Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
File: O_xkMfUzO23dMeg7aWgtjo7gb8E.mft (raw, json)
Hash identifier: EpjwhqnqWtwlm3WWVZiSnAlSNvVwbayDe9F8KgC+eik=
Subject key identifier: 2E:25:E2:EE:38:6E:C8:18:E0:3F:8D:AB:A8:15:C1:4B:1C:FD:6F:E9
Authority key identifier: 3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
Certificate issuer: /CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Certificate serial: 019A213FB0840870E19E492F28567477196B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 16:00:13 +0000
Manifest this update: Sun 26 Oct 2025 16:00:13 +0000
Manifest next update: Mon 27 Oct 2025 16:00:13 +0000
Files and hashes: 1: O_xkMfUzO23dMeg7aWgtjo7gb8E.crl (hash: HIiqzcYfUa5Tac5IT18ZBZEBqKgm5jsUf+S+2pXd+bc=)
2: nEwnWGMzytbCFQz7rWdabIS9yB0.roa (hash: 02h618IubyXzMPvUxA826AJsgMoOVyOdwoqacffXAD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:b0:84:08:70:e1:9e:49:2f:28:56:74:77:19:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfc6431f5333b6ddd31e83b69682d8e8ee06fc1
Validity
Not Before: Oct 26 16:00:13 2025 GMT
Not After : Oct 27 16:00:13 2025 GMT
Subject: CN=2e25e2ee386ec818e03f8daba815c14b1cfd6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:bf:cd:42:0c:13:de:f3:4d:0d:3b:a5:35:
30:6c:3e:3f:71:ed:fe:d9:3b:5a:10:63:44:a3:a6:
eb:a8:6c:b4:86:9f:0f:22:8c:79:1c:2a:90:ce:92:
7f:f3:8b:0b:91:6e:6b:2f:da:dc:48:1d:29:5c:70:
bc:d0:10:6c:d8:a7:a7:89:98:5e:66:58:cc:c8:bf:
25:b9:a2:8a:07:0b:3d:89:12:7c:cc:8a:d2:e6:63:
05:07:94:fc:7b:fb:ef:72:12:fe:e6:27:04:fe:1d:
a0:c0:95:28:c8:3e:b6:b3:4c:18:28:1c:61:45:0c:
5a:74:82:75:8e:c0:4f:37:48:43:4b:ac:54:b6:f0:
c6:2b:0f:cc:51:e7:34:db:32:6d:d9:56:8e:55:73:
17:82:b3:ae:43:9d:65:a0:01:66:91:93:65:1f:de:
e1:2f:42:0b:19:7b:8a:ad:31:5f:4a:72:4a:5b:d0:
21:5e:e3:2a:66:76:46:f3:2f:9c:9b:a6:43:d7:d9:
bc:ea:09:95:54:14:88:ef:93:04:60:96:ce:3d:b5:
d3:6c:d7:99:ed:91:3e:83:f6:1e:31:56:8f:93:8a:
0a:41:86:90:f8:d8:17:35:5e:cb:b8:c7:bd:1d:47:
66:55:07:fb:a7:79:f4:36:91:50:91:46:62:32:be:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:25:E2:EE:38:6E:C8:18:E0:3F:8D:AB:A8:15:C1:4B:1C:FD:6F:E9
X509v3 Authority Key Identifier:
keyid:3B:FC:64:31:F5:33:3B:6D:DD:31:E8:3B:69:68:2D:8E:8E:E0:6F:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_xkMfUzO23dMeg7aWgtjo7gb8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f5a8b1-6e22-4961-b38b-fe01eec40ec1/1/O_xkMfUzO23dMeg7aWgtjo7gb8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a1:21:e5:7b:d2:10:90:64:94:c8:2f:7e:40:60:0f:c6:3d:
