Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
File: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft (raw, json)
Hash identifier: H9ed6jyDbXgF/m8Ceh/MM6KxHqrmS2ndC48UQc544Y4=
Subject key identifier: D0:71:62:C7:18:EC:2B:6F:B0:AA:D2:80:C5:3D:03:A8:4E:71:BE:DA
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 019A24E65EA8459C42F1E00B3794986A3A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
Manifest number: 1707
Signing time: Mon 27 Oct 2025 09:01:08 +0000
Manifest this update: Mon 27 Oct 2025 09:01:08 +0000
Manifest next update: Tue 28 Oct 2025 09:01:08 +0000
Files and hashes: 1: VuINTwukw5gk-GpLk8S7BysJ2QQ.roa (hash: /kBRgqE3JbZP3MZS0KUDmcjo+++iqmd1/lk+a59O9c4=)
2: Vz4KDvni-pIG9pERT0AYceBbHa0.roa (hash: pYtbdwqDoFmUa9j2KOPzRaeu3zPU5WrvlE2/yiAXzDw=)
3: o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl (hash: q0QNR5SRi/ltUFZyVLoXg5fMzLATbs3vxASVN1Nk/6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:5e:a8:45:9c:42:f1:e0:0b:37:94:98:6a:3a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Oct 27 09:01:08 2025 GMT
Not After : Oct 28 09:01:08 2025 GMT
Subject: CN=d07162c718ec2b6fb0aad280c53d03a84e71beda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0e:42:c0:1d:95:fa:e2:7e:87:55:c3:61:78:
ba:34:df:ba:45:46:4e:ad:ea:c9:70:d0:59:4a:2e:
f8:98:0a:9e:8b:72:f4:4e:24:b0:db:18:a7:43:f4:
7a:45:19:35:a9:4d:1c:14:74:48:29:2d:90:ce:b2:
22:6c:1e:19:c5:81:85:48:c2:e9:01:42:7b:93:ba:
13:a2:46:fd:84:33:27:66:a8:1e:43:08:4d:37:fd:
15:68:ff:1b:3f:d5:cb:52:77:34:06:10:a9:e7:d9:
6a:d1:1c:6f:eb:db:fb:6b:4a:b0:88:da:f4:d8:94:
22:7f:88:5a:48:2d:4d:0b:30:aa:48:13:7a:74:52:
c4:16:a0:13:22:39:20:8b:b2:fb:8f:1c:68:c9:54:
3e:2e:e1:0d:9b:c8:10:f3:2b:40:bd:3b:97:1b:d8:
93:e9:24:89:32:64:11:ee:85:a3:c4:78:f6:3f:8d:
b8:e2:03:fc:8e:6a:ab:d9:28:5e:a8:d6:84:97:fb:
b1:9e:49:14:db:0b:d3:89:21:f5:83:8d:2a:da:e5:
3e:5f:52:fe:13:e8:8b:f4:a4:0d:b1:a7:b9:c0:6e:
0c:6b:38:59:94:2a:ac:98:6c:83:e6:72:bd:6f:11:
41:6e:1d:bd:78:e6:00:e0:31:92:0f:e4:b0:10:32:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:62:C7:18:EC:2B:6F:B0:AA:D2:80:C5:3D:03:A8:4E:71:BE:DA
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:5e:d4:a9:a1:ec:ce:6b:f3:72:54:95:02:9f:08:3d:86:
0c:ad:b0:dc:a1:50:84:32:1d:6d:af:b7:42:b9:a2:23:cc:0a:
37:6b:78:06:a3:af:b6:3c:37:1d:a4:1f:82:c8:ae:90:7d:32:
7f:a1:ed:83:48:d5:be:77:4a:ad:85:4e:43:bb:82:60:59:d7:
9b:93:71:8c:fc:5e:82:92:2e:9f:d0:2c:15:b6:17:40:7f:a9:
7f:0a:3f:3a:66:e6:78:34:b0:b3:52:85:5c:fb:72:1c:56:e3:
f1:e7:42:1b:38:f1:37:cd:b5:c4:54:8b:b3:16:29:0b:ef:b3:
f7:25:5e:1e:bd:5c:30:a9:f5:8c:0d:2f:b0:92:9c:b6:60:dd:
20:84:f2:8c:93:74:41:b9:d6:eb:38:d3:9f:b9:3d:97:1e:c8:
b2:cb:90:15:6e:62:1d:2d:5a:81:00:9f:44:67:da:67:d8:f8:
a8:e9:3f:86:2c:4b:02:c1:d3:6b:53:c2:de:d6:1b:9d:48:68:
8f:47:ec:ea:72:61:53:c6:21:49:6e:64:17:a3:20:8b:65:8a:
15:ca:c7:f7:30:4a:1d:28:de:46:d4:a3:01:0b:ac:cc:bf:ff:
17:8e:50:b4:ce:ef:df:65:2c:db:00:fc:d8:b1:c7:53:2a:9b:
64:86:c4:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZok5l6oRZxC8eALN5SYajqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOWI0OTQzZTdkNmI0YjBlMWRlODVjOWJjMzhiODU3NTU0
ZGQ0N2QwHhcNMjUxMDI3MDkwMTA4WhcNMjUxMDI4MDkwMTA4WjAzMTEwLwYDVQQD
EyhkMDcxNjJjNzE4ZWMyYjZmYjBhYWQyODBjNTNkMDNhODRlNzFiZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA5CwB2V+uJ+h1XDYXi6NN+6RUZO
rerJcNBZSi74mAqei3L0TiSw2xinQ/R6RRk1qU0cFHRIKS2QzrIibB4ZxYGFSMLp
AUJ7k7oTokb9hDMnZqgeQwhNN/0VaP8bP9XLUnc0BhCp59lq0Rxv69v7a0qwiNr0
2JQif4haSC1NCzCqSBN6dFLEFqATIjkgi7L7jxxoyVQ+LuENm8gQ8ytAvTuXG9iT
6SSJMmQR7oWjxHj2P4244gP8jmqr2SheqNaEl/uxnkkU2wvTiSH1g40q2uU+X1L+
E+iL9KQNsae5wG4MazhZlCqsmGyD5nK9bxFBbh29eOYA4DGSD+SwEDJwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBxYscY7CtvsKrSgMU9A6hOcb7aMB8GA1UdIwQY
MBaAFKObSUPn1rSw4d6Fybw4uFdVTdR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUt
NjkzYmY2N2U2MWYzLzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82Y2Y3MTItZGQwYi00YTkwLTk1OGUtNjkzYmY2N2U2MWYz
LzEvbzV0SlEtZld0TERoM29YSnZEaTRWMVZOMUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjJe1Kmh
7M5r83JUlQKfCD2GDK2w3KFQhDIdba+3QrmiI8wKN2t4BqOvtjw3HaQfgsiukH0y
f6Htg0jVvndKrYVOQ7uCYFnXm5NxjPxegpIun9AsFbYXQH+pfwo/OmbmeDSws1KF
XPtyHFbj8edCGzjxN821xFSLsxYpC++z9yVeHr1cMKn1jA0vsJKctmDdIITyjJN0
QbnW6zjTn7k9lx7IssuQFW5iHS1agQCfRGfaZ9j4qOk/hixLAsHTa1PC3tYbnUho
j0fs6nJhU8YhSW5kF6Mgi2WKFcrH9zBKHSjeRtSjAQuszL//F45QtM7v32Us2wD8
2LHHUyqbZIbEZw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 11:58:54 2025 by rpki-client