Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier: tWnY6toL6EGTxy2gF1A0N25zuDU53BU7ZCpLTLsdgCw=
Subject key identifier: BF:3B:92:57:82:AD:0A:1D:CD:44:6F:E9:97:00:70:F0:26:BE:61:D4
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer: /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial: 0198D5F162EFDB679F700CEBCAE260BDD29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: dDjpKlcdmauXOkT6m9CWK4-kpis.roa (hash: G6ujxWSW0sYQE7gy/Nuu88UGg9rwT78FpEnJjrgOwo8=)
2: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: pzsUaj0qPvx9RDQ1QeJAJpYPPl9DAJbvX63DCyYub1A=)
3: pmRYb1uVb4ACjy76RWEWI3ry0Yw.roa (hash: dUoaaQCiFIf8aY35CNwZdXTFszULbhBjgaUl5xXn72M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:62:ef:db:67:9f:70:0c:eb:ca:e2:60:bd:d2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=bf3b925782ad0a1dcd446fe9970070f026be61d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:fa:28:68:3b:26:82:01:6b:e9:fe:4d:2b:
9f:da:4d:a3:49:7f:44:90:1b:ba:32:56:32:ee:05:
ba:64:0b:b6:98:6b:ec:a8:19:fa:ff:73:f6:d9:ee:
13:b2:56:5a:69:1a:6d:f7:d0:e4:51:42:80:e5:c5:
b4:55:e2:31:42:3b:c8:ce:ae:f3:b7:4d:09:65:8c:
35:a5:de:9e:83:85:19:24:9c:54:df:fc:b0:a1:0e:
f4:51:48:8f:44:ab:45:96:7c:a3:af:6e:fb:45:90:
f7:0e:83:f3:73:0f:7a:b6:81:fb:a5:c6:98:4e:8d:
3b:8f:af:da:f3:f8:f7:94:97:0b:e4:3f:b0:13:6f:
b4:cc:13:66:e6:a9:f6:50:d3:66:25:5f:14:88:d0:
d1:8d:85:f6:e9:40:54:a5:ad:6b:b7:90:ba:aa:f3:
a7:2c:e8:65:69:0c:72:d6:53:75:2c:f7:c4:c5:28:
33:51:af:56:27:ea:21:16:71:bb:bf:a2:fe:bc:03:
9b:c8:2b:52:7f:fd:24:1e:f7:3d:9f:88:31:a9:c9:
51:67:3c:40:6e:51:83:88:01:6a:3d:74:a2:d6:f6:
32:1c:ac:d6:bc:4d:f4:b3:7e:b8:d0:8c:db:5c:29:
70:85:5e:45:b2:6c:d2:cf:f9:14:5f:c1:61:fd:af:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3B:92:57:82:AD:0A:1D:CD:44:6F:E9:97:00:70:F0:26:BE:61:D4
X509v3 Authority Key Identifier:
keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ba:cd:17:85:7a:f2:10:d3:b0:ed:89:7b:a9:a2:6d:a2:86:
16:b6:a1:ed:4e:6f:1c:90:e9:63:08:43:c3:99:a5:30:36:6e:
88:21:41:ba:48:68:8c:39:dd:3d:5d:e6:57:9c:da:6f:56:42:
9d:8f:be:a0:ed:07:f1:f4:a4:50:0f:15:7d:8f:a8:64:6f:03:
38:4f:95:52:33:7f:92:f1:c9:e0:73:ca:42:b5:fb:b6:33:c8:
12:6a:cf:10:81:a8:09:a2:21:fe:52:c0:fc:6a:bd:95:80:54:
f0:77:f6:22:70:8b:70:ad:6f:cc:f7:27:ba:bf:55:ad:04:e9:
f8:58:5e:3c:1e:05:d2:b6:32:f2:ff:dc:b8:81:5c:58:de:ab:
10:9a:19:be:b5:23:b5:b9:66:a8:d8:6e:6f:b9:d4:24:dd:d3:
bd:24:26:a5:69:bf:ac:26:1f:60:05:da:b1:7c:07:bb:f0:7f:
c5:ab:07:98:39:00:33:ee:16:87:cb:8e:69:66:c2:f3:17:e5:
0d:e6:04:b9:bb:6d:8f:57:51:34:5e:4b:33:bb:1d:fb:41:6b:
03:56:90:27:69:cb:8e:30:2f:be:da:d6:7d:89:e2:8a:7a:70:
7a:60:00:b7:e2:b6:f3:93:03:c1:4e:6c:97:38:67:cb:26:6e:
15:22:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:18 2025 by rpki-client