Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
File: o8lj0aEdANOEre35u4blOEmpsYw.mft (raw, json)
Hash identifier: DQ1UK7puopB7NHR47AKVaKpyW0cNela1qrR8OwFC6HY=
Subject key identifier: 5F:2B:CB:60:7D:D3:8E:7D:D6:0A:EA:17:01:7D:B1:09:EB:C2:B0:B0
Authority key identifier: A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
Certificate issuer: /CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Certificate serial: 0198D8F2DCD2A1927986BA0BEBCA9434C631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 22:00:51 +0000
Manifest this update: Sat 23 Aug 2025 22:00:51 +0000
Manifest next update: Sun 24 Aug 2025 22:00:51 +0000
Files and hashes: 1: 1-9Z39awtCUNqeCcuYwIOQubEoEY.roa (hash: AJvelHrJ42adBWeCqNbgdbqaGB/A4YMI32J/x3+LlBI=)
2: o8lj0aEdANOEre35u4blOEmpsYw.crl (hash: lbcZ7OXXt+64e+83hsbwyExMM98myW/djJ+YC3C4+Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:f2:dc:d2:a1:92:79:86:ba:0b:eb:ca:94:34:c6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c963d1a11d00d384adedf9bb86e53849a9b18c
Validity
Not Before: Aug 23 22:00:51 2025 GMT
Not After : Aug 24 22:00:51 2025 GMT
Subject: CN=5f2bcb607dd38e7dd60aea17017db109ebc2b0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:53:7a:84:8f:36:44:20:1e:f7:be:47:15:6b:
ff:15:b4:a6:b5:23:db:84:65:f0:15:ac:60:26:80:
0e:a3:3f:a8:e7:99:cd:a8:06:1e:6c:d4:ba:ad:da:
cd:9a:52:e8:4f:f8:c6:90:54:e9:b7:78:e6:a2:89:
bc:71:6f:f5:cc:29:53:a7:98:90:af:7b:59:f5:f1:
20:a3:89:4c:3c:5f:fa:28:04:8a:72:3f:a1:07:a0:
c0:b8:af:22:bc:e3:fd:34:35:62:a3:52:76:cd:40:
ca:3c:af:c3:46:a1:40:10:9b:c8:63:87:b3:dd:f9:
7a:8b:f6:d3:dd:6f:09:3d:19:65:b6:a7:f2:33:fb:
c9:3a:cd:06:2f:42:37:e2:fd:7b:38:6f:c0:07:22:
21:57:72:42:cd:8b:d2:06:74:af:7f:9c:37:64:0b:
1c:a6:8b:92:ef:82:44:fb:6c:a5:d9:32:21:7d:fb:
e6:36:98:b9:ab:c4:19:45:48:4e:25:b4:4a:0b:0f:
65:69:b0:64:55:bf:d7:e0:ca:91:46:8f:6f:25:b7:
5e:39:f6:69:82:26:7f:61:01:4b:47:b7:f0:81:a8:
83:4a:e0:08:4b:60:d0:67:a1:79:ac:64:9f:93:3d:
0b:6f:37:dd:69:0f:da:f5:9e:fe:7a:99:b9:1a:f7:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2B:CB:60:7D:D3:8E:7D:D6:0A:EA:17:01:7D:B1:09:EB:C2:B0:B0
X509v3 Authority Key Identifier:
keyid:A3:C9:63:D1:A1:1D:00:D3:84:AD:ED:F9:BB:86:E5:38:49:A9:B1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8lj0aEdANOEre35u4blOEmpsYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/fc52a0-e0f7-480b-ba7d-1042ea8e3bfb/1/o8lj0aEdANOEre35u4blOEmpsYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:46:00:00:c6:c5:14:c8:36:0c:9a:c1:58:5b:9d:55:a7:92:
f9:e4:07:db:64:18:c1:81:99:4a:3c:20:dd:1c:5c:e3:6e:30:
fc:7b:1f:5a:d5:da:d5:9d:6b:88:00:f4:e5:c2:57:32:97:13:
87:33:d0:23:f1:db:79:84:a4:8d:6a:ab:73:5f:dc:ad:c9:11:
8c:f8:1b:63:c8:0a:f3:98:da:74:ca:ad:70:b5:1e:4a:21:fd:
02:36:55:a5:8b:d1:25:13:74:89:a7:26:4a:50:48:04:bd:b8:
ea:2d:00:30:60:f2:8b:ed:4a:c4:14:a1:bd:8d:4b:0d:30:38:
c4:1f:b3:96:0f:9a:ff:93:af:f1:93:35:54:5e:5e:b0:20:3c:
ba:fb:60:43:ad:0c:e0:93:ad:25:a0:84:9b:c1:9c:76:e3:11:
05:06:e3:7a:a7:dc:5c:ad:17:12:60:6d:35:f4:6a:aa:97:2c:
f3:4a:ca:88:3e:1e:04:4c:8b:c5:59:2f:d3:13:00:29:53:a7:
13:c7:8f:d3:c8:a0:b1:60:83:84:77:4d:94:1d:0f:9b:78:9c:
39:0a:a9:f4:d5:24:c8:b5:08:77:ab:5b:8f:55:32:e0:16:4f:
a9:eb:e5:16:fb:e8:d9:98:28:c1:fc:f7:1a:9d:8a:a1:d7:88:
b2:3f:df:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:11:01 2025 by rpki-client