Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: jwC9Jxtc/3tBXcF1rXudvCqdh4E/ynEcs209XyDkHdM=
Subject key identifier: 1E:4B:02:03:DB:38:47:CE:2F:59:33:53:17:DC:32:C6:E9:27:B3:3C
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 019A236504D9B62840408626EB2DDAA19609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 02:00:14 +0000
Manifest this update: Mon 27 Oct 2025 02:00:14 +0000
Manifest next update: Tue 28 Oct 2025 02:00:14 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: 8ueGmpRVpFrBKeUJ8IfSpXcV1w3q51STyLZcG90cylg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 02:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:04:d9:b6:28:40:40:86:26:eb:2d:da:a1:96:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Oct 27 02:00:14 2025 GMT
Not After : Oct 28 02:00:14 2025 GMT
Subject: CN=1e4b0203db3847ce2f59335317dc32c6e927b33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:37:77:d0:41:3e:6d:4d:fe:a9:9d:ab:fb:41:
42:b7:de:95:74:de:8e:d5:fd:88:72:b6:50:85:15:
b4:5a:d2:66:36:fe:8c:e5:38:25:0f:12:58:d4:d7:
d4:77:e9:31:2a:5a:65:bb:6b:ff:0a:36:6a:fc:44:
b7:91:cb:76:e5:96:e7:b6:b7:c0:b1:c7:8f:d1:33:
e1:8d:7b:b0:1a:aa:f2:02:56:64:c9:98:91:8a:c5:
50:69:41:cb:68:83:1a:70:93:c6:ac:de:97:d5:11:
7c:e5:c3:aa:15:7f:83:ee:5c:35:52:09:89:84:db:
c7:74:25:3f:10:23:d4:31:f2:24:91:0b:51:71:b3:
49:ca:3f:7b:5a:99:60:75:ce:ae:45:76:7a:30:a5:
d6:c1:73:6d:17:d6:70:52:34:c4:b6:a4:7e:4b:76:
c2:99:56:d8:71:52:a5:96:d1:5b:a7:3d:db:c6:2e:
9d:6b:56:5b:b8:b1:39:a8:01:ed:71:95:6c:8b:b5:
9c:52:09:c2:82:ae:86:a3:87:86:e3:49:50:de:dd:
ae:97:7f:72:87:80:ab:48:90:0d:c7:ea:3b:e9:fa:
c6:a7:b8:96:6d:4a:02:70:5e:40:aa:79:9f:55:5c:
71:f1:6d:c9:58:3b:24:95:5c:c4:fd:3a:5f:23:35:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4B:02:03:DB:38:47:CE:2F:59:33:53:17:DC:32:C6:E9:27:B3:3C
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:4e:ce:50:2b:c2:da:01:c7:49:2c:19:2d:16:c5:2d:e9:b8:
a9:6b:e1:cc:ce:07:8b:4a:c5:8b:d7:db:83:0a:d8:ab:26:c5:
56:d4:d3:57:76:0b:db:68:b5:ae:57:2b:8d:6c:3d:da:b5:4d:
62:13:53:2c:a9:1b:66:51:dd:ef:9e:5f:8a:29:3e:e2:37:0b:
f3:ae:fc:56:0e:e6:94:15:60:5b:34:d1:52:75:8e:af:5b:9e:
30:59:f7:25:7b:fd:c2:69:cb:b9:18:46:7c:63:73:cc:d5:69:
4a:58:3f:d1:e8:3c:f3:3c:f3:6f:39:97:04:14:34:c5:5c:be:
42:9b:b0:4c:67:4f:00:cc:45:26:48:ff:8f:bd:22:d0:3e:0c:
ce:2a:66:ae:4a:76:cf:e6:ad:a4:92:d6:7c:86:f5:9a:f6:40:
44:bc:6d:9d:a1:cc:14:ba:81:8e:6c:b2:58:17:50:5a:73:6c:
9c:5a:b7:bf:1c:05:56:69:ba:95:fb:2e:8d:f6:30:3c:11:a7:
bf:2b:47:5b:3f:f1:a6:26:4d:52:97:f5:2f:2e:60:70:b4:b6:
d5:35:d3:58:7e:54:7a:27:0f:26:a2:c6:98:79:84:f7:d1:d5:
18:76:ae:2f:5a:7c:d2:22:77:19:5e:91:e3:53:e6:6b:41:16:
ee:56:73:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojZQTZtihAQIYm6y3aoZYJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzgxMThkYjA1ZTRjOTNlNzZmYTFmMWM5NTY3OWM3MDVi
ZWIyMDgwHhcNMjUxMDI3MDIwMDE0WhcNMjUxMDI4MDIwMDE0WjAzMTEwLwYDVQQD
EygxZTRiMDIwM2RiMzg0N2NlMmY1OTMzNTMxN2RjMzJjNmU5MjdiMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTd30EE+bU3+qZ2r+0FCt96VdN6O
1f2IcrZQhRW0WtJmNv6M5TglDxJY1NfUd+kxKlplu2v/CjZq/ES3kct25ZbntrfA
sceP0TPhjXuwGqryAlZkyZiRisVQaUHLaIMacJPGrN6X1RF85cOqFX+D7lw1UgmJ
hNvHdCU/ECPUMfIkkQtRcbNJyj97Wplgdc6uRXZ6MKXWwXNtF9ZwUjTEtqR+S3bC
mVbYcVKlltFbpz3bxi6da1ZbuLE5qAHtcZVsi7WcUgnCgq6Go4eG40lQ3t2ul39y
h4CrSJANx+o76frGp7iWbUoCcF5AqnmfVVxx8W3JWDsklVzE/TpfIzVbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5LAgPbOEfOL1kzUxfcMsbpJ7M8MB8GA1UdIwQY
MBaAFKN4EY2wXkyT52+h8clWeccFvrIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2Yt
ODY2NjA3YWYyZmE1LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wZjM1NWEtM2EwYS00NmVjLWIwN2YtODY2NjA3YWYyZmE1
LzEvbzNnUmpiQmVUSlBuYjZIeHlWWjV4d1ctc2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfk7OUCvC
2gHHSSwZLRbFLem4qWvhzM4Hi0rFi9fbgwrYqybFVtTTV3YL22i1rlcrjWw92rVN
YhNTLKkbZlHd755fiik+4jcL8678Vg7mlBVgWzTRUnWOr1ueMFn3JXv9wmnLuRhG
fGNzzNVpSlg/0eg88zzzbzmXBBQ0xVy+QpuwTGdPAMxFJkj/j70i0D4Mzipmrkp2
z+atpJLWfIb1mvZARLxtnaHMFLqBjmyyWBdQWnNsnFq3vxwFVmm6lfsujfYwPBGn
vytHWz/xpiZNUpf1Ly5gcLS21TXTWH5UeicPJqLGmHmE99HVGHauL1p80iJ3GV6R
41Pma0EW7lZz7A==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:57 2025 by rpki-client