Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
File: O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft (raw, json)
Hash identifier: oSSf+D+j7jbQJGtfDXGZVSspsYCiM7rgTtIjbUTyfMo=
Subject key identifier: 72:5E:08:03:ED:9E:29:B8:E5:6D:01:9C:12:D2:2B:FD:94:7C:BD:1A
Authority key identifier: 3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
Certificate issuer: /CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Certificate serial: 019922FADD5B9BEBA860057B351820247329
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
Manifest number: 0AAA
Signing time: Sun 07 Sep 2025 07:01:29 +0000
Manifest this update: Sun 07 Sep 2025 07:01:29 +0000
Manifest next update: Mon 08 Sep 2025 07:01:29 +0000
Files and hashes: 1: O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl (hash: WmMQZekFKCAXeW1E0m8amdDxL8steVBznckz+A7NYfk=)
2: w9ICT6cKkgB_pyRYfsBkT7I_e5A.roa (hash: Ogtb5a6VjW8bSqLn3V6UgYjH3Wl670+DPbn1H5LtdUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:dd:5b:9b:eb:a8:60:05:7b:35:18:20:24:73:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bed02136698701f74c49f8a2a9e73e84ec981b6
Validity
Not Before: Sep 7 07:01:29 2025 GMT
Not After : Sep 8 07:01:29 2025 GMT
Subject: CN=725e0803ed9e29b8e56d019c12d22bfd947cbd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cc:2e:17:6d:1d:e0:16:a1:af:f3:ec:18:07:
54:70:25:0b:41:c0:ac:d8:51:db:9d:e8:5d:30:ee:
0a:bd:21:26:b4:b0:cb:bb:4c:64:32:69:4c:cf:8a:
30:06:74:42:58:a2:ee:7c:5c:78:7d:f5:43:b3:a9:
4e:a9:66:5b:ad:a8:fc:8b:66:2f:3c:d4:33:8a:00:
06:85:e7:af:40:f2:d0:e4:2d:69:0c:d8:18:9c:e2:
9a:f3:e2:44:1a:58:7f:a3:75:39:c9:b0:5b:ce:6f:
6c:56:f8:f3:9c:c6:43:26:cb:dd:1d:f5:ca:d9:83:
16:9b:0a:d4:1d:b6:fa:51:96:07:c5:fd:31:82:bc:
3f:81:17:1c:d3:17:ad:95:f0:ff:57:a4:86:59:2b:
3a:e2:cb:c3:d2:56:87:2f:03:98:85:7b:62:e2:c9:
8d:e2:02:35:0d:72:cc:c3:37:86:49:7b:aa:c8:1d:
5a:c4:b8:64:c6:95:38:4e:50:c3:a2:5a:9d:ec:8b:
96:ad:55:85:0a:c4:22:31:70:f1:13:71:e7:58:c8:
ee:cc:d6:7e:06:2d:fc:63:66:12:0d:ea:cc:86:59:
1c:35:f0:1b:50:2a:30:68:f9:62:36:f7:1b:3e:c8:
91:ce:ca:50:07:f3:ba:83:44:af:15:45:30:c7:70:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5E:08:03:ED:9E:29:B8:E5:6D:01:9C:12:D2:2B:FD:94:7C:BD:1A
X509v3 Authority Key Identifier:
keyid:3B:ED:02:13:66:98:70:1F:74:C4:9F:8A:2A:9E:73:E8:4E:C9:81:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-0CE2aYcB90xJ-KKp5z6E7JgbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9faed1-f642-4e82-8a73-ed99ef64adbf/1/O-0CE2aYcB90xJ-KKp5z6E7JgbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:06:d6:56:c9:c2:cb:9a:bb:6d:da:dc:69:b5:93:04:41:1c:
