Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
File: OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft (raw, json)
Hash identifier: EYVYKXzfHILnsVp8QsCI8YuY6LtBlAOFRsKjMpIJoBg=
Subject key identifier: 52:EA:03:61:8C:E5:56:AC:D0:FB:C9:FF:82:65:E1:7B:91:2E:3B:FF
Authority key identifier: 38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
Certificate issuer: /CN=38f23798b67393e4039e3f9555e214d6737c1351
Certificate serial: 0198D5BB8E5FBABB5CCB422A0905BF557F57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 07:01:35 +0000
Manifest this update: Sat 23 Aug 2025 07:01:35 +0000
Manifest next update: Sun 24 Aug 2025 07:01:35 +0000
Files and hashes: 1: OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl (hash: JCo04/91Ny84JoAkPNy8fcrgXj1f4NDUGpIdX9Q0O6M=)
2: Vpoq5ZpSGDP-ZXCmZlKnhArAK_Q.roa (hash: 38YyvusiUhw1DBRUCOnZouY1Y0JBlQCEkMbtx6PZeK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:8e:5f:ba:bb:5c:cb:42:2a:09:05:bf:55:7f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f23798b67393e4039e3f9555e214d6737c1351
Validity
Not Before: Aug 23 07:01:35 2025 GMT
Not After : Aug 24 07:01:35 2025 GMT
Subject: CN=52ea03618ce556acd0fbc9ff8265e17b912e3bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:55:70:7f:fa:10:3a:ee:44:9e:7b:d8:0e:
d0:60:25:c3:2c:bf:9f:8d:43:ec:63:ba:68:a7:b7:
b4:75:6b:94:f3:dc:db:b1:86:53:51:a5:b7:7d:58:
23:cf:4b:10:e7:33:de:ad:53:f3:da:f9:37:1b:d4:
c2:80:ec:11:33:04:ea:f6:d1:ef:82:bb:eb:ff:1b:
a5:1b:20:ef:1e:27:0a:51:d0:58:27:08:3a:6e:7a:
4b:38:05:6d:87:2e:e5:79:4f:0b:5b:8d:03:f0:d9:
66:21:3f:73:b5:fa:31:01:9f:55:b8:6e:3d:01:88:
4f:57:f5:9a:97:db:19:dd:6d:b1:0a:06:fa:a5:5d:
42:f4:b8:ed:5a:0b:40:81:fb:58:cd:3b:d6:b8:97:
04:03:ed:51:8f:ef:b9:68:ed:e4:ca:00:45:19:73:
66:93:51:1a:11:b2:b6:f4:ce:27:ee:b2:a2:a6:f3:
b9:93:50:85:71:d1:cb:0d:d0:1f:a2:79:78:33:11:
50:16:40:76:12:fc:9a:1d:ab:87:19:80:f9:0e:80:
1c:7b:57:93:ad:3e:8e:96:d3:ba:ee:23:0c:f6:cc:
dd:af:a3:2f:2f:fe:17:eb:02:01:c6:31:e0:26:7a:
4f:11:e3:4c:aa:b9:e5:31:e9:39:f6:a1:99:59:74:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EA:03:61:8C:E5:56:AC:D0:FB:C9:FF:82:65:E1:7B:91:2E:3B:FF
X509v3 Authority Key Identifier:
keyid:38:F2:37:98:B6:73:93:E4:03:9E:3F:95:55:E2:14:D6:73:7C:13:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPI3mLZzk-QDnj-VVeIU1nN8E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9ab4c9-0c10-4671-bdd4-730fcd0e5dca/1/OPI3mLZzk-QDnj-VVeIU1nN8E1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:af:4e:c8:69:70:26:e5:1f:4f:0f:84:50:96:7a:cd:30:b2:
