Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: rahQbZy/2krvKzIHeRhEUmPwyYLjGStKSO77r/dCXWc=
Subject key identifier: 16:4A:3F:04:DE:BD:28:AD:80:D9:0E:E1:5C:E8:D5:81:0E:4E:E1:8C
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01987CAE8722CB8836CE1AA2D7A63DAA8671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 15A3
Signing time: Wed 06 Aug 2025 00:01:09 +0000
Manifest this update: Wed 06 Aug 2025 00:01:09 +0000
Manifest next update: Thu 07 Aug 2025 00:01:09 +0000
Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: qIh4DMxF6MiH2xx6ouBGhkH7eJZJjzhB0phUJfx45kQ=)
2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:87:22:cb:88:36:ce:1a:a2:d7:a6:3d:aa:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Aug 6 00:01:09 2025 GMT
Not After : Aug 7 00:01:09 2025 GMT
Subject: CN=164a3f04debd28ad80d90ee15ce8d5810e4ee18c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:17:b0:c0:2b:85:85:08:f8:8f:1d:03:f8:
5c:43:82:da:b7:07:c9:4b:16:41:b1:22:66:c1:e9:
08:5b:40:be:a1:0a:2c:75:84:eb:75:6e:e3:d4:d5:
e8:70:2e:f9:2e:64:29:fa:8e:f6:08:8b:2b:6b:f9:
f6:d8:99:a8:81:87:2b:93:97:26:8b:7f:8c:65:81:
e8:58:5c:10:46:36:03:3f:ba:c2:84:12:71:66:93:
b8:50:5b:d5:a6:9e:8f:0f:8f:ff:29:ee:91:e4:c2:
38:a9:c5:26:ba:74:b1:b0:c3:39:e8:a1:21:87:d1:
0d:52:c0:67:34:e0:c4:9c:ed:7d:38:32:e7:1e:f2:
72:56:0a:10:dd:96:44:e6:c0:80:7d:db:44:08:d8:
2e:5e:a7:07:b8:aa:65:88:17:d6:6b:ea:fe:a3:ca:
e9:79:98:2b:2a:11:a2:66:62:02:39:e6:d9:39:d8:
75:b5:5f:c9:53:eb:13:37:42:44:7f:f0:33:d6:21:
f4:5d:35:34:56:9b:3f:02:7c:ab:fc:d0:bf:7b:a5:
72:b3:47:66:e9:27:3a:a9:74:8f:e0:ce:34:c5:1a:
73:c2:42:c2:ea:8c:45:64:28:d8:b6:20:3c:87:3b:
60:5d:15:2e:e4:29:c3:a9:2f:f1:9c:69:da:b3:94:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4A:3F:04:DE:BD:28:AD:80:D9:0E:E1:5C:E8:D5:81:0E:4E:E1:8C
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:59:de:a7:01:c2:65:2f:78:f0:f2:83:6d:0f:21:06:12:26:
e9:2e:e2:95:73:17:25:5f:a8:1d:19:cd:4e:8a:bb:71:63:ab:
f5:9f:6f:95:40:54:37:41:75:42:77:65:59:ff:51:2c:1a:e4:
f5:b5:df:8a:65:de:9e:6f:40:2e:b6:ce:83:c7:86:0f:e7:7a:
a9:c2:a5:c4:b7:a9:c9:12:7d:b2:d6:6c:f0:25:72:7f:70:de:
ec:39:c8:74:e8:ad:0e:76:45:01:dc:99:0e:a5:8a:62:6a:37:
55:1d:2b:72:1d:73:67:3a:43:41:48:fc:6e:34:7c:cf:1e:bd:
80:8e:00:bc:8a:e8:89:cd:d9:57:43:8d:02:2a:ec:a4:56:39:
9e:81:0f:dc:a6:7b:74:0f:bc:a0:d1:48:8c:1c:12:ff:ee:ae:
59:ab:26:3d:3a:d1:67:29:73:39:3d:67:8f:85:6d:91:44:c3:
19:f7:15:bf:3c:b8:bc:fd:48:1e:c8:93:42:9e:60:4f:52:f9:
48:a8:c2:3a:01:cb:bc:68:50:b6:e0:72:0c:f0:2e:4e:04:43:
0e:42:70:2d:64:31:65:c2:2f:05:bd:d8:bd:3f:9e:27:4b:3f:
47:00:d8:63:13:60:4f:df:ed:e0:2a:3f:30:a6:c6:22:10:83:
fe:f0:19:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8rociy4g2zhqi16Y9qoZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzE3ZWE1NGI5NTk0MmZhZDgxYTk0M2VkYjFjMTBmOWRm
OTRhZmIwHhcNMjUwODA2MDAwMTA5WhcNMjUwODA3MDAwMTA5WjAzMTEwLwYDVQQD
EygxNjRhM2YwNGRlYmQyOGFkODBkOTBlZTE1Y2U4ZDU4MTBlNGVlMThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTkXsMArhYUI+I8dA/hcQ4LatwfJ
SxZBsSJmwekIW0C+oQosdYTrdW7j1NXocC75LmQp+o72CIsra/n22JmogYcrk5cm
i3+MZYHoWFwQRjYDP7rChBJxZpO4UFvVpp6PD4//Ke6R5MI4qcUmunSxsMM56KEh
h9ENUsBnNODEnO19ODLnHvJyVgoQ3ZZE5sCAfdtECNguXqcHuKpliBfWa+r+o8rp
eZgrKhGiZmICOebZOdh1tV/JU+sTN0JEf/Az1iH0XTU0Vps/Anyr/NC/e6Vys0dm
6Sc6qXSP4M40xRpzwkLC6oxFZCjYtiA8hztgXRUu5CnDqS/xnGnas5QfAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZKPwTevSitgNkO4Vzo1YEOTuGMMB8GA1UdIwQY
MBaAFKNxfqVLlZQvrYGpQ+2xwQ+d+Ur7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTct
MTU3YWQwYWM1MjBhLzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9iNTQ4ZDUtODJmZS00NmMyLWI5OTctMTU3YWQwYWM1MjBh
LzEvbzNGLXBVdVZsQy10Z2FsRDdiSEJENTM1U3ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhFnepwHC
ZS948PKDbQ8hBhIm6S7ilXMXJV+oHRnNToq7cWOr9Z9vlUBUN0F1QndlWf9RLBrk
9bXfimXenm9ALrbOg8eGD+d6qcKlxLepyRJ9stZs8CVyf3De7DnIdOitDnZFAdyZ
DqWKYmo3VR0rch1zZzpDQUj8bjR8zx69gI4AvIroic3ZV0ONAirspFY5noEP3KZ7
dA+8oNFIjBwS/+6uWasmPTrRZylzOT1nj4VtkUTDGfcVvzy4vP1IHsiTQp5gT1L5
SKjCOgHLvGhQtuByDPAuTgRDDkJwLWQxZcIvBb3YvT+eJ0s/RwDYYxNgT9/t4Co/
MKbGIhCD/vAZbw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:58:07 2025 by rpki-client