Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier: KketIinsETvAQehchUo8R20iDgOc1aSpKeahmFU6x0s=
Subject key identifier: 4F:48:6B:4B:82:69:B1:7F:AD:4F:9B:07:29:06:05:6E:0C:47:DF:63
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer: /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial: 019A4BF36A0CEF7BD16DA481746C55A182DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number: 1143
Signing time: Mon 03 Nov 2025 23:00:34 +0000
Manifest this update: Mon 03 Nov 2025 23:00:34 +0000
Manifest next update: Tue 04 Nov 2025 23:00:34 +0000
Files and hashes: 1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: c+R+65g7Xut99iGDCFg7N59M890UrdOUt9Z6TbjWGDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:f3:6a:0c:ef:7b:d1:6d:a4:81:74:6c:55:a1:82:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Validity
Not Before: Nov 3 23:00:34 2025 GMT
Not After : Nov 4 23:00:34 2025 GMT
Subject: CN=4f486b4b8269b17fad4f9b072906056e0c47df63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ad:97:95:2c:32:06:85:66:91:a2:39:93:d0:
ea:61:9e:1e:9f:d7:f5:76:98:4a:65:17:5c:f6:c3:
74:50:4e:38:99:ec:97:e2:0b:09:e3:6d:a1:72:6d:
2f:07:fa:b7:c3:a2:0a:4d:6d:b3:de:f5:d5:f3:d6:
74:36:e1:63:e5:c7:06:59:47:ed:f8:69:12:8a:b2:
51:ad:a8:38:09:80:85:ba:41:87:21:52:3b:90:1e:
47:20:88:52:fa:90:d3:33:6e:73:93:12:f7:9f:3e:
ae:44:38:e0:5f:ca:b6:cb:18:78:23:92:08:b5:40:
1d:7c:2d:51:f7:98:a4:52:0d:f3:99:0f:e1:0e:16:
00:1d:da:0e:33:7f:4d:b1:cd:a1:d3:17:53:74:6c:
ce:2d:99:dc:e0:18:53:ef:57:9c:e3:d3:e1:93:42:
c3:be:a3:d9:16:32:f8:fd:26:e1:f2:7d:b7:d6:8a:
8f:38:44:5d:73:99:f4:25:fd:3f:0c:a4:a2:d4:d8:
8e:16:5e:cf:77:fc:2b:db:10:a7:de:96:b0:35:74:
b9:23:1f:46:5c:4d:e8:27:f1:6a:68:75:ea:94:01:
56:e8:14:b9:dd:d9:35:bb:59:b1:e5:5a:79:27:d9:
83:1a:3b:51:a5:f3:7f:dd:5d:7d:d5:fe:d5:64:6b:
9a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:48:6B:4B:82:69:B1:7F:AD:4F:9B:07:29:06:05:6E:0C:47:DF:63
X509v3 Authority Key Identifier:
keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:90:d5:58:bc:6b:50:14:fe:67:1f:ba:98:fd:81:70:98:97:
d2:67:4e:ab:df:cd:99:f3:84:87:cb:49:f6:19:bd:34:7b:77:
7b:55:0c:08:04:bf:31:6b:01:cc:85:ee:02:6d:62:44:e7:bc:
12:96:0e:1f:a1:ef:79:48:59:0c:af:c0:e4:ca:56:24:41:df:
60:b8:bd:98:78:ff:3d:d5:77:2e:0a:73:0d:e0:c3:0a:81:2a:
db:58:1f:76:ac:43:53:04:78:3a:2c:b7:73:ab:96:8e:6c:db:
29:ea:e4:95:33:6c:64:62:74:55:18:87:73:41:30:30:56:a5:
b1:1e:86:75:95:35:b8:16:02:c3:d8:af:bb:dd:a8:4f:e5:59:
69:1a:09:24:22:a4:2c:e6:ba:ca:ee:11:0c:95:d3:67:4f:77:
5d:47:ae:46:5a:e1:d1:26:e6:a4:e3:64:36:cc:d2:24:19:f4:
2c:49:f9:bc:2e:d5:83:e4:f1:a7:7d:ef:8b:36:3b:89:39:f6:
a5:6c:cb:bd:35:a4:fa:61:bd:76:ee:e9:3c:59:77:ae:36:60:
e3:7c:bc:d7:7b:fe:77:51:b6:a1:17:a1:ba:b6:aa:e6:a7:e3:
85:77:00:56:21:7a:f4:e3:7a:c9:6f:fa:c3:c2:18:70:af:71:
45:13:0e:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpL82oM73vRbaSBdGxVoYLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhY2Q5MGNiNjM3ZDNkMmM3M2Q5OWRlYTlhNGZlODEzZTY0
ODU4NDMwHhcNMjUxMTAzMjMwMDM0WhcNMjUxMTA0MjMwMDM0WjAzMTEwLwYDVQQD
Eyg0ZjQ4NmI0YjgyNjliMTdmYWQ0ZjliMDcyOTA2MDU2ZTBjNDdkZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq2XlSwyBoVmkaI5k9DqYZ4en9f1
dphKZRdc9sN0UE44meyX4gsJ422hcm0vB/q3w6IKTW2z3vXV89Z0NuFj5ccGWUft
+GkSirJRrag4CYCFukGHIVI7kB5HIIhS+pDTM25zkxL3nz6uRDjgX8q2yxh4I5II
tUAdfC1R95ikUg3zmQ/hDhYAHdoOM39Nsc2h0xdTdGzOLZnc4BhT71ec49Phk0LD
vqPZFjL4/Sbh8n231oqPOERdc5n0Jf0/DKSi1NiOFl7Pd/wr2xCn3pawNXS5Ix9G
XE3oJ/FqaHXqlAFW6BS53dk1u1mx5Vp5J9mDGjtRpfN/3V191f7VZGuaUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9Ia0uCabF/rU+bBykGBW4MR99jMB8GA1UdIwQY
MBaAFDrNkMtjfT0sc9md6ppP6BPmSFhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzct
YmU4Yzc4YzA2ZmM3LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wOThjZjQtMDdjMC00YWI3LTljYzctYmU4Yzc4YzA2ZmM3
LzEvT3MyUXkyTjlQU3h6MlozcW1rX29FLVpJV0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZDVWLxr
UBT+Zx+6mP2BcJiX0mdOq9/NmfOEh8tJ9hm9NHt3e1UMCAS/MWsBzIXuAm1iROe8
EpYOH6HveUhZDK/A5MpWJEHfYLi9mHj/PdV3LgpzDeDDCoEq21gfdqxDUwR4Oiy3
c6uWjmzbKerklTNsZGJ0VRiHc0EwMFalsR6GdZU1uBYCw9ivu92oT+VZaRoJJCKk
LOa6yu4RDJXTZ093XUeuRlrh0SbmpONkNszSJBn0LEn5vC7Vg+Txp33vizY7iTn2
pWzLvTWk+mG9du7pPFl3rjZg43y813v+d1G2oRehuraq5qfjhXcAViF69ON6yW/6
w8IYcK9xRRMO8A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 05:43:34 2025 by rpki-client