Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
File: O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft (raw, json)
Hash identifier: zA/mGr8OPNpyXAVh8dhH/Ew+BC3Sm5qza6Nv5pnnQxI=
Subject key identifier: 7E:23:8D:19:74:3C:3C:E4:75:80:14:91:C2:CD:47:FD:58:C6:0D:15
Authority key identifier: 3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
Certificate issuer: /CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Certificate serial: 019A1D6374E2FD8E981DF942220458F87F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
Manifest number: 1703
Signing time: Sat 25 Oct 2025 22:00:48 +0000
Manifest this update: Sat 25 Oct 2025 22:00:48 +0000
Manifest next update: Sun 26 Oct 2025 22:00:48 +0000
Files and hashes: 1: 1-kJ7dFfkbXY8GKTB51YoZp95upA.roa (hash: dR9vYcvJGh1CzLQ01rVJBBjGJtG77A8jF4vNPyZgLsk=)
2: BEfZLYm22ytL2TAUbAdVw1zX1Lw.roa (hash: klB/IG9rFDsKmRUAoHWuriGo/ZZNxkQ+BXChvVj85xk=)
3: HEUTASsEJ1XaEbGOmH7X4Jwc8WA.roa (hash: pY4BF2ACBH1qgVniWcBeMHaQwZVHstzR7MkwfTMJy6w=)
4: L2g5JebuYY7V2mQAYgdmVvxTDpM.roa (hash: NnNek1hVJzs9KMTpcStW+sGX8YKBScQrjrv4sJRJLuY=)
5: O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl (hash: /tydczvGxaReFl+fU1Yq8tsGzntztyJ/fNbsorNIPAI=)
6: XOraKSxzxrwhqKYes5-js7tbyMM.roa (hash: WQ2IBOPtnhThz+gIf7Qaas166QmuF5Q3ApP6XXJ39d4=)
7: g9BBfDc_1PLnz7Bt9VifF-7KO2o.roa (hash: egth43kB7TA1PASJjKkxy/iH4S+KR37qtj3zbkktKes=)
8: nqUZf1GLiVDPhsp8HEtZMlhp3BY.roa (hash: AwrhAC+0+48MNhq3fFji1sJrgTPkE6AyZbz5FDgm7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:63:74:e2:fd:8e:98:1d:f9:42:22:04:58:f8:7f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba5b1c09aa31f6713c61b32e558109e47966d42
Validity
Not Before: Oct 25 22:00:48 2025 GMT
Not After : Oct 26 22:00:48 2025 GMT
Subject: CN=7e238d19743c3ce475801491c2cd47fd58c60d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:29:44:01:7e:8f:5b:6e:10:83:63:a6:b9:
5e:fa:08:9c:65:90:bf:81:38:09:55:a8:8f:ba:3f:
ca:fc:5f:f5:46:c5:1f:d6:e2:17:16:da:a8:9f:64:
5f:d4:8b:4f:aa:b7:90:ce:59:e8:26:44:8b:d1:bb:
c5:2d:f6:b7:65:b4:f8:b8:80:d9:35:0f:a0:0d:b2:
91:45:f9:50:28:4c:96:4c:6f:8a:37:91:22:10:83:
83:3c:10:28:a2:bf:2e:ab:1e:db:88:ec:a8:41:1a:
c2:b3:a6:89:60:ac:ea:34:36:2e:e2:39:df:46:8e:
95:84:6c:06:db:3c:2f:df:bb:b0:1a:53:09:5b:53:
2f:54:f4:f5:d1:11:e2:a5:85:e0:72:a7:05:83:7d:
c6:5b:73:1e:df:3b:d1:01:fc:4c:e9:30:a1:db:6f:
79:95:ef:61:3b:6f:39:04:ca:f0:4d:dc:6c:29:b4:
9f:53:97:54:f5:3f:7b:ee:47:94:0b:27:6b:bd:86:
97:a4:0c:82:ac:1f:c2:d0:86:58:cc:85:2e:03:82:
3a:13:91:fc:b4:52:c2:1a:43:ee:c3:03:c9:f1:cd:
eb:28:9c:9e:ea:18:74:7f:96:71:66:99:3a:1c:4a:
41:66:c8:d1:98:6c:9d:05:de:5a:98:c7:a5:c6:e6:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:8D:19:74:3C:3C:E4:75:80:14:91:C2:CD:47:FD:58:C6:0D:15
