Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
File: 0BqOdIpGO0lQg_dHaROSBdyzObY.mft (raw, json)
Hash identifier: 7aW3VTIoo9Pd0guo+AXlRJn1QT/9UxoAQIUEyF8XGic=
Subject key identifier: FE:8A:CC:8B:7B:6B:AD:A3:6C:4B:91:35:7B:C1:8A:9F:D7:7D:A1:46
Authority key identifier: D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
Certificate issuer: /CN=d01a8e748a463b495083f74769139205dcb339b6
Certificate serial: 019A71EEE4FBBC42A14DACAF514756A28AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
Manifest number: 62
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 0BqOdIpGO0lQg_dHaROSBdyzObY.crl (hash: blvmyOxkKFWW/HP3SEeVW3ZhQGQfliNV/E9Wy4he0DQ=)
2: Ni9cQ-__7IlFIEScWKkm8nTwcNM.roa (hash: KZYmuutPEp1K/Rtla/BK3MqBgIvimyKNEmmqmQ1JLcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e4:fb:bc:42:a1:4d:ac:af:51:47:56:a2:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d01a8e748a463b495083f74769139205dcb339b6
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=fe8acc8b7b6bada36c4b91357bc18a9fd77da146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:7c:94:6e:96:f3:ab:62:d7:46:fd:9b:04:
d4:8b:b2:94:bd:1e:fb:6e:ab:29:af:de:55:49:ca:
e3:84:21:ed:6f:50:d9:bf:d1:d1:88:15:9c:06:11:
99:de:b3:04:22:f9:a4:16:e3:1e:9d:12:d8:56:b2:
a4:da:01:9f:6e:12:87:ba:5c:ad:11:ba:84:6b:45:
6f:8b:3c:75:77:51:d9:1c:da:e0:6a:93:6e:be:e5:
ee:c5:0b:88:e4:46:8d:68:05:ee:2f:01:32:c7:8f:
ee:56:3a:5b:f8:57:fb:55:a9:1f:22:92:81:6c:a7:
72:ad:64:7e:b6:01:84:cc:73:3a:a9:b9:cc:6d:66:
78:a3:81:ed:4f:6b:73:ef:f2:9c:0f:ed:5f:06:d0:
ab:22:50:b1:eb:9c:c7:f1:e9:f4:94:49:dc:10:ac:
8d:8e:68:d7:36:b3:de:90:f4:0a:3f:b9:4f:23:c3:
89:1c:9d:7b:e6:ef:ae:67:94:81:c6:2a:95:11:1c:
a7:ba:8b:8d:74:1b:05:e8:a7:42:be:51:f1:5a:03:
d7:d0:ae:20:01:d3:6d:67:e0:fc:f5:41:4b:b8:c8:
1a:3d:11:e0:ca:fc:ba:f0:88:1e:e8:31:31:9e:74:
de:fb:07:c7:d4:5b:15:f2:4b:2f:d0:37:c5:e3:d0:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:CC:8B:7B:6B:AD:A3:6C:4B:91:35:7B:C1:8A:9F:D7:7D:A1:46
X509v3 Authority Key Identifier:
keyid:D0:1A:8E:74:8A:46:3B:49:50:83:F7:47:69:13:92:05:DC:B3:39:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BqOdIpGO0lQg_dHaROSBdyzObY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7ffba6-2489-4072-8298-fe1c8567297b/1/0BqOdIpGO0lQg_dHaROSBdyzObY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:06:47:ce:64:68:86:3d:b6:d1:dc:65:93:f2:4d:b2:10:
