0:9f:1e:4e:3a:68:
c2:0b:e7:71:af:02:4a:9f:d7:c3:f2:ee:c0:f1:2b:d6:e9:8c:
f8:8e:c7:8c:6d:91:f2:e6:9c:f4:d1:62:1d:5b:4b:49:51:ff:
c7:17:35:ef:34:46:0e:69:59:51:6e:4d:8a:9b:a5:d6:3f:fc:
40:c6:f1:ed:a1:14:fb:b0:84:b3:5f:fe:6a:2b:d1:1e:bc:8e:
8f:a9:ae:74:81:dc:4a:37:96:32:45:7b:3b:c9:56:d8:57:00:
8b:14:97:83:6f:f0:06:cb:13:a0:11:b2:41:2d:97:ad:1a:ed:
f7:3b:b7:48:4d:19:1c:c6:35:c1:d4:a4:f1:bb:bb:dc:63:32:
71:97:81:96:cb:81:43:4a:b0:c6:39:cf:b6:55:23:82:a0:4d:
47:8d:24:41:f2:f7:19:e7:cb:da:f0:bd:a8:d5:ef:34:4d:05:
52:e1:4c:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUfNRbdnfJrKj55i/XOmmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NiYzcwZTE4YjZjNjllNTNlZjUyYTVlOTI1ZTVmNGYw
Y2RjYzEwHhcNMjUxMTA1MTQwMDQ4WhcNMjUxMTA2MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg1MDMzMmQxMWUyNTU4MTdhNDY2YTBjNmJlYzQwY2MyOTdiM2ZiZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm8P6sU2ZfszUibSVcyhye0ci7hQ
eHl0it28UHVADNLK6GM+doHVm6LL7zSOO56SZ4g72ejW+bQlu/zvgeoZM6OIN5Is
Q/nmZnbe9NRKTy1U177l4r97N6H0+bRYvVY+AFSpJ98IvK86GLaPewcZ1ylH5Ko8
r5aaAdINE+BDUuXrhNudjDahd8Qn6+/MEbpQWMtABEzmNlLS9LRVBIYOknXSNwJs
r+5JYn2pJGCPUDBrb9R1+lY02VJJP0FjC8K5yfdISYGKvP+UTjK6ty7Ih06GrxzH
A/OVCsAHFUioy6kElkqs5GH5woFPejMVddSrzyka/0ZEu7oqei239a7nNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAzLRHiVYF6RmoMa+xAzCl7P7+xMB8GA1UdIwQY
MBaAFDvMvHDhi2xp5T71Kl6SXl9PDNzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgt
YmJlNjBlYTIyMmM1LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS84YTQ3NzMtYTJiZC00MGQyLWJmYzgtYmJlNjBlYTIyMmM1
LzEvTzh5OGNPR0xiR25sUHZVcVhwSmVYMDhNM01FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjo2qz9s6
xPkiXPqNtfGs551LAC7yJ0uqIbgpRA9ifGRzGjjqVyfiH3mMpX7FoiIwBOszTX9L
Q0uKrYDrVwzggbGwK1Ph1+bwROMODgW749cIbw1rwJ8eTjpowgvnca8CSp/Xw/Lu
wPEr1umM+I7HjG2R8uac9NFiHVtLSVH/xxc17zRGDmlZUW5Nipul1j/8QMbx7aEU
+7CEs1/+aivRHryOj6mudIHcSjeWMkV7O8lW2FcAixSXg2/wBssToBGyQS2XrRrt
9zu3SE0ZHMY1wdSk8bu73GMycZeBlsuBQ0qwxjnPtlUjgqBNR40kQfL3GefL2vC9
qNXvNE0FUuFMlw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 21:46:04 2025 by rpki-client