X509v3 Authority Key Identifier:
keyid:3B:A5:B1:C0:9A:A3:1F:67:13:C6:1B:32:E5:58:10:9E:47:96:6D:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6WxwJqjH2cTxhsy5VgQnkeWbUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/13bd77-d297-4689-bee4-466e9cab7864/1/O6WxwJqjH2cTxhsy5VgQnkeWbUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d4:5e:e4:cd:1f:b8:c5:9d:71:26:73:98:28:70:b6:02:45:
5d:72:f9:0b:e1:6f:1c:72:a4:97:93:1b:3e:13:e3:83:f2:ec:
71:9b:96:c9:32:b2:d3:cb:84:88:61:79:a6:11:c6:d0:e3:e1:
4d:bd:43:2f:ce:03:9d:89:87:f1:11:f0:5b:cb:ba:ab:84:1d:
1a:b0:04:b4:dd:b8:06:0c:47:14:9d:6a:a7:09:cb:c9:87:98:
91:0a:02:20:8b:3d:e8:c0:b6:92:9f:4c:e2:d8:ea:8d:c7:4a:
7c:83:e6:db:3d:7d:31:12:ec:50:20:71:66:4c:72:8b:b8:08:
33:1d:f5:0d:b9:c4:a0:80:cc:66:fa:c4:0e:77:46:54:4a:7d:
03:4f:a2:5d:cc:ef:f5:17:1c:ac:cf:38:84:f0:49:fe:0f:ee:
ad:19:3d:fd:2d:0c:32:b0:c3:03:54:b1:f0:6e:81:0a:7f:a1:
1d:2b:db:a1:fb:d7:9d:67:7b:d9:63:73:d6:06:ed:53:53:f3:
56:c1:34:91:8f:8f:b4:be:bf:dc:fd:57:8a:a0:6b:b4:44:df:
dc:47:9b:07:07:9e:50:eb:c7:09:2e:04:94:11:54:c4:5b:0e:
e2:5e:f6:a5:51:d0:4c:2d:0d:db:44:7a:8f:79:91:4e:27:1b:
a4:e8:96:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodY3Ti/Y6YHflCIgRY+H8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYTViMWMwOWFhMzFmNjcxM2M2MWIzMmU1NTgxMDllNDc5
NjZkNDIwHhcNMjUxMDI1MjIwMDQ4WhcNMjUxMDI2MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg3ZTIzOGQxOTc0M2MzY2U0NzU4MDE0OTFjMmNkNDdmZDU4YzYwZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO0pRAF+j1tuEINjprle+gicZZC/
gTgJVaiPuj/K/F/1RsUf1uIXFtqon2Rf1ItPqreQzlnoJkSL0bvFLfa3ZbT4uIDZ
NQ+gDbKRRflQKEyWTG+KN5EiEIODPBAoor8uqx7biOyoQRrCs6aJYKzqNDYu4jnf
Ro6VhGwG2zwv37uwGlMJW1MvVPT10RHipYXgcqcFg33GW3Me3zvRAfxM6TCh2295
le9hO285BMrwTdxsKbSfU5dU9T977keUCydrvYaXpAyCrB/C0IZYzIUuA4I6E5H8
tFLCGkPuwwPJ8c3rKJye6hh0f5ZxZpk6HEpBZsjRmGydBd5amMelxuaXiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4jjRl0PDzkdYAUkcLNR/1Yxg0VMB8GA1UdIwQY
MBaAFDulscCaox9nE8YbMuVYEJ5Hlm1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQt
NDY2ZTljYWI3ODY0LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8xM2JkNzctZDI5Ny00Njg5LWJlZTQtNDY2ZTljYWI3ODY0
LzEvTzZXeHdKcWpIMmNUeGhzeTVWZ1Fua2VXYlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNRe5M0f
uMWdcSZzmChwtgJFXXL5C+FvHHKkl5MbPhPjg/LscZuWyTKy08uEiGF5phHG0OPh
Tb1DL84DnYmH8RHwW8u6q4QdGrAEtN24BgxHFJ1qpwnLyYeYkQoCIIs96MC2kp9M
4tjqjcdKfIPm2z19MRLsUCBxZkxyi7gIMx31DbnEoIDMZvrEDndGVEp9A0+iXczv
9RccrM84hPBJ/g/urRk9/S0MMrDDA1Sx8G6BCn+hHSvbofvXnWd72WNz1gbtU1Pz
VsE0kY+PtL6/3P1XiqBrtETf3EebBweeUOvHCS4ElBFUxFsO4l72pVHQTC0N20R6
j3mRTicbpOiWKw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 05:42:28 2025 by rpki-client