Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
File: O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft (raw, json)
Hash identifier: hSgZXDm/2rt0m3vA8kUvKpFqWHmQr5Aout9C9j2D+KQ=
Subject key identifier: FD:F1:03:70:33:31:C0:E5:98:5F:AE:FD:5F:2A:45:01:3F:4F:87:64
Authority key identifier: 3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
Certificate issuer: /CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Certificate serial: 0199FCC6AF3E26D808DAC3BD581C01172081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
Manifest number: 0C3A
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl (hash: CEMJCkroV0DHUJBnD5mgbmeWcxBLPTVQD+ef7usJEHc=)
2: PiONgyQtYCxtAKel6AwlToYS7WY.roa (hash: GhuVBG356WKiZheC0jkKfbw1tCMHk61qHlrUSlnDnIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:af:3e:26:d8:08:da:c3:bd:58:1c:01:17:20:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbe44355e06faadbeb19455adc316d9b9f0f10e
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=fdf103703331c0e5985faefd5f2a45013f4f8764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:8c:53:ac:4e:61:5d:77:aa:e1:f9:7b:08:
77:4e:16:5f:1d:e0:ab:5a:51:70:31:18:ed:dc:38:
5f:fc:a7:76:47:fd:6b:cc:b3:42:a5:08:ff:09:d1:
e2:8f:1b:90:e6:6d:37:fa:95:27:ad:68:1e:d1:ca:
76:a3:5e:f3:5b:a6:bf:44:96:78:21:3a:e3:97:72:
35:58:ee:3d:93:b4:97:a2:3b:e1:ed:e9:64:4e:73:
66:8f:31:1c:91:3b:e2:96:73:36:5e:c4:da:ea:5c:
fc:6f:81:44:b1:56:1f:af:e1:79:84:ef:ee:c7:7d:
6a:41:0d:e0:cb:7a:44:35:2f:76:b8:27:f9:b8:30:
fb:8a:b1:88:f4:b9:05:60:49:5d:18:90:4d:a4:0a:
aa:97:56:59:73:b7:11:0e:0f:d2:a3:71:06:bb:5c:
8e:5b:6e:0c:22:60:6c:09:33:4d:32:b6:f9:6d:de:
10:a0:bb:7d:3e:6b:65:45:9f:54:7d:89:6b:c3:b5:
d0:e1:22:41:1b:7a:86:ec:3e:ef:fb:a2:17:5d:1f:
13:a5:72:4c:a8:f0:aa:f0:8f:9d:52:05:db:b0:33:
57:5d:30:a1:7b:85:43:e8:ac:4f:18:82:f6:e0:d1:
f4:5b:ad:9d:09:96:8e:70:83:e5:43:eb:fd:08:1a:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:03:70:33:31:C0:E5:98:5F:AE:FD:5F:2A:45:01:3F:4F:87:64
X509v3 Authority Key Identifier:
keyid:3B:BE:44:35:5E:06:FA:AD:BE:B1:94:55:AD:C3:16:D9:B9:F0:F1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O75ENV4G-q2-sZRVrcMW2bnw8Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/706837-d55d-432d-b0a4-b0814007528f/1/O75ENV4G-q2-sZRVrcMW2bnw8Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2b:f1:99:d1:05:a2:6d:d7:af:f8:e3:68:66:2e:1e:44:74:
62:7b:1f:4d:a3:2c:62:60:e9:eb:83:60:ad:50:16:06:30:18:
88:21:ae:7e:a4:72:7a:36:a6:5d:0f:31:bb:90:14:34:67:49:
91:64:0c:e3:dc:85:d2:f3:5e:f7:72:c4:32:ed:89:ca:24:76:
33:49:07:86:e5:ba:c2:ac:7a:e7:04:77:e7:b2:7f:1e:98:cd:
c6:e5:a8:be:00:b9:01:64:4d:d7:74:b8:8a:2b:89:93:4d:db:
65:51:2a:88:48:ff:92:fc:59:0f:01:7c:9c:19:21:35:92:a4:
3d:47:fd:50:71:0f:8b:80:2c:a7:45:19:e7:f1:ff:02:2d:0f:
36:fb:14:13:c6:2d:0e:3d:a6:9c:83:78:5d:2b:a3:b0:81:6a:
d8:69:42:ac:72:51:6f:24:e5:0f:53:e8:b3:3f:d3:1b:40:ac:
6e:88:2e:c1:76:ab:e2:46:b2:3e:5b:ed:4b:fe:e0:ef:83:84:
b8:9f:9b:35:e9:25:de:dd:55:a6:8b:cd:39:07:fe:62:6e:bb:
76:78:91:0d:ea:7d:5a:e5:1c:8a:07:1f:f2:4c:f5:e9:ea:9d:
fd:13:13:9d:af:ef:18:a3:ea:a1:97:a2:c3:62:83:d1:c5:81:
43:7b:d8:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xq8+JtgI2sO9WBwBFyCBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiYmU0NDM1NWUwNmZhYWRiZWIxOTQ1NWFkYzMxNmQ5Yjlm
MGYxMGUwHhcNMjUxMDE5MTQwMTQzWhcNMjUxMDIwMTQwMTQzWjAzMTEwLwYDVQQD
EyhmZGYxMDM3MDMzMzFjMGU1OTg1ZmFlZmQ1ZjJhNDUwMTNmNGY4NzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSOMU6xOYV13quH5ewh3ThZfHeCr
WlFwMRjt3Dhf/Kd2R/1rzLNCpQj/CdHijxuQ5m03+pUnrWge0cp2o17zW6a/RJZ4
ITrjl3I1WO49k7SXojvh7elkTnNmjzEckTvilnM2XsTa6lz8b4FEsVYfr+F5hO/u
x31qQQ3gy3pENS92uCf5uDD7irGI9LkFYEldGJBNpAqql1ZZc7cRDg/So3EGu1yO
W24MImBsCTNNMrb5bd4QoLt9PmtlRZ9UfYlrw7XQ4SJBG3qG7D7v+6IXXR8TpXJM
qPCq8I+dUgXbsDNXXTChe4VD6KxPGIL24NH0W62dCZaOcIPlQ+v9CBpRyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3xA3AzMcDlmF+u/V8qRQE/T4dkMB8GA1UdIwQY
MBaAFDu+RDVeBvqtvrGUVa3DFtm58PEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQt
YjA4MTQwMDc1MjhmLzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83MDY4MzctZDU1ZC00MzJkLWIwYTQtYjA4MTQwMDc1Mjhm
LzEvTzc1RU5WNEctcTItc1pSVnJjTVcyYm53OFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyvxmdEF
om3Xr/jjaGYuHkR0YnsfTaMsYmDp64NgrVAWBjAYiCGufqRyejamXQ8xu5AUNGdJ
kWQM49yF0vNe93LEMu2JyiR2M0kHhuW6wqx65wR357J/HpjNxuWovgC5AWRN13S4
iiuJk03bZVEqiEj/kvxZDwF8nBkhNZKkPUf9UHEPi4Asp0UZ5/H/Ai0PNvsUE8Yt
Dj2mnIN4XSujsIFq2GlCrHJRbyTlD1Posz/TG0CsboguwXar4kayPlvtS/7g74OE
uJ+bNekl3t1VpovNOQf+Ym67dniRDep9WuUcigcf8kz16eqd/RMTna/vGKPqoZei
w2KD0cWBQ3vY9Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:22 2025 by rpki-client