Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: c4KC76E4Q8+Li+FBnegeDaAh2iaSBa+I9asG3t7Rsrs=
Subject key identifier: 39:59:A7:4F:2E:4E:32:23:10:30:FF:AF:A8:8F:3B:81:8B:F3:4B:E4
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 0198D54E5BAAF982FB62A219AF804B091F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: KIyysKe2aqmFdUCL+8mO1nEJt4VDSZukkuCEHDDVluA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5b:aa:f9:82:fb:62:a2:19:af:80:4b:09:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=3959a74f2e4e32231030ffafa88f3b818bf34be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:8a:23:b1:52:6b:2f:3f:e7:a7:a4:44:86:
c2:8e:f6:68:96:a6:25:03:f8:e7:54:7b:3b:06:cd:
fd:a6:71:73:db:54:83:a8:92:39:76:7b:24:4c:b7:
2d:39:c0:06:7a:79:68:8b:df:72:c2:00:e4:35:96:
ca:8f:ef:ae:86:63:99:03:1a:dc:17:bd:b5:f9:e9:
6e:7b:20:08:fd:29:c2:58:80:4d:b4:3d:a8:c6:2e:
e8:52:dc:8a:b8:f5:90:46:7a:05:2c:6c:2c:51:fb:
81:50:68:23:9a:0d:0f:30:ea:8c:98:f3:e5:e4:46:
22:3d:98:13:0f:97:22:73:b7:5f:fa:80:70:a4:35:
20:85:76:d8:51:81:31:ce:d9:5d:b2:44:a9:92:46:
18:5d:ce:63:1f:cf:6b:b5:43:a3:ed:71:e1:d7:d9:
56:e4:c6:a4:5e:0e:73:4b:d4:e1:86:56:d5:ac:3a:
b5:c1:78:1a:25:f2:bd:42:9a:df:b8:d5:03:80:81:
87:ea:c1:c1:a2:6b:c5:7e:df:e4:4e:27:c8:f3:70:
5a:81:0c:d9:ec:36:60:61:96:be:92:23:fe:6a:ff:
ed:a3:be:e0:04:a8:ad:52:c1:2b:00:a2:be:d1:32:
50:8c:c8:bd:82:0d:67:a5:43:df:b2:59:8c:7e:76:
26:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:59:A7:4F:2E:4E:32:23:10:30:FF:AF:A8:8F:3B:81:8B:F3:4B:E4
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5d:6c:46:48:7f:8c:b2:d4:da:3e:06:8e:05:30:44:24:34:
4d:42:a6:ba:d3:5a:75:52:2a:3e:ca:4b:de:7f:a0:96:be:41:
2b:27:56:95:7a:6f:2e:eb:f7:69:8d:f8:3c:65:60:da:52:0b:
ed:42:ea:a0:bd:f3:e0:c8:0c:96:81:13:b9:35:55:50:65:de:
4b:4f:49:22:9c:70:56:6f:22:06:69:47:18:f0:9a:13:c1:81:
e9:83:f7:c1:91:69:74:9b:d3:5f:32:63:d8:42:2d:f8:d2:50:
81:b3:03:c4:e7:42:d3:b9:e5:62:16:52:af:6e:31:85:07:14:
dd:c4:2c:c6:a9:17:20:ba:09:48:15:d6:7e:27:d3:78:30:f7:
73:06:d9:a7:ff:1a:0d:70:33:4e:9d:00:08:6b:0b:87:a7:c8:
6a:fd:0e:c7:8a:3a:c3:3b:e1:ce:53:50:a5:1c:b7:e2:b3:2b:
6f:6c:b3:75:41:ed:2a:70:7e:3b:57:f9:b9:81:e3:3c:64:6a:
28:75:8b:6b:23:df:bf:44:99:2e:90:a7:38:fa:7f:e0:a2:83:
69:c9:d1:b7:55:3a:eb:34:01:01:a4:20:98:76:26:4f:cc:5c:
26:68:3e:da:94:fe:13:eb:35:82:9c:5f:d6:f5:6f:2a:a3:e0:
18:ee:42:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTluq+YL7YqIZr4BLCR+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzA3N2I4Mzc3MmEwMDJkNWM0ZjhiOTIxOGVjMGRjN2Yw
NDBjYmYwHhcNMjUwODIzMDUwMjE4WhcNMjUwODI0MDUwMjE4WjAzMTEwLwYDVQQD
EygzOTU5YTc0ZjJlNGUzMjIzMTAzMGZmYWZhODhmM2I4MThiZjM0YmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc+KI7FSay8/56ekRIbCjvZolqYl
A/jnVHs7Bs39pnFz21SDqJI5dnskTLctOcAGenloi99ywgDkNZbKj++uhmOZAxrc
F721+elueyAI/SnCWIBNtD2oxi7oUtyKuPWQRnoFLGwsUfuBUGgjmg0PMOqMmPPl
5EYiPZgTD5cic7df+oBwpDUghXbYUYExztldskSpkkYYXc5jH89rtUOj7XHh19lW
5MakXg5zS9ThhlbVrDq1wXgaJfK9QprfuNUDgIGH6sHBomvFft/kTifI83BagQzZ
7DZgYZa+kiP+av/to77gBKitUsErAKK+0TJQjMi9gg1npUPfslmMfnYm+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlZp08uTjIjEDD/r6iPO4GL80vkMB8GA1UdIwQY
MBaAFKPAd7g3cqAC1cT4uSGOwNx/BAy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzIt
NzA2YWIzZTgzZDFkLzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mY2ViMDItYjBmMS00OTE3LTg1YzItNzA2YWIzZTgzZDFk
LzEvbzhCM3VEZHlvQUxWeFBpNUlZN0EzSDhFREw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFl1sRkh/
jLLU2j4GjgUwRCQ0TUKmutNadVIqPspL3n+glr5BKydWlXpvLuv3aY34PGVg2lIL
7ULqoL3z4MgMloETuTVVUGXeS09JIpxwVm8iBmlHGPCaE8GB6YP3wZFpdJvTXzJj
2EIt+NJQgbMDxOdC07nlYhZSr24xhQcU3cQsxqkXILoJSBXWfifTeDD3cwbZp/8a
DXAzTp0ACGsLh6fIav0Ox4o6wzvhzlNQpRy34rMrb2yzdUHtKnB+O1f5uYHjPGRq
KHWLayPfv0SZLpCnOPp/4KKDacnRt1U66zQBAaQgmHYmT8xcJmg+2pT+E+s1gpxf
1vVvKqPgGO5CQA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:52 2025 by rpki-client