e1:b3:28:73:ac:cc:db:0b:18:ab:b6:be:90:36:1c:0b:49:d9:
08:e3:cf:d6:d7:f9:7a:3b:c5:8e:00:7f:26:56:50:89:51:b5:
5a:26:7e:06:cd:ac:37:58:41:a1:97:d4:e4:2c:09:a8:03:7e:
07:39:50:d2:5c:8b:0d:5d:6a:c1:ec:d5:6d:d4:da:19:52:b5:
b1:1f:9f:ca:7c:b1:89:30:71:8a:c4:51:11:e6:71:2e:52:46:
72:9f:ad:10:32:aa:df:c3:7f:0b:fb:3c:3c:52:83:da:34:8d:
f2:72:f9:0b:15:49:12:86:ac:19:94:ed:be:7c:c3:01:3c:e2:
aa:14:3c:8b:8d:99:30:6a:6a:da:42:a3:c3:b4:44:72:66:6a:
f8:5d:55:35:56:4e:6d:d8:1a:50:dc:2b:4e:75:63:33:0d:4e:
16:e4:d4:3a:a8:44:95:3b:ac:ce:18:8e:a7:37:38:f2:25:11:
c4:27:32:38:d9:aa:40:66:90:59:08:1f:e7:19:70:6b:be:b1:
2d:ae:40:45:88:11:83:87:3b:78:8b:a6:9b:0e:1c:b5:08:bd:
b0:3f:eb:27:bf:e6:67:a7:57:26:57:32:21:eb:cc:4b:f1:72:
e5:7a:d1:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu45furtcy0IqCQW/VX9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZjIzNzk4YjY3MzkzZTQwMzllM2Y5NTU1ZTIxNGQ2NzM3
YzEzNTEwHhcNMjUwODIzMDcwMTM1WhcNMjUwODI0MDcwMTM1WjAzMTEwLwYDVQQD
Eyg1MmVhMDM2MThjZTU1NmFjZDBmYmM5ZmY4MjY1ZTE3YjkxMmUzYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeBVcH/6EDruRJ572A7QYCXDLL+f
jUPsY7pop7e0dWuU89zbsYZTUaW3fVgjz0sQ5zPerVPz2vk3G9TCgOwRMwTq9tHv
grvr/xulGyDvHicKUdBYJwg6bnpLOAVthy7leU8LW40D8NlmIT9ztfoxAZ9VuG49
AYhPV/Wal9sZ3W2xCgb6pV1C9LjtWgtAgftYzTvWuJcEA+1Rj++5aO3kygBFGXNm
k1EaEbK29M4n7rKipvO5k1CFcdHLDdAfonl4MxFQFkB2EvyaHauHGYD5DoAce1eT
rT6OltO67iMM9szdr6MvL/4X6wIBxjHgJnpPEeNMqrnlMek59qGZWXTodQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLqA2GM5Vas0PvJ/4Jl4XuRLjv/MB8GA1UdIwQY
MBaAFDjyN5i2c5PkA54/lVXiFNZzfBNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQt
NzMwZmNkMGU1ZGNhLzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85YWI0YzktMGMxMC00NjcxLWJkZDQtNzMwZmNkMGU1ZGNh
LzEvT1BJM21MWnprLVFEbmotVlZlSVUxbk44RTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK9OyGlw
JuUfTw+EUJZ6zTCy4bMoc6zM2wsYq7a+kDYcC0nZCOPP1tf5ejvFjgB/JlZQiVG1
WiZ+Bs2sN1hBoZfU5CwJqAN+BzlQ0lyLDV1qwezVbdTaGVK1sR+fynyxiTBxisRR
EeZxLlJGcp+tEDKq38N/C/s8PFKD2jSN8nL5CxVJEoasGZTtvnzDATziqhQ8i42Z
MGpq2kKjw7REcmZq+F1VNVZObdgaUNwrTnVjMw1OFuTUOqhElTuszhiOpzc48iUR
xCcyONmqQGaQWQgf5xlwa76xLa5ARYgRg4c7eIummw4ctQi9sD/rJ7/mZ6dXJlcy
IevMS/Fy5XrR1w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:42:29 2025 by rpki-client