Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: EX2sXyTjo+1gKs/9i6K20bZ3ddhAGhpRsr2KVC30lyo=
Subject key identifier: 85:92:20:36:22:B8:28:17:86:47:AB:34:F3:CE:9D:E5:C4:15:67:49
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 019A71B7CC279997515686723308FC42F07A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 1159
Signing time: Tue 11 Nov 2025 07:01:02 +0000
Manifest this update: Tue 11 Nov 2025 07:01:02 +0000
Manifest next update: Wed 12 Nov 2025 07:01:02 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: VFg9Jm1oQb9IqOrOYEszNisttS26Buf30WNEAHWRpME=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:cc:27:99:97:51:56:86:72:33:08:fc:42:f0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Nov 11 07:01:02 2025 GMT
Not After : Nov 12 07:01:02 2025 GMT
Subject: CN=8592203622b828178647ab34f3ce9de5c4156749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:16:57:6d:0a:2f:b8:56:e4:69:30:04:4b:dc:
79:62:28:3b:9f:58:12:40:9b:a0:16:5c:37:df:92:
18:52:60:39:18:68:70:5e:00:53:27:71:2b:49:a1:
e7:67:2f:82:ac:f1:9f:fc:23:c5:9d:27:20:29:81:
36:5f:a7:23:6c:76:71:a5:fe:33:f3:73:19:ea:fc:
da:8f:7d:6e:bc:f2:3c:10:73:ff:48:2d:b0:82:eb:
87:dd:cc:61:3c:ba:d7:ea:de:48:e7:22:0e:59:e8:
90:1b:96:34:18:a8:16:1c:70:cb:29:aa:45:33:ce:
38:e5:77:8c:07:fc:ed:29:f8:7b:26:d7:8a:1f:b1:
62:16:c9:fd:c2:b2:5b:43:2c:ae:d7:57:64:96:d7:
8a:33:31:ce:43:d1:32:2d:22:02:12:95:8b:6d:b7:
1a:c0:31:26:06:39:b9:17:83:6f:f3:17:75:14:f7:
67:3b:f8:04:5c:b8:16:08:f5:93:21:4a:32:d9:44:
2c:8d:94:8d:f9:de:09:41:3c:b3:0a:fb:40:6d:1f:
ce:77:d0:8a:6c:45:a5:fe:fb:44:19:a2:57:61:d1:
c9:b8:b4:44:38:bb:2e:20:84:9e:91:a2:9a:d1:c7:
a4:f4:26:3b:8f:40:f2:7e:36:b6:ba:ae:8c:19:74:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:92:20:36:22:B8:28:17:86:47:AB:34:F3:CE:9D:E5:C4:15:67:49
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:47:e8:cd:68:bc:ba:e8:2e:80:71:82:47:3d:1a:63:0f:34:
22:3d:3c:49:26:8d:5c:fb:db:7c:23:36:84:ba:77:16:1a:a5:
9b:66:1a:8e:e1:3b:89:9c:cc:53:7c:79:88:96:54:52:e6:30:
b7:3d:d6:92:e9:2e:f8:36:32:dc:ff:0e:5a:5e:97:a1:cd:bf:
77:d7:17:c5:ea:ee:97:52:66:65:04:aa:06:02:88:a6:89:41:
24:cd:a6:64:5f:d7:32:b3:24:64:70:bc:25:0a:4e:43:52:f7:
45:46:05:41:3b:8c:4e:fb:0a:19:af:b7:5b:03:d2:96:ff:8d:
14:b2:4d:fa:53:cc:08:a0:62:8c:15:21:b2:6e:b5:08:36:10:
cd:0f:6f:ab:81:2a:1d:5a:14:c6:8a:78:29:c4:c6:4b:6e:b9:
87:9d:3d:9f:ae:77:90:2b:b4:ee:f9:fd:fb:86:05:69:7b:a8:
2a:f2:44:22:62:b3:80:64:65:66:77:fa:d4:0f:f6:30:dc:7a:
5f:9a:9d:e4:77:cb:e6:2e:13:10:12:b1:2a:f0:73:01:f3:a7:
62:0d:a5:7f:c7:9f:0e:01:7d:8b:15:ec:84:f6:33:80:7f:a6:
55:7f:e4:d2:93:49:75:97:19:bb:fd:48:97:78:2d:80:b8:06:
29:36:16:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8wnmZdRVoZyMwj8QvB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz
YWM2NjkwHhcNMjUxMTExMDcwMTAyWhcNMjUxMTEyMDcwMTAyWjAzMTEwLwYDVQQD
Eyg4NTkyMjAzNjIyYjgyODE3ODY0N2FiMzRmM2NlOWRlNWM0MTU2NzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxZXbQovuFbkaTAES9x5Yig7n1gS
QJugFlw335IYUmA5GGhwXgBTJ3ErSaHnZy+CrPGf/CPFnScgKYE2X6cjbHZxpf4z
83MZ6vzaj31uvPI8EHP/SC2wguuH3cxhPLrX6t5I5yIOWeiQG5Y0GKgWHHDLKapF
M8445XeMB/ztKfh7JteKH7FiFsn9wrJbQyyu11dklteKMzHOQ9EyLSICEpWLbbca
wDEmBjm5F4Nv8xd1FPdnO/gEXLgWCPWTIUoy2UQsjZSN+d4JQTyzCvtAbR/Od9CK
bEWl/vtEGaJXYdHJuLREOLsuIISekaKa0cek9CY7j0Dyfja2uq6MGXRyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWSIDYiuCgXhkerNPPOneXEFWdJMB8GA1UdIwQY
MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt
ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0
LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUfozWi8
uugugHGCRz0aYw80Ij08SSaNXPvbfCM2hLp3Fhqlm2YajuE7iZzMU3x5iJZUUuYw
tz3Wkuku+DYy3P8OWl6Xoc2/d9cXxerul1JmZQSqBgKIpolBJM2mZF/XMrMkZHC8
JQpOQ1L3RUYFQTuMTvsKGa+3WwPSlv+NFLJN+lPMCKBijBUhsm61CDYQzQ9vq4Eq
HVoUxop4KcTGS265h509n653kCu07vn9+4YFaXuoKvJEImKzgGRlZnf61A/2MNx6
X5qd5HfL5i4TEBKxKvBzAfOnYg2lf8efDgF9ixXshPYzgH+mVX/k0pNJdZcZu/1I
l3gtgLgGKTYWSQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:31 2025 by rpki-client