Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: 3joWUfQ5hWTkn0plsQLjZIwdKtKfSauRbzM5JZHRKAg=
Subject key identifier: 09:82:C9:D7:20:8D:9A:7E:0E:77:68:65:96:63:3D:BC:CF:27:A1:43
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 019A2A432887C26B94CF4A1A8DD5779B5729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 0F7C
Signing time: Tue 28 Oct 2025 10:00:35 +0000
Manifest this update: Tue 28 Oct 2025 10:00:35 +0000
Manifest next update: Wed 29 Oct 2025 10:00:35 +0000
Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: 18rKMmSdwGoHzzRfP7JegKCb9/VUwdMldsgz+zssWAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:28:87:c2:6b:94:cf:4a:1a:8d:d5:77:9b:57:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Oct 28 10:00:35 2025 GMT
Not After : Oct 29 10:00:35 2025 GMT
Subject: CN=0982c9d7208d9a7e0e77686596633dbccf27a143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:bb:4b:1b:8a:3c:19:29:bf:7e:c4:48:96:
98:18:6f:4d:d8:d8:72:49:68:64:8a:33:4a:fc:94:
7a:b8:0b:61:af:cb:6d:fd:37:52:7c:81:92:31:9b:
07:58:8a:b5:90:80:35:50:92:2e:d7:52:98:23:54:
d7:01:fd:21:05:40:a1:96:f8:b3:36:9e:06:e6:10:
56:99:ae:88:fc:bb:c3:4f:b9:6e:ed:8f:1a:54:3b:
88:b0:0a:2a:31:23:71:da:86:b4:88:fa:ca:fe:d4:
20:3f:dd:ef:e9:98:33:59:b8:6c:1d:37:c7:bd:9a:
e2:cd:a2:14:ef:a4:97:6f:cc:55:f4:af:16:ae:08:
fd:cc:93:05:50:2c:81:5e:00:23:70:37:d3:19:26:
87:f9:42:eb:f7:c1:4b:a8:db:1f:95:92:db:14:04:
66:74:d6:83:5b:85:c1:78:50:73:32:c4:30:e9:2c:
21:21:57:bd:67:21:db:1f:f3:b0:8e:5b:8b:f2:99:
07:af:28:3d:6c:38:ad:65:14:e5:2d:21:52:4d:fe:
08:95:ee:af:fb:5c:e8:f5:a4:33:6c:1e:48:f9:b7:
51:6f:cc:5a:7b:4b:0d:94:fa:a7:09:4c:d7:3f:e3:
85:58:6d:e6:28:e4:8e:dd:fc:85:9d:81:12:01:38:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:82:C9:D7:20:8D:9A:7E:0E:77:68:65:96:63:3D:BC:CF:27:A1:43
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:3c:b3:a7:49:7d:3f:9c:27:9d:88:9d:d0:72:9d:3f:a0:a4:
ce:76:cc:05:37:3b:46:c3:a2:e6:c6:f6:ca:6b:79:99:75:03:
b5:4e:32:a2:d0:1f:c9:63:ba:0f:e6:20:2e:bf:9b:5f:8c:ab:
02:38:40:4c:63:ac:19:0b:7d:be:50:97:dd:2f:6a:b4:81:2c:
2f:a4:5d:b2:5c:26:e5:36:ea:82:37:f6:79:f4:74:15:3c:f6:
40:fc:15:dc:58:6b:5f:09:cd:9c:ee:4d:be:28:db:5b:09:4a:
8e:c8:a6:1e:ca:cd:8a:88:33:cd:2d:86:dd:ea:68:ca:6d:9d:
d4:75:c7:54:6d:bb:78:2f:e2:c7:f4:e4:47:ee:7e:53:21:71:
f1:56:d7:09:8c:fc:ab:02:9a:c3:b3:a8:29:16:92:46:1c:a2:
42:a7:cd:df:ff:75:e8:80:0b:26:08:17:c8:6e:86:bb:89:38:
82:e1:6c:70:fe:15:6e:76:b1:1d:37:5d:a2:a7:36:cc:6d:7c:
45:47:77:11:ec:d1:f8:0b:bd:25:40:87:21:a8:b5:10:1e:33:
ed:eb:9b:46:17:a3:b0:7e:a6:ba:33:1b:02:0d:6f:96:b6:88:
d5:9b:24:11:90:07:ba:9b:34:22:04:f3:40:2c:48:d4:ed:7c:
91:05:00:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoqQyiHwmuUz0oajdV3m1cpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZTJlZjA5NzA4YTk0NTlkYTU3NTlmMTQ2ZjY5YTVkMTlj
Y2ZlNzUwHhcNMjUxMDI4MTAwMDM1WhcNMjUxMDI5MTAwMDM1WjAzMTEwLwYDVQQD
EygwOTgyYzlkNzIwOGQ5YTdlMGU3NzY4NjU5NjYzM2RiY2NmMjdhMTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dG7SxuKPBkpv37ESJaYGG9N2Nhy
SWhkijNK/JR6uAthr8tt/TdSfIGSMZsHWIq1kIA1UJIu11KYI1TXAf0hBUChlviz
Np4G5hBWma6I/LvDT7lu7Y8aVDuIsAoqMSNx2oa0iPrK/tQgP93v6ZgzWbhsHTfH
vZrizaIU76SXb8xV9K8Wrgj9zJMFUCyBXgAjcDfTGSaH+ULr98FLqNsflZLbFARm
dNaDW4XBeFBzMsQw6SwhIVe9ZyHbH/OwjluL8pkHryg9bDitZRTlLSFSTf4Ile6v
+1zo9aQzbB5I+bdRb8xae0sNlPqnCUzXP+OFWG3mKOSO3fyFnYESATh3AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmCydcgjZp+DndoZZZjPbzPJ6FDMB8GA1UdIwQY
MBaAFDvi7wlwipRZ2ldZ8Ub2ml0ZzP51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDIt
ZDQxZmY4NTg2MThhLzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81YTliNDUtNDhkZC00ZDhlLWJhZDItZDQxZmY4NTg2MThh
LzEvTy1MdkNYQ0tsRm5hVjFueFJ2YWFYUm5NX25VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxTyzp0l9
P5wnnYid0HKdP6CkznbMBTc7RsOi5sb2ymt5mXUDtU4yotAfyWO6D+YgLr+bX4yr
AjhATGOsGQt9vlCX3S9qtIEsL6Rdslwm5Tbqgjf2efR0FTz2QPwV3FhrXwnNnO5N
vijbWwlKjsimHsrNiogzzS2G3epoym2d1HXHVG27eC/ix/TkR+5+UyFx8VbXCYz8
qwKaw7OoKRaSRhyiQqfN3/916IALJggXyG6Gu4k4guFscP4VbnaxHTddoqc2zG18
RUd3EezR+Au9JUCHIai1EB4z7eubRhejsH6mujMbAg1vlraI1ZskEZAHups0IgTz
QCxI1O18kQUAqQ==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:35:45 2025 by rpki-client