Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: cTO6BfdFyGNJVoPM8GkxST5dgIMsoEWzqqJo6GO+0vY=
Subject key identifier: 59:86:81:F2:D7:5C:1C:44:34:B3:00:33:E6:02:9E:F8:5D:84:A1:3F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0198D58355D6E311869A3A1184140D23702C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 06:00:10 +0000
Manifest this update: Sat 23 Aug 2025 06:00:10 +0000
Manifest next update: Sun 24 Aug 2025 06:00:10 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: oRdS+10wwwBqibrPyxhZwwfATcaKFKzKfSzvJsbVZpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:55:d6:e3:11:86:9a:3a:11:84:14:0d:23:70:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Aug 23 06:00:10 2025 GMT
Not After : Aug 24 06:00:10 2025 GMT
Subject: CN=598681f2d75c1c4434b30033e6029ef85d84a13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:61:3a:36:67:67:dd:91:b4:32:82:5b:e4:
80:46:5b:d6:a4:eb:32:a2:dc:93:6b:e0:96:81:78:
4b:61:1f:e5:61:b5:4f:f9:93:8a:7d:83:b8:d1:e5:
97:14:c9:0b:7b:82:0d:e8:37:bc:74:da:de:a1:4b:
a4:ce:95:0d:9f:27:0a:e4:a4:0e:e6:d9:40:65:6e:
f6:51:b6:28:71:33:6b:d5:4a:4f:d1:0e:df:d2:2c:
0c:b7:49:59:3d:43:27:59:9b:3a:26:c7:00:4a:cb:
a9:ef:e1:3d:17:1b:d5:29:a8:85:63:fe:a2:00:34:
86:1e:5d:c0:21:d2:0f:c6:33:c2:4f:79:0e:c4:9c:
bf:58:91:d3:4e:1b:4c:ff:fc:ac:58:7c:94:f9:58:
52:cc:3b:da:29:15:f2:b5:4e:4f:7c:6d:05:c0:9c:
56:2b:3b:d3:7b:4c:dd:3e:0b:0f:de:22:e0:bd:ff:
17:10:0b:c0:e7:0d:41:96:7b:5b:6c:f2:50:f7:2c:
d1:e3:18:89:ae:a7:68:ca:af:bb:8a:ba:03:b9:7b:
7c:03:cd:89:0c:d0:18:d7:cf:71:2e:ae:b1:26:62:
bd:1a:81:04:c6:93:38:02:60:f0:38:0d:be:50:5e:
46:61:47:68:47:e4:5c:af:4b:91:b7:10:17:cb:76:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:86:81:F2:D7:5C:1C:44:34:B3:00:33:E6:02:9E:F8:5D:84:A1:3F
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:78:63:ca:b4:79:88:98:f0:93:48:01:41:d9:f0:4f:94:
8f:94:dc:c4:8e:a2:05:d4:7f:8d:0c:a2:8c:f2:98:bd:83:cd:
65:a1:6c:37:30:f3:67:3b:dc:3e:a9:8c:90:d2:47:7f:d8:2a:
27:7f:85:4f:cb:80:04:91:c1:a7:b9:0d:e9:a5:65:67:6e:0f:
48:bb:cb:2a:44:4e:f7:2f:5a:b5:e1:87:9c:43:d6:bf:fe:c9:
40:7b:58:e5:64:1b:a5:4b:ec:60:6d:05:cd:4f:d4:d0:ac:8b:
2e:38:e5:b0:c0:b2:9c:31:24:5c:26:10:cb:55:32:78:ae:7f:
06:96:11:23:c0:32:b8:32:fb:02:3d:9e:c0:ea:7c:8d:03:b6:
0e:06:ff:76:5b:84:98:1d:fc:68:58:2b:ee:d5:52:89:df:e6:
71:ee:d9:57:c9:4b:07:22:af:62:87:3d:20:e9:da:af:34:fe:
61:15:6f:0b:5a:71:91:bc:a1:4a:f0:f4:13:29:a4:e5:2d:c0:
ca:65:5e:c8:f2:18:38:93:6d:21:80:0f:4a:5a:5e:6e:02:da:
7e:d0:e4:49:a0:00:44:86:f6:79:14:0b:33:06:42:76:22:27:
bc:ea:c8:1f:b9:26:48:eb:b3:93:ed:e6:22:f4:48:46:7f:2a:
26:7c:2a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:51:50 2025 by rpki-client