88:88:21:95:76:cc:c9:69:8f:51:aa:08:5f:ec:60:b0:21:4b:
1d:e7:80:82:7c:39:e2:1e:ec:e9:da:2e:d5:3e:34:cd:21:99:
1e:81:8d:75:5a:34:86:98:23:40:24:92:96:64:e4:4a:22:34:
7a:5d:05:a9:5b:e5:62:86:1d:4a:6a:07:2a:6a:45:66:12:50:
15:80:53:17:89:6d:8b:19:c0:87:1f:ef:88:c5:2f:2a:88:db:
51:a0:f5:a8:e4:3c:a6:29:e3:94:8d:cd:72:de:88:9c:2d:05:
ac:96:a5:78:4f:ba:21:18:75:e9:ba:89:3c:6a:c8:4c:3d:28:
b6:cd:42:01:05:07:f3:cd:8e:cb:b7:3f:29:83:7e:d1:96:35:
30:26:f5:a3:e9:ac:c0:8c:34:10:a1:0f:fc:a1:16:56:26:4c:
bc:39:7a:1f:2d:e1:ac:e1:23:17:05:e1:45:87:a6:80:7f:72:
23:7c:8e:a4:f9:4f:a9:92:89:40:29:c6:92:46:73:be:1a:43:
a4:bb:0b:84:40:e5:fe:25:83:50:f5:25:24:bc:5d:f7:8c:60:
ac:b3:aa:cc:37:90:17:53:cf:07:15:5d:d2:60:77:06:48:a2:
a4:5c:a0:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uT7vEKhTayvUUdWooqkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMWE4ZTc0OGE0NjNiNDk1MDgzZjc0NzY5MTM5MjA1ZGNi
MzM5YjYwHhcNMjUxMTExMDgwMTEyWhcNMjUxMTEyMDgwMTEyWjAzMTEwLwYDVQQD
EyhmZThhY2M4YjdiNmJhZGEzNmM0YjkxMzU3YmMxOGE5ZmQ3N2RhMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ot8lG6W86ti10b9mwTUi7KUvR77
bqspr95VScrjhCHtb1DZv9HRiBWcBhGZ3rMEIvmkFuMenRLYVrKk2gGfbhKHulyt
EbqEa0Vvizx1d1HZHNrgapNuvuXuxQuI5EaNaAXuLwEyx4/uVjpb+Ff7VakfIpKB
bKdyrWR+tgGEzHM6qbnMbWZ4o4HtT2tz7/KcD+1fBtCrIlCx65zH8en0lEncEKyN
jmjXNrPekPQKP7lPI8OJHJ175u+uZ5SBxiqVERynuouNdBsF6KdCvlHxWgPX0K4g
AdNtZ+D89UFLuMgaPRHgyvy68Ige6DExnnTe+wfH1FsV8ksv0DfF49DKRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6KzIt7a62jbEuRNXvBip/XfaFGMB8GA1UdIwQY
MBaAFNAajnSKRjtJUIP3R2kTkgXcszm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83ZmZiYTYtMjQ4OS00MDcyLTgyOTgt
ZmUxYzg1NjcyOTdiLzEvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC83ZmZiYTYtMjQ4OS00MDcyLTgyOTgtZmUxYzg1NjcyOTdi
LzEvMEJxT2RJcEdPMGxRZ19kSGFST1NCZHl6T2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcO0GR85k
aIY9ttHcZZPyTbIQiIghlXbMyWmPUaoIX+xgsCFLHeeAgnw54h7s6dou1T40zSGZ
HoGNdVo0hpgjQCSSlmTkSiI0el0FqVvlYoYdSmoHKmpFZhJQFYBTF4ltixnAhx/v
iMUvKojbUaD1qOQ8pinjlI3Nct6InC0FrJaleE+6IRh16bqJPGrITD0ots1CAQUH
882Oy7c/KYN+0ZY1MCb1o+mswIw0EKEP/KEWViZMvDl6Hy3hrOEjFwXhRYemgH9y
I3yOpPlPqZKJQCnGkkZzvhpDpLsLhEDl/iWDUPUlJLxd94xgrLOqzDeQF1PPBxVd
0mB3BkiipFygBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:38 2025 by rpki-client