Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
File: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft (raw, json)
Hash identifier: 5t3tgOBY5Ox1xvbf33ShD8d4c1ZzRig4NXFzvp0tXV0=
Subject key identifier: 1B:C9:4D:71:EE:CF:CF:A5:09:8A:72:DE:48:93:3F:05:6A:1E:58:F8
Authority key identifier: A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
Certificate issuer: /CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Certificate serial: 019879E47BB522BA5EDCEE4F39B646910EA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
Manifest number: 0558
Signing time: Tue 05 Aug 2025 11:01:13 +0000
Manifest this update: Tue 05 Aug 2025 11:01:13 +0000
Manifest next update: Wed 06 Aug 2025 11:01:13 +0000
Files and hashes: 1: 6v0nzfvGeTgWbd7HMB1o0jugKV4.roa (hash: FIng+1902A4Yeb0hTmwd9v/HruvnzrDdoUL01BIRQaM=)
2: ZF1SC7MrVuGK4fd5ZmYRiHDlL3I.roa (hash: KgxBB1nnxX0nfT2Gm3/SgLbCQQuHnTl1fS9TiWSDHoI=)
3: eI_RQ6AJ4E0z9B7GOJa52wr5foc.roa (hash: HGEC1odkERakp/sMpWBFo962FhRjB0yXI9SlY4RDrwU=)
4: o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl (hash: 67XBi4SpXt7i4vXSlWLUFQhrg0fKEDgbJueqKeFJtvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:7b:b5:22:ba:5e:dc:ee:4f:39:b6:46:91:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f1b22b2054502bfd3889138291103d83b6a50e
Validity
Not Before: Aug 5 11:01:13 2025 GMT
Not After : Aug 6 11:01:13 2025 GMT
Subject: CN=1bc94d71eecfcfa5098a72de48933f056a1e58f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:55:16:e9:c1:dc:24:c0:0e:ef:e2:82:bb:
23:b3:1f:40:55:f0:74:b9:6a:28:29:ec:e6:0d:da:
30:33:bc:67:43:d0:90:9f:41:bd:91:74:3c:61:49:
69:4c:b0:73:4e:53:7e:ad:c1:f6:d6:a6:8b:db:d1:
9b:ec:70:a1:9a:3d:bb:dd:c5:4e:97:f7:5e:51:04:
70:ac:8c:b4:b0:79:43:ca:ba:16:c3:58:7d:d0:f3:
30:79:ff:6b:fb:f7:77:13:53:8e:c2:98:36:c2:29:
29:b3:5e:d2:ef:c9:13:6e:3a:d3:76:90:c4:50:fd:
0c:42:9d:7c:87:74:c8:ee:65:6a:3f:00:f5:a4:7b:
72:2b:bf:f0:d6:11:cd:dc:f4:8b:29:81:51:1f:91:
6f:0e:44:95:c9:4c:6d:34:fb:6c:06:0a:0a:a4:32:
26:5b:ee:8a:50:4d:aa:b0:69:5c:f9:79:e5:56:53:
ec:61:61:e2:23:f4:54:53:38:50:df:5e:20:89:f1:
5c:73:e7:6b:65:e2:9f:ea:fb:5b:02:95:fa:a7:33:
02:ea:2c:39:ae:c9:a1:82:20:2e:b8:38:c5:9a:fb:
cd:d3:51:09:45:de:06:ae:e8:f6:9f:1c:0b:c5:04:
6f:08:b8:5b:1b:bc:9a:1b:2a:29:c0:e5:16:fc:b4:
e6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:4D:71:EE:CF:CF:A5:09:8A:72:DE:48:93:3F:05:6A:1E:58:F8
X509v3 Authority Key Identifier:
keyid:A3:F1:B2:2B:20:54:50:2B:FD:38:89:13:82:91:10:3D:83:B6:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a8aaff-12a1-4641-8b9d-24d272ce11e3/1/o_GyKyBUUCv9OIkTgpEQPYO2pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:91:f0:45:4e:6a:26:f0:25:6d:5f:6b:f0:b0:a4:ad:eb:f5:
57:27:bd:ba:1d:5a:e7:ea:3c:d9:ba:ba:e1:2a:bf:75:ea:a6:
d6:0d:fb:44:e4:f5:e1:bd:c9:84:a0:be:73:2a:79:58:fe:bb:
da:f2:da:b0:72:5d:3c:c8:b1:36:7f:a6:f6:5b:c3:bb:d8:60:
25:43:99:e3:dc:ed:01:4d:f7:0c:f7:7f:de:b4:fc:49:7a:f0:
f5:65:66:80:93:47:ff:c7:30:5d:d3:03:57:62:5b:78:09:82:
84:89:bf:1d:00:66:32:c4:70:35:69:67:b8:7e:e4:ba:a5:72:
94:16:28:9e:0b:40:77:b6:b5:1c:72:c7:48:9e:7d:c9:fb:9a:
ae:8e:ce:ff:0c:85:1a:1c:2c:5b:31:09:eb:60:08:6c:34:69:
0b:62:9b:3b:8a:ee:03:84:08:d7:e9:7c:e6:1e:09:a4:1a:aa:
65:94:cf:20:99:28:90:d0:87:1b:d9:cb:12:10:2f:31:73:69:
e7:70:d9:6d:2c:3c:54:fc:06:ad:4b:6a:3e:99:8a:91:26:13:
08:b6:c1:3a:3a:91:c4:19:d5:a3:0f:65:c0:e1:80:59:fc:17:
2f:44:d2:ad:31:22:da:c9:25:1f:00:2d:92:78:56:2b:a5:26:
3e:cf:c0:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh55Hu1Irpe3O5PObZGkQ6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjFiMjJiMjA1NDUwMmJmZDM4ODkxMzgyOTExMDNkODNi
NmE1MGUwHhcNMjUwODA1MTEwMTEzWhcNMjUwODA2MTEwMTEzWjAzMTEwLwYDVQQD
EygxYmM5NGQ3MWVlY2ZjZmE1MDk4YTcyZGU0ODkzM2YwNTZhMWU1OGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ZVFunB3CTADu/igrsjsx9AVfB0
uWooKezmDdowM7xnQ9CQn0G9kXQ8YUlpTLBzTlN+rcH21qaL29Gb7HChmj273cVO
l/deUQRwrIy0sHlDyroWw1h90PMwef9r+/d3E1OOwpg2wikps17S78kTbjrTdpDE
UP0MQp18h3TI7mVqPwD1pHtyK7/w1hHN3PSLKYFRH5FvDkSVyUxtNPtsBgoKpDIm
W+6KUE2qsGlc+XnlVlPsYWHiI/RUUzhQ314gifFcc+drZeKf6vtbApX6pzMC6iw5
rsmhgiAuuDjFmvvN01EJRd4Gruj2nxwLxQRvCLhbG7yaGyopwOUW/LTmXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvJTXHuz8+lCYpy3kiTPwVqHlj4MB8GA1UdIwQY
MBaAFKPxsisgVFAr/TiJE4KRED2DtqUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQt
MjRkMjcyY2UxMWUzLzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hOGFhZmYtMTJhMS00NjQxLThiOWQtMjRkMjcyY2UxMWUz
LzEvb19HeUt5QlVVQ3Y5T0lrVGdwRVFQWU8ycFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJHwRU5q
JvAlbV9r8LCkrev1Vye9uh1a5+o82bq64Sq/deqm1g37ROT14b3JhKC+cyp5WP67
2vLasHJdPMixNn+m9lvDu9hgJUOZ49ztAU33DPd/3rT8SXrw9WVmgJNH/8cwXdMD
V2JbeAmChIm/HQBmMsRwNWlnuH7kuqVylBYongtAd7a1HHLHSJ59yfuaro7O/wyF
GhwsWzEJ62AIbDRpC2KbO4ruA4QI1+l85h4JpBqqZZTPIJkokNCHG9nLEhAvMXNp
53DZbSw8VPwGrUtqPpmKkSYTCLbBOjqRxBnVow9lwOGAWfwXL0TSrTEi2sklHwAt
knhWK6UmPs/AFQ==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:13:02 2025 by rpki-client