Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
File: o3F-pUuVlC-tgalD7bHBD535Svs.mft (raw, json)
Hash identifier: zbmEU2dirsU8XMiUL08b3lSbq1zDYXJ2DQ45ci/2S7g=
Subject key identifier: 84:21:2C:68:15:4B:77:12:84:8D:85:E7:31:04:30:60:8B:58:91:4A
Authority key identifier: A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
Certificate issuer: /CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Certificate serial: 01984A77AADB7BDE563C86922C15BD6EC02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
Manifest number: 1589
Signing time: Sun 27 Jul 2025 06:00:13 +0000
Manifest this update: Sun 27 Jul 2025 06:00:13 +0000
Manifest next update: Mon 28 Jul 2025 06:00:13 +0000
Files and hashes: 1: o3F-pUuVlC-tgalD7bHBD535Svs.crl (hash: t8US6i0R3QL+iI+9p2iU7fmWxevjy/RWtjwI4LYfh3U=)
2: pg44eaa6uLO77ZBpldSyzPpFh88.roa (hash: 0sb9vGZUz6J5OEzKPCflxf4EwPkYpEMJhVhuM9KBJfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:aa:db:7b:de:56:3c:86:92:2c:15:bd:6e:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3717ea54b95942fad81a943edb1c10f9df94afb
Validity
Not Before: Jul 27 06:00:13 2025 GMT
Not After : Jul 28 06:00:13 2025 GMT
Subject: CN=84212c68154b7712848d85e7310430608b58914a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f6:98:b7:00:7d:5b:78:61:f7:30:68:bf:41:
25:7d:f4:01:19:24:0d:c7:0d:1f:91:c5:d5:03:b7:
67:30:86:d7:7d:59:bd:4d:be:03:5d:66:96:c1:fc:
0f:9b:02:51:c1:75:7b:83:78:75:60:29:f5:09:c8:
27:fc:e1:6f:be:d2:e4:69:d0:40:e0:98:a2:16:55:
9e:80:26:93:a0:60:48:16:42:90:5d:5c:93:b7:d9:
34:16:5e:fa:a3:2e:95:4e:64:d5:94:26:12:bf:24:
22:b3:b1:ee:2b:40:9c:25:ae:01:87:29:71:40:d1:
de:92:6e:79:74:de:66:65:34:33:46:4e:01:eb:8e:
db:f6:40:0f:97:2b:5a:dc:34:2a:a2:8c:bb:87:aa:
81:03:db:bb:ca:5d:a8:20:08:5d:15:8d:7b:b3:b0:
e0:cc:cc:06:71:c6:17:27:fb:9b:c4:57:29:a5:ae:
76:89:aa:76:f0:74:b8:92:78:10:6b:6a:bb:a1:05:
9b:9a:5c:14:ce:18:c4:00:ee:35:be:a0:a0:ba:62:
c9:7c:35:0a:3f:fb:c5:f7:a9:2a:a0:2a:b6:66:f0:
e7:3d:a5:03:ea:e0:d3:f0:2d:03:45:af:14:d1:bb:
38:56:06:42:7f:07:e9:14:6c:9e:88:58:a6:dc:1e:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:2C:68:15:4B:77:12:84:8D:85:E7:31:04:30:60:8B:58:91:4A
X509v3 Authority Key Identifier:
keyid:A3:71:7E:A5:4B:95:94:2F:AD:81:A9:43:ED:B1:C1:0F:9D:F9:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3F-pUuVlC-tgalD7bHBD535Svs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b548d5-82fe-46c2-b997-157ad0ac520a/1/o3F-pUuVlC-tgalD7bHBD535Svs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:73:62:dd:76:8a:ec:b2:e1:6b:d6:3a:f9:c8:a8:87:66:7f:
07:fd:66:29:df:e1:ba:ab:5f:80:a9:3f:4a:1c:3b:58:10:86:
6e:32:63:ed:f7:a1:fc:a9:f7:7f:76:49:5f:c1:52:20:a8:0d:
57:26:3f:7d:38:28:d7:68:87:c4:41:1a:8a:3b:08:79:30:0e:
4a:6c:5c:29:9b:b9:9c:7b:53:bd:27:42:0f:b9:2a:fe:ca:53:
8b:25:7e:ec:fb:5f:77:31:a2:76:1d:ad:e6:45:78:00:f5:a6:
0d:17:e7:f4:88:3f:93:ba:4e:bc:ef:af:6e:c5:bc:58:78:39:
0f:1c:6d:78:1f:27:5b:b6:1b:52:f5:f1:b0:37:ad:20:ef:57:
7f:41:c1:82:f7:07:09:50:7f:1a:85:1d:e3:fa:23:5d:7f:fd:
0e:87:c4:03:38:f7:68:47:4c:5a:15:a6:18:1b:04:26:d3:d0:
f2:88:65:a7:03:85:ae:f5:d7:a1:db:68:93:f1:63:b0:31:2a:
fc:50:94:77:1d:9d:01:13:a2:06:6e:ba:d8:db:df:9c:18:dd:
13:14:29:f1:00:38:32:bb:5f:4f:d9:16:9c:34:4e:32:24:89:
76:5e:79:76:ad:8b:28:65:85:7a:a1:51:72:3e:b0:06:97:83:
07:37:98:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:32:14 2025 by rpki-client