Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
File: O2jlRg26WHHb5SMhSEOeIVspvUQ.mft (raw, json)
Hash identifier: 2LN8fpxuquxaL5Uccs5OeK7l/RB6ftIegwKeN1+tH6c=
Subject key identifier: 6A:1C:D7:03:20:9E:2D:DF:C7:D4:54:B4:1E:24:67:53:92:C5:FE:64
Authority key identifier: 3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
Certificate issuer: /CN=3b68e5460dba5871dbe5232148439e215b29bd44
Certificate serial: 0199CAC6F0553A45B015E2657B4BB7FEB37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
Manifest number: 16C7
Signing time: Thu 09 Oct 2025 21:00:59 +0000
Manifest this update: Thu 09 Oct 2025 21:00:59 +0000
Manifest next update: Fri 10 Oct 2025 21:00:59 +0000
Files and hashes: 1: O2jlRg26WHHb5SMhSEOeIVspvUQ.crl (hash: U0rd8Xp+PAebJdM0CHFir9f+m2VMxNVJodwG4QTeezM=)
2: Pd3Tb2muXCCBgS-W8Cu_lBpJ2x8.roa (hash: nzjWO6dCtijYtA3RGgwEtQM/oq2xd/x0bLHHza1oxV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:c6:f0:55:3a:45:b0:15:e2:65:7b:4b:b7:fe:b3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b68e5460dba5871dbe5232148439e215b29bd44
Validity
Not Before: Oct 9 21:00:59 2025 GMT
Not After : Oct 10 21:00:59 2025 GMT
Subject: CN=6a1cd703209e2ddfc7d454b41e24675392c5fe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:0b:56:1f:be:e2:dc:47:b9:99:53:e8:8a:
02:e2:69:b1:d1:3f:24:cf:9a:20:eb:a1:b8:75:ad:
75:32:4c:9a:09:2a:3e:19:f7:1b:b8:38:08:15:4e:
51:88:7e:df:cb:83:7e:27:2e:ff:42:64:2b:b2:7a:
22:52:15:00:36:30:5e:b4:5a:94:76:36:20:a5:6a:
15:7a:1d:d9:28:54:26:6f:79:74:d7:d0:f4:fc:b7:
eb:68:31:e7:7e:85:97:c0:97:9d:22:b5:91:88:00:
5e:71:31:dc:26:57:68:ed:ce:6a:a4:2c:81:c9:83:
e2:b8:0d:90:81:b5:13:7b:80:20:64:98:78:13:92:
6e:8b:58:5b:ad:e1:25:a7:32:cf:c1:51:16:cd:cf:
36:16:c4:d9:87:f8:62:79:8d:24:7f:a7:bb:28:55:
19:63:fa:7f:f6:58:fc:7d:1e:62:bc:24:6b:f8:67:
6e:fe:b5:a6:05:4b:77:67:4d:86:57:f7:09:c2:95:
11:e2:17:95:7a:a3:3e:ef:ab:d8:57:d8:01:52:ce:
d9:2e:16:8b:67:9c:4d:f2:50:7f:6c:e0:c6:f2:bf:
75:09:d2:2d:42:08:2c:fc:f8:cc:74:c5:76:47:1a:
69:5b:de:73:bd:b0:c7:e8:d2:5e:19:36:4e:a8:f5:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:D7:03:20:9E:2D:DF:C7:D4:54:B4:1E:24:67:53:92:C5:FE:64
X509v3 Authority Key Identifier:
keyid:3B:68:E5:46:0D:BA:58:71:DB:E5:23:21:48:43:9E:21:5B:29:BD:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2jlRg26WHHb5SMhSEOeIVspvUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/110086-c0c3-4790-95ab-055112560fc9/1/O2jlRg26WHHb5SMhSEOeIVspvUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:03:b6:77:9b:f6:c4:3c:91:34:43:e2:42:4e:5f:f0:92:08:
