Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
File: o2mLAQU5EWB-2yp2CQpqztlaPtU.mft (raw, json)
Hash identifier: QxJkc1imRPKEAicEM8ZklLl9ouoQNo4JZNIkVrpnbPY=
Subject key identifier: 03:7C:67:95:FA:DD:1D:7B:FF:63:66:CA:D3:6A:06:1E:63:07:15:EF
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 019931913AA7D09912733CAEEB93009FF15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 03:00:25 +0000
Manifest this update: Wed 10 Sep 2025 03:00:25 +0000
Manifest next update: Thu 11 Sep 2025 03:00:25 +0000
Files and hashes: 1: R8ht10VeSoVhydPFwGD77r1yDU0.roa (hash: ofWmsTQNmoPWiH0DZLija6UpuCRIgTv7LLQ8ZzQiLho=)
2: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (hash: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=)
3: o2mLAQU5EWB-2yp2CQpqztlaPtU.crl (hash: JIjU/5kyOQFxKX2hWyti72Dvojqb8GknxCjwiEAighI=)
4: tWQ9cnFy3imrP2HUU-YNNesXz-M.roa (hash: keNfuumhLj0esV6ivUODGor64VRXrwZusUQrseCHziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:3a:a7:d0:99:12:73:3c:ae:eb:93:00:9f:f1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Sep 10 03:00:25 2025 GMT
Not After : Sep 11 03:00:25 2025 GMT
Subject: CN=037c6795fadd1d7bff6366cad36a061e630715ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:bb:cf:c8:f4:5c:ba:f8:f6:a3:d8:8f:a1:
9d:24:95:49:be:e3:be:72:c3:78:03:23:72:62:56:
4b:d9:71:35:e4:f4:22:7c:0c:c1:3b:68:1d:74:f0:
c6:cc:2e:b3:f1:22:d7:9e:3f:88:f7:25:79:b4:e3:
f9:39:4f:ae:72:df:34:82:e8:90:fd:46:7b:dc:9d:
4f:77:e8:df:d8:07:9d:89:0e:0b:66:51:c9:df:10:
84:33:3a:73:b8:81:d1:dc:8b:fb:09:9b:82:84:00:
dd:87:3e:cd:25:84:da:5d:a9:fc:cb:ac:6b:f5:64:
ba:35:9b:3c:dd:91:de:e7:56:df:97:c5:a7:03:f5:
6c:3a:73:68:be:33:c4:d2:79:fb:68:77:e4:b5:07:
b3:40:ab:b5:82:7e:e7:de:36:8f:6e:12:60:77:49:
18:19:7c:be:2a:e4:05:8e:24:1d:fa:fd:e1:68:26:
4e:5c:e2:4a:0e:9a:63:78:41:f9:45:96:b2:f0:4f:
7d:f0:92:0a:1b:b4:a1:d6:da:93:6f:52:94:a2:73:
df:46:9b:5d:34:e0:c0:cf:65:63:7b:39:c5:a5:36:
73:36:ec:aa:75:45:ef:69:3e:72:2a:c4:25:8c:19:
e0:17:63:52:4b:5f:d5:4f:53:f3:57:17:05:f4:6e:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7C:67:95:FA:DD:1D:7B:FF:63:66:CA:D3:6A:06:1E:63:07:15:EF
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1a:9a:83:ce:13:4a:39:ca:48:02:c7:08:ac:37:d1:a2:5a:
6f:b0:c4:a8:e5:3c:bc:bd:17:4d:5b:6f:ff:ce:e6:d1:84:5f:
42:60:c1:4b:90:89:a1:d6:e3:ad:d2:d8:1a:97:39:2a:06:53:
02:ca:56:66:87:67:28:d6:3d:d3:89:a5:21:93:5a:f5:f8:c4:
44:03:f0:d1:3e:73:41:80:60:df:3a:1d:94:90:70:c4:ab:ca:
79:d9:70:e4:18:3e:47:d9:e0:8d:5b:20:5c:c5:af:fb:28:71:
c1:0f:db:1d:0b:6a:d9:f9:1a:98:f0:4c:73:3f:45:8e:16:59:
50:0d:bc:97:14:45:a7:08:98:c2:77:93:b7:f1:3d:c4:85:6e:
46:7c:17:eb:34:88:b8:21:a4:b9:97:b0:b1:71:9e:d0:d7:4e:
ec:b2:fc:56:fd:12:fe:17:e5:57:55:50:d3:8a:30:6d:c6:01:
06:54:1d:d4:4b:33:f4:7a:20:92:f6:1f:89:bf:0f:46:8b:c5:
7c:db:f4:bf:11:2b:ef:f2:35:7a:79:3b:ff:51:8e:23:73:1d:
ba:90:fb:d6:4e:01:66:3c:27:a5:b5:22:69:21:9e:78:f5:80:
2e:46:05:93:9d:a3:f5:47:dd:9a:e5:c1:23:c8:44:3f:28:e6:
1f:76:9f:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxkTqn0JkSczyu65MAn/FaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjk4YjAxMDUzOTExNjA3ZWRiMmE3NjA5MGE2YWNlZDk1
YTNlZDUwHhcNMjUwOTEwMDMwMDI1WhcNMjUwOTExMDMwMDI1WjAzMTEwLwYDVQQD
EygwMzdjNjc5NWZhZGQxZDdiZmY2MzY2Y2FkMzZhMDYxZTYzMDcxNWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRa7z8j0XLr49qPYj6GdJJVJvuO+
csN4AyNyYlZL2XE15PQifAzBO2gddPDGzC6z8SLXnj+I9yV5tOP5OU+uct80guiQ
/UZ73J1Pd+jf2AediQ4LZlHJ3xCEMzpzuIHR3Iv7CZuChADdhz7NJYTaXan8y6xr
9WS6NZs83ZHe51bfl8WnA/VsOnNovjPE0nn7aHfktQezQKu1gn7n3jaPbhJgd0kY
GXy+KuQFjiQd+v3haCZOXOJKDppjeEH5RZay8E998JIKG7Sh1tqTb1KUonPfRptd
NODAz2VjeznFpTZzNuyqdUXvaT5yKsQljBngF2NSS1/VT1PzVxcF9G7fHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAN8Z5X63R17/2NmytNqBh5jBxXvMB8GA1UdIwQY
MBaAFKNpiwEFORFgftsqdgkKas7ZWj7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTIt
YmJkMzExMTg2OTUwLzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS84MWQ2OGEtNTM2Yy00NDQyLWI4NTItYmJkMzExMTg2OTUw
LzEvbzJtTEFRVTVFV0ItMnlwMkNRcHF6dGxhUHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBqag84T
SjnKSALHCKw30aJab7DEqOU8vL0XTVtv/87m0YRfQmDBS5CJodbjrdLYGpc5KgZT
AspWZodnKNY904mlIZNa9fjERAPw0T5zQYBg3zodlJBwxKvKedlw5Bg+R9ngjVsg
XMWv+yhxwQ/bHQtq2fkamPBMcz9FjhZZUA28lxRFpwiYwneTt/E9xIVuRnwX6zSI
uCGkuZewsXGe0NdO7LL8Vv0S/hflV1VQ04owbcYBBlQd1Esz9HogkvYfib8PRovF
fNv0vxEr7/I1enk7/1GOI3MdupD71k4BZjwnpbUiaSGeePWALkYFk52j9UfdmuXB
I8hEPyjmH3afMA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 04:58:03 2025 by rpki-client