b4:a1:b2:f1:46:3b:04:80:cb:d9:10:2d:be:76:8f:c7:0f:39:
98:f9:07:a4:d6:da:61:1d:bf:22:6a:b0:c2:88:e6:61:ee:2f:
e7:99:a2:b3:f5:86:c5:b2:4e:06:f2:ce:31:66:a4:81:6a:12:
43:d4:51:b7:cb:a1:fe:69:6b:c0:aa:32:77:ab:65:67:68:70:
4b:6c:75:5f:2a:e8:b7:a0:66:84:6b:a5:d9:e5:83:6d:1e:04:
1c:b0:b7:6c:4b:30:d3:3d:af:e7:f8:3c:2b:77:67:dc:76:81:
9b:6a:09:42:ac:e2:79:ea:27:46:e0:85:c4:de:eb:e4:f2:60:
ac:2a:5c:e5:9f:3b:2f:36:9d:f4:89:5a:d5:16:80:27:f9:92:
98:e6:56:7a:be:6e:52:31:18:08:cc:4f:43:79:0f:9c:e5:19:
5f:02:c3:93:01:e9:0f:05:6d:c9:aa:62:65:df:e4:52:da:52:
cf:b1:46:0b:47:93:6b:2d:d9:a3:bb:c0:16:35:d7:74:e1:ce:
44:93:93:97:49:c6:1a:3a:c4:32:50:bd:df:f2:de:9b:3b:99:
f3:e4:1f:a9:9b:6b:ec:ca:f9:f8:a0:31:93:cb:8c:be:62:b4:
12:ad:fe:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+t1bm+uoYAV7NRggJHMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWQwMjEzNjY5ODcwMWY3NGM0OWY4YTJhOWU3M2U4NGVj
OTgxYjYwHhcNMjUwOTA3MDcwMTI5WhcNMjUwOTA4MDcwMTI5WjAzMTEwLwYDVQQD
Eyg3MjVlMDgwM2VkOWUyOWI4ZTU2ZDAxOWMxMmQyMmJmZDk0N2NiZDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2swuF20d4Bahr/PsGAdUcCULQcCs
2FHbnehdMO4KvSEmtLDLu0xkMmlMz4owBnRCWKLufFx4ffVDs6lOqWZbraj8i2Yv
PNQzigAGheevQPLQ5C1pDNgYnOKa8+JEGlh/o3U5ybBbzm9sVvjznMZDJsvdHfXK
2YMWmwrUHbb6UZYHxf0xgrw/gRcc0xetlfD/V6SGWSs64svD0laHLwOYhXti4smN
4gI1DXLMwzeGSXuqyB1axLhkxpU4TlDDolqd7IuWrVWFCsQiMXDxE3HnWMjuzNZ+
Bi38Y2YSDerMhlkcNfAbUCowaPliNvcbPsiRzspQB/O6g0SvFUUwx3CP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJeCAPtnim45W0BnBLSK/2UfL0aMB8GA1UdIwQY
MBaAFDvtAhNmmHAfdMSfiiqec+hOyYG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMt
ZWQ5OWVmNjRhZGJmLzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS85ZmFlZDEtZjY0Mi00ZTgyLThhNzMtZWQ5OWVmNjRhZGJm
LzEvTy0wQ0UyYVljQjkweEotS0twNXo2RTdKZ2JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwbWVsnC
y5q7bdrcabWTBEEctKGy8UY7BIDL2RAtvnaPxw85mPkHpNbaYR2/ImqwwojmYe4v
55mis/WGxbJOBvLOMWakgWoSQ9RRt8uh/mlrwKoyd6tlZ2hwS2x1Xyrot6BmhGul
2eWDbR4EHLC3bEsw0z2v5/g8K3dn3HaBm2oJQqzieeonRuCFxN7r5PJgrCpc5Z87
Lzad9Ila1RaAJ/mSmOZWer5uUjEYCMxPQ3kPnOUZXwLDkwHpDwVtyapiZd/kUtpS
z7FGC0eTay3Zo7vAFjXXdOHORJOTl0nGGjrEMlC93/LemzuZ8+QfqZtr7Mr5+KAx
k8uMvmK0Eq3+Qw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:41 2025 by rpki-client