Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: rwjfw2h+onHQWXMo7ivpe83tfwunxTTXlENbT+fTaJU=
Subject key identifier: 84:64:FA:3B:EA:8D:85:D9:6B:8B:12:0E:BE:E3:88:AD:76:2F:8A:15
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 019A71B875D56E95C9D9DD90AEA40FAD5398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: LRf7KF0dB7mVqJV2n0o2pjGfxJzu9rAcaA2BoT9tDyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:75:d5:6e:95:c9:d9:dd:90:ae:a4:0f:ad:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=8464fa3bea8d85d96b8b120ebee388ad762f8a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:b9:d7:bf:68:70:83:49:6b:9b:fa:8c:dd:
cd:98:14:82:a6:49:9c:f7:02:73:89:af:66:75:05:
d7:ff:e9:dd:e6:be:81:8a:a0:64:82:76:e3:d7:fe:
c3:7f:5d:74:70:a4:89:50:e8:eb:30:5e:b1:8d:0d:
44:72:e7:58:4a:e4:04:67:5d:fd:13:bc:42:2b:b1:
5d:63:9d:66:11:2d:c0:4e:c0:d6:fd:1a:bc:7b:b5:
5a:ae:06:32:0b:65:93:ef:e1:1a:0c:96:73:dd:cd:
3f:ce:2e:f5:d3:25:93:28:9b:a7:11:6f:bb:15:62:
36:52:30:56:a6:58:ca:12:5e:69:2f:ab:ce:c6:6c:
77:a2:82:ee:98:c7:bc:f2:b5:f9:4c:80:81:02:3a:
3f:82:2d:7f:ab:9c:a7:17:c8:ae:5d:05:eb:56:c5:
d5:e4:db:c4:e6:62:70:8e:fa:9d:63:c0:6e:52:e6:
53:9a:30:df:ba:4a:2d:11:a8:c1:6a:a5:f2:8e:e3:
af:60:67:28:88:db:7f:db:26:f5:18:2e:7d:a0:a5:
69:fd:e4:e3:01:e0:fe:98:dc:16:75:0e:0c:69:e3:
7f:4e:14:ed:87:ef:71:a5:98:fe:ec:31:aa:ba:af:
f8:09:51:e3:3b:09:d8:66:04:bd:a0:0d:52:0a:e8:
e2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:FA:3B:EA:8D:85:D9:6B:8B:12:0E:BE:E3:88:AD:76:2F:8A:15
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8f:ca:b3:0b:aa:9d:36:69:94:33:17:10:8d:db:61:e7:7b:
d0:1d:a7:9c:cf:b2:3f:fc:01:2e:98:7a:98:9e:8e:e7:6e:bc:
c5:d6:80:23:f0:de:e8:f5:38:07:ac:ad:6a:03:bb:12:5c:78:
f7:47:14:1c:40:7d:43:ef:de:0e:1d:4a:26:70:ed:61:b9:16:
9b:35:dc:3a:38:5a:1c:15:07:ad:47:3f:72:f8:48:8f:31:9c:
7a:72:7a:fb:70:29:c1:e3:35:fe:23:45:53:e6:b6:52:ed:cb:
10:0c:64:4f:62:45:d4:ce:17:1f:be:64:70:6b:f8:1f:d3:f2:
81:7e:5c:7b:d9:3f:cf:c8:52:6e:e6:b0:49:dd:35:04:12:79:
03:94:7b:dd:01:09:8e:f6:5d:6f:30:71:fa:47:b7:3d:d5:ac:
d7:43:c1:d7:84:57:cc:d7:8b:8b:7b:6b:70:fc:0e:18:d3:b8:
93:32:5e:d5:29:61:96:82:34:17:93:38:c4:df:27:e8:04:57:
c7:30:b1:05:eb:8c:c0:e6:8b:ab:ae:bb:53:9a:a8:74:6d:75:
5e:e8:94:19:50:59:2d:73:b8:eb:0b:af:bb:3a:5d:8a:71:22:
be:18:0c:22:23:16:75:97:56:39:bb:e3:3b:f2:77:b3:b3:09:
d9:a1:f6:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHXVbpXJ2d2QrqQPrVOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjUxMTExMDcwMTQ1WhcNMjUxMTEyMDcwMTQ1WjAzMTEwLwYDVQQD
Eyg4NDY0ZmEzYmVhOGQ4NWQ5NmI4YjEyMGViZWUzODhhZDc2MmY4YTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hC5179ocINJa5v6jN3NmBSCpkmc
9wJzia9mdQXX/+nd5r6BiqBkgnbj1/7Df110cKSJUOjrMF6xjQ1EcudYSuQEZ139
E7xCK7FdY51mES3ATsDW/Rq8e7VargYyC2WT7+EaDJZz3c0/zi710yWTKJunEW+7
FWI2UjBWpljKEl5pL6vOxmx3ooLumMe88rX5TICBAjo/gi1/q5ynF8iuXQXrVsXV
5NvE5mJwjvqdY8BuUuZTmjDfukotEajBaqXyjuOvYGcoiNt/2yb1GC59oKVp/eTj
AeD+mNwWdQ4MaeN/ThTth+9xpZj+7DGquq/4CVHjOwnYZgS9oA1SCuji0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRk+jvqjYXZa4sSDr7jiK12L4oVMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbI/Kswuq
nTZplDMXEI3bYed70B2nnM+yP/wBLph6mJ6O5268xdaAI/De6PU4B6ytagO7Elx4
90cUHEB9Q+/eDh1KJnDtYbkWmzXcOjhaHBUHrUc/cvhIjzGcenJ6+3ApweM1/iNF
U+a2Uu3LEAxkT2JF1M4XH75kcGv4H9PygX5ce9k/z8hSbuawSd01BBJ5A5R73QEJ
jvZdbzBx+ke3PdWs10PB14RXzNeLi3trcPwOGNO4kzJe1SlhloI0F5M4xN8n6ARX
xzCxBeuMwOaLq667U5qodG11XuiUGVBZLXO46wuvuzpdinEivhgMIiMWdZdWObvj
O/J3s7MJ2aH2RA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:00 2025 by rpki-client