Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: NSdBbHwsm7lTSMU43K0QUG4TioLMI20baOPyz4U+5ZY=
Subject key identifier: AE:07:0F:9D:C3:50:33:56:ED:15:5C:36:E1:52:69:63:26:6F:6D:3B
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 019A7225F5ECA615A5EC3A2D8965A64AD508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: sbLhDNzx++eeArx16BzbokolcNtH6rpyBWB5lgN9vDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:ec:a6:15:a5:ec:3a:2d:89:65:a6:4a:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=ae070f9dc3503356ed155c36e1526963266f6d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:81:ba:26:76:d1:76:5d:64:9e:a5:2c:d5:
b7:31:92:57:2d:f3:a7:36:1e:1a:31:2b:84:94:dc:
9d:b2:85:aa:10:5b:98:f4:a4:de:cb:03:a5:e5:9c:
89:5b:ff:32:e6:30:8c:8e:b8:00:2a:b9:c7:18:31:
99:5e:e6:11:cc:70:d9:58:34:9f:5b:37:26:08:69:
f6:1d:95:56:a3:0c:2c:e9:2d:43:44:88:8d:41:90:
ab:8f:6e:87:51:47:9a:97:28:21:38:72:46:c4:36:
35:80:81:a0:ca:e1:63:b2:be:47:95:fb:59:51:78:
87:32:cc:0e:70:be:f6:c8:52:83:c1:b6:a8:c4:a3:
85:87:62:5c:e8:ce:29:07:cd:2c:2d:ea:c8:8f:56:
04:5d:1e:c8:85:06:27:90:85:c9:23:00:da:09:a4:
31:4e:88:94:c0:ba:bd:67:79:dd:51:a6:16:88:28:
a4:06:c9:39:7c:74:a6:26:54:1a:94:13:5a:39:0c:
98:d2:9c:c5:e0:f1:5c:3d:19:9d:2d:c1:f2:01:31:
d0:b7:30:79:8b:12:06:b8:14:3a:e6:de:22:85:be:
bf:ec:08:ca:69:69:07:0e:fd:bb:19:0e:08:47:63:
15:f7:74:5e:55:69:12:d6:99:46:1d:91:86:e7:57:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:07:0F:9D:C3:50:33:56:ED:15:5C:36:E1:52:69:63:26:6F:6D:3B
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1d:a7:b8:23:2d:2a:f9:9e:33:3c:c7:c1:fc:ed:73:6e:1e:
b7:ff:cf:a2:14:dd:9e:b8:ee:78:78:ac:f5:dc:a1:14:d3:72:
04:90:07:1f:e3:ed:90:b1:84:d2:31:8e:f1:74:af:e2:74:83:
ec:57:0c:66:e3:ff:62:66:34:a8:be:42:9b:d4:0e:cf:92:45:
44:2d:98:77:68:c8:a2:9e:fa:a3:8e:49:c9:61:1f:04:23:1b:
80:7b:1f:30:5a:68:cf:7f:10:a7:a4:6b:b6:2a:43:e4:55:b5:
35:1d:86:9a:a5:fa:12:19:77:2d:7a:9d:36:57:dd:84:b3:1d:
5a:24:bd:57:96:eb:ae:14:2a:89:33:b0:5b:df:02:71:25:70:
b5:1b:2a:5c:09:ec:24:88:69:6a:c3:95:9f:cb:ee:f3:87:fb:
eb:a8:5d:e8:95:cc:3c:b2:b7:18:ef:56:f5:08:11:98:62:01:
f2:d5:f7:37:1d:bf:32:7e:67:7d:66:2b:e9:ad:ce:a9:28:23:
00:7a:b4:84:ce:3e:e5:d2:eb:4a:ee:53:92:52:6f:8f:0e:0b:
79:9c:f8:00:4d:fb:47:a0:8e:be:59:95:f6:f1:67:9b:5c:1e:
18:8e:d6:34:a5:8d:9a:a5:8b:c8:a7:59:33:b2:71:ef:72:b1:
32:56:7b:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJfXsphWl7DotiWWmStUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGNkMThmMzM0Yzg3YTViNTdkZDc4N2VjMzI3NDM1NWY5
ZDU4OTQwHhcNMjUxMTExMDkwMTIxWhcNMjUxMTEyMDkwMTIxWjAzMTEwLwYDVQQD
EyhhZTA3MGY5ZGMzNTAzMzU2ZWQxNTVjMzZlMTUyNjk2MzI2NmY2ZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL2BuiZ20XZdZJ6lLNW3MZJXLfOn
Nh4aMSuElNydsoWqEFuY9KTeywOl5ZyJW/8y5jCMjrgAKrnHGDGZXuYRzHDZWDSf
WzcmCGn2HZVWowws6S1DRIiNQZCrj26HUUealyghOHJGxDY1gIGgyuFjsr5HlftZ
UXiHMswOcL72yFKDwbaoxKOFh2Jc6M4pB80sLerIj1YEXR7IhQYnkIXJIwDaCaQx
ToiUwLq9Z3ndUaYWiCikBsk5fHSmJlQalBNaOQyY0pzF4PFcPRmdLcHyATHQtzB5
ixIGuBQ65t4ihb6/7AjKaWkHDv27GQ4IR2MV93ReVWkS1plGHZGG51eD6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK4HD53DUDNW7RVcNuFSaWMmb207MB8GA1UdIwQY
MBaAFDvc0Y8zTIeltX3Xh+wydDVfnViUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEt
NzljNDFhYzliNmY4LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kYjNhZDktMDFlZS00YTQ5LWI3ZWEtNzljNDFhYzliNmY4
LzEvTzl6Ump6Tk1oNlcxZmRlSDdESjBOVi1kV0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANR2nuCMt
KvmeMzzHwfztc24et//PohTdnrjueHis9dyhFNNyBJAHH+PtkLGE0jGO8XSv4nSD
7FcMZuP/YmY0qL5Cm9QOz5JFRC2Yd2jIop76o45JyWEfBCMbgHsfMFpoz38Qp6Rr
tipD5FW1NR2GmqX6Ehl3LXqdNlfdhLMdWiS9V5brrhQqiTOwW98CcSVwtRsqXAns
JIhpasOVn8vu84f766hd6JXMPLK3GO9W9QgRmGIB8tX3Nx2/Mn5nfWYr6a3OqSgj
AHq0hM4+5dLrSu5TklJvjw4LeZz4AE37R6COvlmV9vFnm1weGI7WNKWNmqWLyKdZ
M7Jx73KxMlZ7dw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:28 2025 by rpki-client