Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
File: pOuOt7S2LtElTwBWTgPEBnq_v8k.mft (raw, json)
Hash identifier: ZdAPFwO7XxbdCSkHp0CSySS20nqo3R3Ymr4suKfDb0A=
Subject key identifier: A4:01:EE:66:45:45:A0:25:54:BD:F4:DD:2E:3C:9E:F0:A7:A7:CE:A1
Authority key identifier: A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
Certificate issuer: /CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Certificate serial: 0198D515E34A7F01D4F5A9A50AD40BBFC03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
Manifest number: 039A
Signing time: Sat 23 Aug 2025 04:00:38 +0000
Manifest this update: Sat 23 Aug 2025 04:00:38 +0000
Manifest next update: Sun 24 Aug 2025 04:00:38 +0000
Files and hashes: 1: pOuOt7S2LtElTwBWTgPEBnq_v8k.crl (hash: j4Bx7BykUFuMlIyByn3xzzShayx+ZfjT9BKW1ascrSs=)
2: tBiDEoWCGA8hVhVgwo9Iim47EzY.roa (hash: zWjGkV/pdnISeY0gGiXKGa4SNljWX+62ouYMUIE3qx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e3:4a:7f:01:d4:f5:a9:a5:0a:d4:0b:bf:c0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb8eb7b4b62ed1254f00564e03c4067abfbfc9
Validity
Not Before: Aug 23 04:00:38 2025 GMT
Not After : Aug 24 04:00:38 2025 GMT
Subject: CN=a401ee664545a02554bdf4dd2e3c9ef0a7a7cea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:93:71:46:4f:6e:ce:8c:4c:e7:2f:54:01:
73:4a:27:2a:75:38:8f:09:e7:dc:67:07:84:d7:a3:
7f:71:52:6f:97:54:79:fe:64:f0:1e:f7:5e:de:a7:
53:a0:c0:31:5a:78:e4:ea:36:a3:60:f4:ba:47:05:
63:ea:4c:20:dc:fc:7a:89:60:bf:ed:6f:b1:42:c9:
f6:a4:e9:5d:1e:a5:80:48:08:2c:bc:3a:d2:24:10:
2b:91:b2:32:d8:28:f8:a7:77:79:c8:ec:0f:b6:65:
f9:d8:99:ba:c6:9b:39:89:4a:af:95:5f:d7:d7:00:
d0:e3:1f:59:2b:7b:77:e7:8c:02:38:fc:eb:2a:01:
16:a7:b7:36:ae:d3:4f:22:cb:02:b9:a4:9b:41:3f:
62:2b:9d:8b:65:2b:89:b7:76:58:13:6b:a3:df:3d:
24:27:ca:33:5b:a5:16:8e:ec:4e:43:37:3c:5a:5c:
2d:01:7c:dd:01:59:ab:0e:fb:86:a7:a2:a1:82:31:
93:47:3f:ce:a6:78:8a:d3:ab:3f:13:3d:3c:9c:d4:
25:1e:53:9b:ba:e0:31:22:a7:ae:2a:bc:fc:e9:58:
c1:ad:a2:d0:ff:95:25:0c:b6:cb:79:2f:c8:a9:ab:
a8:98:3b:db:a5:f4:e9:26:2c:9d:e1:5d:95:b8:31:
52:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:EE:66:45:45:A0:25:54:BD:F4:DD:2E:3C:9E:F0:A7:A7:CE:A1
X509v3 Authority Key Identifier:
keyid:A4:EB:8E:B7:B4:B6:2E:D1:25:4F:00:56:4E:03:C4:06:7A:BF:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuOt7S2LtElTwBWTgPEBnq_v8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/12c3e8-9c01-455b-b181-f4d7fdebf04d/1/pOuOt7S2LtElTwBWTgPEBnq_v8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6b:91:3d:eb:cd:ef:63:34:bb:6c:1e:92:dc:b1:d6:54:2a:
a9:31:02:2e:9a:a7:67:2b:15:9b:84:6b:43:49:ec:6f:9c:f5:
5a:bf:83:ec:ca:89:d3:5d:67:c1:94:c9:32:1b:a5:01:13:20:
33:a6:ec:17:9f:53:ac:f0:61:ad:5b:f5:0d:17:b8:1f:45:a2:
ec:43:2b:34:c9:6a:6c:a5:b9:72:85:20:32:3c:d1:9f:fa:d3:
31:21:94:ed:81:de:ef:c5:59:9f:ee:55:80:05:01:ba:44:42:
bd:5a:2f:e1:a7:6f:7a:17:f7:7a:85:c6:07:23:ea:78:34:b8:
93:a6:57:ba:b9:c4:f6:74:7c:53:d3:94:06:91:bd:84:d9:06:
98:77:f6:81:1d:9e:14:a3:fb:a6:eb:48:72:a8:d1:f4:78:7e:
d3:92:df:5e:bd:82:09:dc:62:95:ef:be:cb:63:52:b1:bf:b8:
82:0b:7e:9b:c8:84:21:f4:38:35:07:c0:9e:00:bb:b5:07:cb:
15:e6:64:08:65:fb:53:2f:aa:18:5a:2f:5f:c5:91:23:c1:4f:
a9:f1:36:bc:46:18:1f:b1:b1:06:84:fb:d7:bd:8a:d2:a0:07:
33:1b:c9:c7:78:62:a2:f8:fd:6f:c7:30:35:35:3d:57:70:f4:
2e:b3:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:19 2025 by rpki-client