04:6a:fa:d1:d0:b3:42:38:c3:be:a3:0e:40:83:d5:8a:ec:74:
fd:3e:17:64:be:25:c7:17:e0:13:c7:79:6d:3d:05:4f:83:3f:
d7:07:7e:5e:0f:b1:c0:40:44:01:b1:cd:8a:60:28:22:92:1e:
92:18:98:e1:0e:04:22:a1:58:d4:95:3a:2f:ba:0d:9f:7e:5f:
79:71:e0:6c:e3:ac:6f:f6:ac:6f:c4:bf:83:e3:53:4f:f3:b4:
c2:8c:3e:c3:9f:b6:4e:01:76:9a:c6:93:38:0b:51:23:78:e9:
9d:12:43:24:63:52:f4:f9:3e:b7:72:ab:84:3b:56:2f:0c:96:
79:15:e4:c3:bb:a2:e5:b3:aa:79:39:d8:62:c9:1f:04:cb:c3:
23:d8:3c:f5:d6:c9:d4:a3:96:1c:3c:01:e0:3b:8b:f7:de:bd:
c7:99:44:fb:2d:00:ed:63:cd:ba:74:d4:80:46:93:50:f9:ec:
e6:e3:eb:04:15:3e:35:49:bd:66:b5:fa:a1:51:ab:76:f0:c8:
d2:cb:21:02:ff:89:f6:3a:4c:b6:62:e5:2a:09:6b:1a:c9:a0:
5c:46:6b:44:5a:6f:8c:7a:43:cb:75:c3:a9:83:04:e5:b7:5c:
1f:26:64:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnKxvBVOkWwFeJle0u3/rN+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNjhlNTQ2MGRiYTU4NzFkYmU1MjMyMTQ4NDM5ZTIxNWIy
OWJkNDQwHhcNMjUxMDA5MjEwMDU5WhcNMjUxMDEwMjEwMDU5WjAzMTEwLwYDVQQD
Eyg2YTFjZDcwMzIwOWUyZGRmYzdkNDU0YjQxZTI0Njc1MzkyYzVmZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jALVh++4txHuZlT6IoC4mmx0T8k
z5og66G4da11MkyaCSo+GfcbuDgIFU5RiH7fy4N+Jy7/QmQrsnoiUhUANjBetFqU
djYgpWoVeh3ZKFQmb3l019D0/LfraDHnfoWXwJedIrWRiABecTHcJldo7c5qpCyB
yYPiuA2QgbUTe4AgZJh4E5Jui1hbreElpzLPwVEWzc82FsTZh/hieY0kf6e7KFUZ
Y/p/9lj8fR5ivCRr+Gdu/rWmBUt3Z02GV/cJwpUR4heVeqM+76vYV9gBUs7ZLhaL
Z5xN8lB/bODG8r91CdItQggs/PjMdMV2RxppW95zvbDH6NJeGTZOqPXgrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoc1wMgni3fx9RUtB4kZ1OSxf5kMB8GA1UdIwQY
MBaAFDto5UYNulhx2+UjIUhDniFbKb1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWIt
MDU1MTEyNTYwZmM5LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTAwODYtYzBjMy00NzkwLTk1YWItMDU1MTEyNTYwZmM5
LzEvTzJqbFJnMjZXSEhiNVNNaFNFT2VJVnNwdlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgO2d5v2
xDyRNEPiQk5f8JIIBGr60dCzQjjDvqMOQIPViux0/T4XZL4lxxfgE8d5bT0FT4M/
1wd+Xg+xwEBEAbHNimAoIpIekhiY4Q4EIqFY1JU6L7oNn35feXHgbOOsb/asb8S/
g+NTT/O0wow+w5+2TgF2msaTOAtRI3jpnRJDJGNS9Pk+t3KrhDtWLwyWeRXkw7ui
5bOqeTnYYskfBMvDI9g89dbJ1KOWHDwB4DuL9969x5lE+y0A7WPNunTUgEaTUPns
5uPrBBU+NUm9ZrX6oVGrdvDI0sshAv+J9jpMtmLlKglrGsmgXEZrRFpvjHpDy3XD
qYME5bdcHyZkBw==
-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:01 2025 by rpki-client