Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: rD+PzYMNcUqDkAVvhFnMHYkVMIcXLvTGRzSN0QIdl9Y=
Subject key identifier: 3C:F0:EA:09:A2:EE:6E:79:62:B4:C0:F7:16:CF:F6:A0:D3:87:4B:46
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 019A0B5DA5656962F5906E7F34106CBEC183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 10BD
Signing time: Wed 22 Oct 2025 10:01:17 +0000
Manifest this update: Wed 22 Oct 2025 10:01:17 +0000
Manifest next update: Thu 23 Oct 2025 10:01:17 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: OUfSr-obqja2htAQodOdBecQwpM.roa (hash: kYEhvKSYnyjKX9d+IlHmBvClGZqsfdLMn/6qKgbrz/8=)
3: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
4: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: mAwdgdEzkPjiqpoDZXH0+Nq1HFPrKZaXM7QcQZABbhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:a5:65:69:62:f5:90:6e:7f:34:10:6c:be:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Oct 22 10:01:17 2025 GMT
Not After : Oct 23 10:01:17 2025 GMT
Subject: CN=3cf0ea09a2ee6e7962b4c0f716cff6a0d3874b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:c9:41:64:a2:54:5e:f6:48:95:c9:2d:6a:
1f:04:31:ca:89:bc:d8:e7:dc:50:79:35:50:0e:17:
96:67:4d:7b:1e:5d:5d:9f:4e:66:6d:08:3b:ad:a8:
47:bd:16:de:8b:e0:62:b0:2d:3f:49:f6:48:24:32:
80:92:d2:a0:e7:0f:95:47:e5:3e:33:2b:98:68:47:
b0:3f:9c:b9:54:79:98:e8:1b:b4:f2:01:b0:61:85:
ba:a5:4c:dc:f0:37:5b:1c:52:b0:dc:c3:08:66:2d:
eb:0a:8c:d0:f3:c0:b4:d4:f0:f9:bb:9d:dc:d7:80:
29:fb:51:30:50:9c:ab:6f:f2:56:8f:ea:61:3e:3c:
c9:38:e2:8a:cc:36:50:4c:80:0e:b8:91:98:d2:45:
6d:0c:c2:1d:a4:ca:16:5c:2b:6f:c5:5c:63:ac:90:
5b:2b:c9:0c:a0:4c:18:d2:ee:eb:d6:95:3b:ef:3f:
68:54:2e:2d:83:1f:c7:f4:87:f1:6f:a5:bf:af:45:
2a:d7:fa:29:38:0e:bd:62:f7:17:85:45:4a:52:53:
8d:a6:08:05:e6:5a:1e:84:5e:03:40:7d:83:61:ee:
d5:1f:41:bf:07:6c:ab:38:f5:f5:0e:10:15:d8:ef:
15:9e:7b:78:4d:6f:a7:1e:fe:fc:b0:fc:0e:7d:eb:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F0:EA:09:A2:EE:6E:79:62:B4:C0:F7:16:CF:F6:A0:D3:87:4B:46
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cf:6c:f2:25:18:85:fe:cb:ea:b1:b5:28:29:20:c0:18:b1:
86:e3:d8:51:62:1a:40:75:ac:e9:de:09:b0:f4:9e:39:cc:aa:
25:91:77:cf:4d:73:ea:f9:81:c7:83:aa:5d:38:a2:39:97:5c:
a9:77:ad:47:bb:d6:3e:f6:92:b7:51:ad:12:bf:67:00:ef:b1:
70:d2:4a:6f:90:b9:2c:67:6e:fb:87:0c:e8:47:00:24:2b:58:
2e:ed:e1:80:c4:87:cf:9b:e3:6d:1c:36:df:3e:b9:dc:56:4f:
31:17:80:a5:07:56:6a:09:af:0c:b9:ab:9c:78:ef:d9:19:f0:
25:c7:c3:c9:d7:68:4c:e1:24:62:91:a9:55:81:21:f1:54:47:
35:19:aa:1d:3a:49:20:2a:ad:09:58:f7:c8:8f:26:a4:7f:96:
14:fc:53:de:1b:81:b2:ac:7b:80:7c:2d:1f:6d:77:0f:fe:13:
ae:a9:8b:31:bd:62:f9:27:77:5a:b1:95:a7:ea:c3:ee:45:b1:
12:86:3b:d8:af:c1:34:6d:85:b0:62:94:a5:17:5a:43:da:44:
f8:b2:0d:d6:b7:38:4c:73:65:bf:77:1c:e3:16:50:db:52:d4:
a7:76:f4:24:eb:47:c8:f4:2d:b3:5b:a3:e8:ab:6e:21:1b:58:
c3:09:01:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoLXaVlaWL1kG5/NBBsvsGDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzg3ZDJiZTZlYWMzNmMxZDI3ODBmNzg2Yjg3YzllMTUz
ZTgxZjEwHhcNMjUxMDIyMTAwMTE3WhcNMjUxMDIzMTAwMTE3WjAzMTEwLwYDVQQD
EygzY2YwZWEwOWEyZWU2ZTc5NjJiNGMwZjcxNmNmZjZhMGQzODc0YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyzJQWSiVF72SJXJLWofBDHKibzY
59xQeTVQDheWZ017Hl1dn05mbQg7rahHvRbei+BisC0/SfZIJDKAktKg5w+VR+U+
MyuYaEewP5y5VHmY6Bu08gGwYYW6pUzc8DdbHFKw3MMIZi3rCozQ88C01PD5u53c
14Ap+1EwUJyrb/JWj+phPjzJOOKKzDZQTIAOuJGY0kVtDMIdpMoWXCtvxVxjrJBb
K8kMoEwY0u7r1pU77z9oVC4tgx/H9Ifxb6W/r0Uq1/opOA69YvcXhUVKUlONpggF
5loehF4DQH2DYe7VH0G/B2yrOPX1DhAV2O8Vnnt4TW+nHv78sPwOfetGmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzw6gmi7m55YrTA9xbP9qDTh0tGMB8GA1UdIwQY
MBaAFKN4fSvm6sNsHSeA94a4fJ4VPoHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMt
YjYwMmNlZGFjMzZjLzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9mNTY1ZDctMzJhZi00YmUxLTgyYWMtYjYwMmNlZGFjMzZj
LzEvbzNoOUstYnF3MndkSjREM2hyaDhuaFUtZ2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHM9s8iUY
hf7L6rG1KCkgwBixhuPYUWIaQHWs6d4JsPSeOcyqJZF3z01z6vmBx4OqXTiiOZdc
qXetR7vWPvaSt1GtEr9nAO+xcNJKb5C5LGdu+4cM6EcAJCtYLu3hgMSHz5vjbRw2
3z653FZPMReApQdWagmvDLmrnHjv2RnwJcfDyddoTOEkYpGpVYEh8VRHNRmqHTpJ
ICqtCVj3yI8mpH+WFPxT3huBsqx7gHwtH213D/4TrqmLMb1i+Sd3WrGVp+rD7kWx
EoY72K/BNG2FsGKUpRdaQ9pE+LIN1rc4THNlv3cc4xZQ21LUp3b0JOtHyPQts1uj
6KtuIRtYwwkBxw==
-----END CERTIFICATE-----
Generated at Wed Oct 22 20:33:19 2025 by rpki-client