b5:01:a4:ff:bf:ce:d9:ef:72:27:82:3d:aa:28:0e:51:4f:76:
50:8c:97:ea:c6:fb:25:71:21:14:7a:c7:d6:09:6f:21:d4:6a:
1e:b4:a5:cb:10:ca:19:f6:09:cd:a7:fc:c8:8f:0c:4e:a4:c4:
f6:50:74:3e:5f:f7:6f:02:e1:9f:0a:5f:d7:06:9b:41:c7:2b:
c0:76:cf:e9:82:3d:cc:ba:bc:96:78:7b:d6:8b:12:cf:c2:4f:
aa:05:c7:85:09:6f:8a:6c:7f:75:11:7b:cc:23:d2:50:64:b1:
7f:1d:a9:a1:09:39:00:b1:d3:2f:d5:42:c8:81:c9:c7:a5:70:
10:e7:d9:83:87:f3:d6:02:db:8c:a0:ce:c0:5f:fd:f9:3f:b0:
2d:63:2e:ea:41:7b:2f:a0:a8:a2:1e:98:d0:79:31:99:97:4f:
74:44:28:58:0a:8f:42:87:0c:a8:28:a1:2e:1b:86:b4:b0:18:
68:65:67:b0:f6:91:1d:6c:08:f8:82:93:67:e4:29:68:77:46:
43:76:b5:e3:e8:49:14:72:60:c1:61:cb:a4:ba:0b:a6:6a:1a:
11:ac:da:aa:54:ed:e9:a4:21:75:a0:9a:48:a7:d1:b0:14:c6:
e3:2f:57:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohP7CECHDhnkkvKFZ0dxlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmM2NDMxZjUzMzNiNmRkZDMxZTgzYjY5NjgyZDhlOGVl
MDZmYzEwHhcNMjUxMDI2MTYwMDEzWhcNMjUxMDI3MTYwMDEzWjAzMTEwLwYDVQQD
EygyZTI1ZTJlZTM4NmVjODE4ZTAzZjhkYWJhODE1YzE0YjFjZmQ2ZmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMa/zUIME97zTQ07pTUwbD4/ce3+
2TtaEGNEo6brqGy0hp8PIox5HCqQzpJ/84sLkW5rL9rcSB0pXHC80BBs2KeniZhe
ZljMyL8luaKKBws9iRJ8zIrS5mMFB5T8e/vvchL+5icE/h2gwJUoyD62s0wYKBxh
RQxadIJ1jsBPN0hDS6xUtvDGKw/MUec02zJt2VaOVXMXgrOuQ51loAFmkZNlH97h
L0ILGXuKrTFfSnJKW9AhXuMqZnZG8y+cm6ZD19m86gmVVBSI75MEYJbOPbXTbNeZ
7ZE+g/YeMVaPk4oKQYaQ+NgXNV7LuMe9HUdmVQf7p3n0NpFQkUZiMr6kpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4l4u44bsgY4D+Nq6gVwUsc/W/pMB8GA1UdIwQY
MBaAFDv8ZDH1Mztt3THoO2loLY6O4G/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGIt
ZmUwMWVlYzQwZWMxLzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mNWE4YjEtNmUyMi00OTYxLWIzOGItZmUwMWVlYzQwZWMx
LzEvT194a01mVXpPMjNkTWVnN2FXZ3RqbzdnYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaEh5XvS
EJBklMgvfkBgD8Y9tQGk/7/O2e9yJ4I9qigOUU92UIyX6sb7JXEhFHrH1glvIdRq
HrSlyxDKGfYJzaf8yI8MTqTE9lB0Pl/3bwLhnwpf1wabQccrwHbP6YI9zLq8lnh7
1osSz8JPqgXHhQlvimx/dRF7zCPSUGSxfx2poQk5ALHTL9VCyIHJx6VwEOfZg4fz
1gLbjKDOwF/9+T+wLWMu6kF7L6Cooh6Y0HkxmZdPdEQoWAqPQocMqCihLhuGtLAY
aGVnsPaRHWwI+IKTZ+QpaHdGQ3a14+hJFHJgwWHLpLoLpmoaEazaqlTt6aQhdaCa
SKfRsBTG4y9XFw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 22:27:55 2025 by rpki-client