Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
File: O1T6YLMnoIA9yF6XCpt2pFFM614.mft (raw, json)
Hash identifier: B/zfXoHgefy2KdeMxNl2nGPZvwPwfV8bp2ZeHOemUNE=
Subject key identifier: 61:14:83:4A:32:84:47:21:81:96:57:DF:8C:E1:98:59:8F:95:46:5B
Authority key identifier: 3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
Certificate issuer: /CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Certificate serial: 019A70DC09382B3EB7D65DC9C495DCBC2264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
Manifest number: 0EE4
Signing time: Tue 11 Nov 2025 03:00:59 +0000
Manifest this update: Tue 11 Nov 2025 03:00:59 +0000
Manifest next update: Wed 12 Nov 2025 03:00:59 +0000
Files and hashes: 1: O1T6YLMnoIA9yF6XCpt2pFFM614.crl (hash: Up7KNe3i83+hZdoPxTjXmj0+RHhjMbdOXk4j6Fk9gBc=)
2: r00HzRw-RqO0vBCmPGerjiL7MBo.roa (hash: ZpMQBjz3xj36yREzwpqIfQv4H2OQrwN6wQoa/nm5NNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:09:38:2b:3e:b7:d6:5d:c9:c4:95:dc:bc:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b54fa60b327a0803dc85e970a9b76a4514ceb5e
Validity
Not Before: Nov 11 03:00:59 2025 GMT
Not After : Nov 12 03:00:59 2025 GMT
Subject: CN=6114834a32844721819657df8ce198598f95465b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:d2:11:29:c5:c6:4c:8d:30:0f:30:fc:b4:
01:5e:a4:74:04:f4:c7:10:81:4d:80:62:67:7f:68:
8c:dd:96:18:40:84:52:4b:9d:f1:db:1e:55:28:47:
4f:41:cc:45:ee:59:46:6e:5d:16:72:53:d5:0a:5a:
34:94:75:d3:06:77:78:88:37:37:09:a8:82:93:3a:
af:6a:9e:23:97:33:45:e5:51:32:ed:84:11:bc:5a:
f3:1c:13:9c:db:9e:62:a7:80:8f:a0:28:c3:b0:e8:
14:60:04:45:5e:4a:9d:c7:35:63:e8:72:f6:cd:21:
95:b2:a0:c8:ac:31:99:41:de:b2:fd:0e:c8:b0:11:
a9:a2:13:84:81:99:46:c5:f3:02:a5:50:11:34:d6:
2d:6f:3f:b6:59:6d:ce:5b:ad:f7:06:26:c9:60:c4:
91:35:19:15:14:b9:f9:2c:62:b7:35:3f:96:76:75:
b6:d7:61:d7:59:7c:42:fa:dc:23:59:15:98:8a:0d:
31:a1:78:34:d4:fe:ae:e3:ef:63:f6:4d:30:16:62:
6d:51:ef:34:65:3c:98:85:ab:90:31:b6:c0:11:ce:
ea:c3:23:23:89:f3:ba:19:d1:48:28:d6:f7:c2:53:
7b:c6:b5:a0:08:d8:01:56:1e:75:08:c6:11:d1:1f:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:14:83:4A:32:84:47:21:81:96:57:DF:8C:E1:98:59:8F:95:46:5B
X509v3 Authority Key Identifier:
keyid:3B:54:FA:60:B3:27:A0:80:3D:C8:5E:97:0A:9B:76:A4:51:4C:EB:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1T6YLMnoIA9yF6XCpt2pFFM614.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d4c891-4bc0-4a3e-8457-44276f604233/1/O1T6YLMnoIA9yF6XCpt2pFFM614.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d3:df:5b:58:1f:4e:93:c8:73:ec:5b:a4:1e:ab:a6:05:42:
