Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: rWMbyffwEcZtSHnmo4r94WMFKlOgVELIXrc88QAUdu4=
Subject key identifier: 78:CF:E9:05:23:D9:D6:FE:62:4D:3D:24:D1:30:E7:92:52:A9:DB:23
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 0198D4A7A902A990AC4F656D0FC59744D193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:14 +0000
Manifest this update: Sat 23 Aug 2025 02:00:14 +0000
Manifest next update: Sun 24 Aug 2025 02:00:14 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: wuWOQ4HDD5C/v7b0uSEvURlLMQj2q/TtCIvak33aIg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a9:02:a9:90:ac:4f:65:6d:0f:c5:97:44:d1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Aug 23 02:00:14 2025 GMT
Not After : Aug 24 02:00:14 2025 GMT
Subject: CN=78cfe90523d9d6fe624d3d24d130e79252a9db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:21:ee:61:83:5a:ac:3e:de:3e:b1:2d:0b:
c0:ab:aa:1f:4a:91:13:37:de:68:6c:b7:e1:a7:e7:
b8:95:d6:02:0b:16:57:42:92:bd:c8:df:9d:b8:dc:
85:80:02:db:00:18:98:8f:0d:06:a4:b3:30:e6:f9:
7e:72:cb:ee:87:ec:f8:57:fe:eb:e4:a5:8a:e3:ec:
df:6b:7d:1b:3c:84:36:81:ee:be:94:17:43:28:6d:
e5:33:bf:b7:45:c3:8b:7b:86:d4:7e:34:1a:7b:ac:
df:b0:f5:2f:d3:4b:3e:7a:20:65:e2:29:31:01:1a:
75:0b:63:08:9b:ce:5f:d8:37:9e:cf:ac:9e:80:25:
85:98:40:2a:1e:73:89:87:60:a7:6f:7b:dc:54:36:
0a:b0:fa:14:4b:54:38:6c:0f:1e:4a:65:e1:0c:19:
e1:90:5e:c0:ed:52:a4:88:62:bc:9e:68:ba:ee:45:
28:2a:fd:03:35:08:f7:9f:0e:90:c0:93:04:d3:96:
15:94:3b:44:60:8d:37:cb:85:e7:76:c8:e3:aa:6c:
32:4d:a9:35:fa:23:4d:59:5b:42:c2:b3:11:ae:ea:
67:dd:79:75:2b:f7:59:e7:ce:a6:34:82:94:7b:1d:
b8:4d:eb:5c:a9:7e:28:75:75:53:82:7f:92:1d:3b:
b0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CF:E9:05:23:D9:D6:FE:62:4D:3D:24:D1:30:E7:92:52:A9:DB:23
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:5f:0c:f9:95:27:93:94:0d:25:e0:01:d5:f1:9b:6b:2c:b8:
72:e9:a9:84:2c:6f:68:85:c2:c3:5d:0f:d5:cf:5e:c4:1c:c4:
04:f2:59:6a:68:10:78:29:39:2a:82:01:56:c3:f8:88:84:d3:
d5:31:fb:cf:59:cd:16:c3:dd:c9:8a:12:c2:e7:c0:cf:6b:e1:
44:a9:bb:d2:65:18:4c:c6:3d:f3:9c:94:17:d0:39:eb:e4:3b:
3b:01:7f:2b:c7:b3:47:81:51:21:43:81:aa:39:65:76:1f:1e:
b8:6d:24:c0:40:8d:a4:c0:9a:aa:c2:f1:82:64:63:2e:2b:63:
06:20:b8:ab:e6:82:ca:bf:81:cc:01:3d:f6:2c:65:05:bd:09:
1b:ea:a3:f6:d5:dc:f5:21:35:25:ec:70:d2:31:4c:e4:9d:00:
33:5e:d8:cc:cf:77:5b:73:a9:42:3d:21:a2:4b:7f:00:76:de:
e7:11:bf:cb:d1:7c:c0:68:39:b3:d4:99:6c:0a:0a:14:98:d5:
fa:c2:8b:d3:4b:3b:c1:c4:ac:6d:71:42:23:c5:3e:06:26:49:
da:0e:fd:4b:c5:dc:c3:04:fd:d3:b6:4f:0b:25:fb:8d:c3:3e:
6c:bf:24:a0:67:c9:18:2b:d8:03:90:a6:06:6d:e4:90:03:9f:
c2:50:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:35 2025 by rpki-client