Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: XfYcExjqCBcoTFzDP+n3IxRNenYtSUSk4WWewdcE1/s=
Subject key identifier: 0A:05:4E:4E:7F:59:82:A2:88:73:D6:20:F3:21:C8:E5:DF:2D:C1:87
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 0198A04EC7DBC525988D1B6DE032D29BB79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 22:02:54 +0000
Manifest this update: Tue 12 Aug 2025 22:02:54 +0000
Manifest next update: Wed 13 Aug 2025 22:02:54 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: 7RxqP03MZwj3T8UhUzOToJoXPJLG9qUZQoOwXa1tfn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:c7:db:c5:25:98:8d:1b:6d:e0:32:d2:9b:b7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Aug 12 22:02:54 2025 GMT
Not After : Aug 13 22:02:54 2025 GMT
Subject: CN=0a054e4e7f5982a28873d620f321c8e5df2dc187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:36:0a:61:7a:3c:74:a0:5b:60:ce:ad:41:
3b:9a:15:b6:01:f4:76:cd:2a:bf:ec:88:a0:f4:44:
7e:43:3d:17:df:cb:34:5a:0b:ac:a5:cf:16:3c:87:
55:85:f6:39:a7:02:db:ab:22:3c:5e:88:a2:38:54:
93:1f:22:79:e2:de:f3:9a:5a:26:b1:1c:ff:22:70:
ed:56:12:d2:e0:1f:f6:0c:98:27:2f:6a:05:51:4b:
81:17:8b:87:43:bd:8e:f2:4e:dd:0c:e2:30:66:3b:
39:4c:e6:82:3d:3c:89:0d:2c:c9:53:fb:4c:b0:b1:
38:8c:b6:14:5f:d6:3d:b6:54:f6:9c:2b:34:05:33:
86:e1:8b:b2:5f:e7:89:82:c1:b3:19:27:83:c1:c4:
0a:56:40:b5:93:55:3b:2b:51:24:06:2d:28:4f:e5:
89:64:95:33:f0:ef:af:39:02:8c:ff:12:96:ec:16:
0b:4f:1e:3c:d9:ae:6c:c5:9b:97:cb:3c:f0:38:b1:
cb:24:72:60:12:d5:ec:4c:5a:cf:1c:00:07:04:f5:
aa:d0:7e:93:0a:06:7d:4c:c6:b4:fd:eb:be:fd:29:
9e:18:49:f9:f5:bc:71:b0:49:95:48:ab:89:cb:2e:
12:ed:5c:ea:a2:9f:89:73:f8:8e:fd:83:9f:dd:e6:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:4E:4E:7F:59:82:A2:88:73:D6:20:F3:21:C8:E5:DF:2D:C1:87
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:bd:4e:18:48:07:85:b4:13:78:9c:19:47:20:c9:08:1f:
aa:31:32:09:a9:35:ea:1c:49:4a:d7:23:3d:e9:0b:39:8d:3e:
15:7c:31:da:5f:0f:c8:bb:d4:2b:ba:3b:90:8e:1d:6d:3b:e6:
49:b7:ab:b7:ef:cc:8e:0f:e3:5e:55:c3:cf:0c:4b:28:d1:44:
c1:59:94:60:e0:e4:8f:59:10:25:31:33:ac:2e:90:09:cf:dd:
ed:dc:68:78:73:fb:a4:0e:3e:b9:a4:fc:09:b9:f8:0a:c2:3b:
77:8a:85:38:c7:2d:f9:34:d6:52:1c:bd:cc:60:c0:f4:54:a6:
1d:fa:d8:51:79:ac:5d:15:aa:76:c0:0f:d5:9c:9c:b4:55:30:
f1:5b:8b:ff:63:a7:03:4f:08:55:c8:0a:b2:0c:5e:9b:16:f4:
a1:e8:10:ed:36:e4:7c:2d:fd:02:b0:ac:69:aa:2e:26:7e:48:
67:37:d2:f5:fc:a5:fb:0f:a6:ff:22:1e:61:34:06:28:67:1e:
64:ae:db:fe:47:7a:63:95:6d:d5:fd:8f:48:c2:7a:66:7e:1f:
cd:09:91:08:94:b6:b0:85:e1:85:41:ec:a7:39:e7:c4:e6:3b:
4c:76:fb:de:04:ac:e4:84:95:90:c0:c4:3d:5f:7e:a6:0f:81:
fd:38:82:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTsfbxSWYjRtt4DLSm7ecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTU1NjA0NTk3YjA2YjBlYWNlODhhZmIxYTkwZmZmOTM3
ZDk3ZWEwHhcNMjUwODEyMjIwMjU0WhcNMjUwODEzMjIwMjU0WjAzMTEwLwYDVQQD
EygwYTA1NGU0ZTdmNTk4MmEyODg3M2Q2MjBmMzIxYzhlNWRmMmRjMTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBk2CmF6PHSgW2DOrUE7mhW2AfR2
zSq/7Iig9ER+Qz0X38s0Wguspc8WPIdVhfY5pwLbqyI8XoiiOFSTHyJ54t7zmlom
sRz/InDtVhLS4B/2DJgnL2oFUUuBF4uHQ72O8k7dDOIwZjs5TOaCPTyJDSzJU/tM
sLE4jLYUX9Y9tlT2nCs0BTOG4YuyX+eJgsGzGSeDwcQKVkC1k1U7K1EkBi0oT+WJ
ZJUz8O+vOQKM/xKW7BYLTx482a5sxZuXyzzwOLHLJHJgEtXsTFrPHAAHBPWq0H6T
CgZ9TMa0/eu+/SmeGEn59bxxsEmVSKuJyy4S7Vzqop+Jc/iO/YOf3eYRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoFTk5/WYKiiHPWIPMhyOXfLcGHMB8GA1UdIwQY
MBaAFKOlVgRZewaw6s6Ir7GpD/+TfZfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEt
ZmFjNGJiODNlZDI4LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mOWZmMWItODM3OS00OWQxLWI4MGEtZmFjNGJiODNlZDI4
LzEvbzZWV0JGbDdCckRxem9pdnNha1BfNU45bC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq29ThhI
B4W0E3icGUcgyQgfqjEyCak16hxJStcjPekLOY0+FXwx2l8PyLvUK7o7kI4dbTvm
Sbert+/Mjg/jXlXDzwxLKNFEwVmUYODkj1kQJTEzrC6QCc/d7dxoeHP7pA4+uaT8
Cbn4CsI7d4qFOMct+TTWUhy9zGDA9FSmHfrYUXmsXRWqdsAP1ZyctFUw8VuL/2On
A08IVcgKsgxemxb0oegQ7TbkfC39ArCsaaouJn5IZzfS9fyl+w+m/yIeYTQGKGce
ZK7b/kd6Y5Vt1f2PSMJ6Zn4fzQmRCJS2sIXhhUHspznnxOY7THb73gSs5ISVkMDE
PV9+pg+B/TiCag==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:01 2025 by rpki-client