f0:5d:97:fc:ee:91:7a:6b:6c:91:8c:5b:cf:d5:bc:98:aa:2e:
c4:fb:b2:60:57:56:bb:40:1a:0e:40:6b:bc:a9:90:7b:85:03:
f1:e7:96:7d:9d:d3:c9:d5:ba:42:82:5c:ba:ad:42:bf:46:09:
be:46:fb:06:c0:bf:86:19:58:5c:50:b7:4a:6b:21:29:eb:0c:
ad:a3:ec:23:00:19:54:b3:96:6e:46:af:81:90:5b:1a:f9:b6:
45:ca:c5:58:39:15:3e:b2:56:91:cd:70:2a:d2:fc:d8:4c:3e:
ab:6f:46:d7:8c:e3:59:b5:2d:48:d8:ba:16:75:e1:87:65:75:
63:bb:c9:1b:87:60:7c:fa:40:b5:3f:3b:bd:fb:c1:ad:fa:3a:
a5:61:e1:46:3d:8a:ab:9e:9e:ce:89:2a:e9:d5:5f:9b:18:f9:
5d:99:b3:75:46:c5:51:19:6f:72:0a:d5:f6:4d:48:f5:1f:6f:
f8:c4:bd:23:aa:7b:04:0c:be:d7:aa:16:05:3e:f6:0c:6e:f9:
82:41:a2:ba:8a:f5:23:d1:56:52:92:4d:12:00:e3:d7:27:f1:
4f:a3:6a:27:a9:aa:bc:05:9f:12:4f:e7:b6:90:87:2a:9d:ec:
8a:8e:cc:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3Ak4Kz631l3JxJXcvCJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTRmYTYwYjMyN2EwODAzZGM4NWU5NzBhOWI3NmE0NTE0
Y2ViNWUwHhcNMjUxMTExMDMwMDU5WhcNMjUxMTEyMDMwMDU5WjAzMTEwLwYDVQQD
Eyg2MTE0ODM0YTMyODQ0NzIxODE5NjU3ZGY4Y2UxOTg1OThmOTU0NjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApirSESnFxkyNMA8w/LQBXqR0BPTH
EIFNgGJnf2iM3ZYYQIRSS53x2x5VKEdPQcxF7llGbl0WclPVClo0lHXTBnd4iDc3
CaiCkzqvap4jlzNF5VEy7YQRvFrzHBOc255ip4CPoCjDsOgUYARFXkqdxzVj6HL2
zSGVsqDIrDGZQd6y/Q7IsBGpohOEgZlGxfMCpVARNNYtbz+2WW3OW633BibJYMSR
NRkVFLn5LGK3NT+WdnW212HXWXxC+twjWRWYig0xoXg01P6u4+9j9k0wFmJtUe80
ZTyYhauQMbbAEc7qwyMjifO6GdFIKNb3wlN7xrWgCNgBVh51CMYR0R82SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEUg0oyhEchgZZX34zhmFmPlUZbMB8GA1UdIwQY
MBaAFDtU+mCzJ6CAPchelwqbdqRRTOteMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTct
NDQyNzZmNjA0MjMzLzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNGM4OTEtNGJjMC00YTNlLTg0NTctNDQyNzZmNjA0MjMz
LzEvTzFUNllMTW5vSUE5eUY2WENwdDJwRkZNNjE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENPfW1gf
TpPIc+xbpB6rpgVC8F2X/O6RemtskYxbz9W8mKouxPuyYFdWu0AaDkBrvKmQe4UD
8eeWfZ3TydW6QoJcuq1Cv0YJvkb7BsC/hhlYXFC3SmshKesMraPsIwAZVLOWbkav
gZBbGvm2RcrFWDkVPrJWkc1wKtL82Ew+q29G14zjWbUtSNi6FnXhh2V1Y7vJG4dg
fPpAtT87vfvBrfo6pWHhRj2Kq56ezokq6dVfmxj5XZmzdUbFURlvcgrV9k1I9R9v
+MS9I6p7BAy+16oWBT72DG75gkGiuor1I9FWUpJNEgDj1yfxT6NqJ6mqvAWfEk/n
tpCHKp3sio7MvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:38 2025 by rpki-client