Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: JelQMAJErpqZouS5DtSdlPn0qS/oFu1OzgrOHbjQS5U=
Subject key identifier: 8F:97:3F:73:E6:09:D6:7D:CB:43:DD:D3:89:42:8C:5B:1F:6D:77:2D
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 0198D65F3585CC0E4678F82B5A31DA085C9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 163C
Signing time: Sat 23 Aug 2025 10:00:20 +0000
Manifest this update: Sat 23 Aug 2025 10:00:20 +0000
Manifest next update: Sun 24 Aug 2025 10:00:20 +0000
Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: DrvNoZzvLtpmQWnKN8Hh2+BKpFUGFChLQkhgppGNMvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:35:85:cc:0e:46:78:f8:2b:5a:31:da:08:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Aug 23 10:00:20 2025 GMT
Not After : Aug 24 10:00:20 2025 GMT
Subject: CN=8f973f73e609d67dcb43ddd389428c5b1f6d772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:e4:f9:bf:16:45:3c:a9:2e:5b:99:8c:90:
4b:08:57:53:30:c7:84:33:6d:7e:3b:f0:13:59:45:
9a:d5:e6:f8:61:95:cb:82:7e:cd:f2:17:83:4c:bd:
b0:71:aa:4c:5d:92:90:28:50:58:a0:29:6e:15:3a:
1a:c7:1e:75:7d:0a:af:6a:d0:9a:5a:3f:cc:a9:17:
04:47:3e:4f:75:54:f5:97:4d:72:11:4c:78:d0:60:
37:ad:83:95:93:1e:59:0c:39:17:00:32:b9:67:bb:
2a:f0:53:bc:86:43:71:3c:dd:0b:b9:4c:53:b0:34:
59:ba:2e:64:b7:de:02:93:fe:e9:1c:25:a1:11:eb:
a2:c4:3a:10:1c:e9:a1:54:83:c0:72:26:f3:e5:2d:
cb:62:41:a7:7c:4a:d8:17:fe:50:21:6e:b3:f7:8c:
b9:a7:cf:07:20:1e:06:7a:e4:3b:71:d8:97:ef:96:
cd:49:e3:50:1b:5d:8d:7a:e3:25:3c:90:f7:9a:ad:
5f:c4:f0:cc:d5:2b:c9:91:b3:fb:d3:f8:40:9d:71:
6d:9f:dc:b1:60:f8:20:da:25:ef:4d:80:eb:6f:8c:
a4:2f:9b:6a:40:c8:b8:c7:8d:74:07:18:98:95:d7:
2f:64:6d:4a:96:a9:15:5e:e6:7c:c4:94:21:ec:d1:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:3F:73:E6:09:D6:7D:CB:43:DD:D3:89:42:8C:5B:1F:6D:77:2D
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:96:43:c4:21:7c:cf:e6:f4:af:ab:48:f4:7d:69:2f:0b:52:
81:15:e9:9a:8c:85:3a:df:4b:34:30:8e:6c:7f:db:df:a0:6d:
a0:58:34:c6:e4:c9:d3:3f:a4:6e:ba:3d:1d:56:47:1c:c0:e4:
30:c1:ac:0b:42:b1:57:13:db:1a:c5:68:c6:5b:27:68:7f:1b:
cd:b9:ea:e3:d0:cf:1f:65:ac:d9:68:95:8c:8e:36:77:a8:9c:
84:b4:4b:89:a5:ac:eb:29:47:a4:73:aa:01:27:16:b7:83:ec:
8e:5c:f7:dd:16:9f:24:7e:ab:7b:3d:86:25:34:72:9e:3b:5b:
cc:20:cd:c5:80:83:4f:31:61:00:27:57:dd:93:88:ce:f2:d1:
f9:3e:79:97:ac:38:fc:63:ff:51:2a:01:2c:fb:d5:7d:65:7f:
03:1c:94:69:00:b7:fa:b9:e3:81:f2:de:50:84:d0:12:72:a2:
ec:30:c8:50:a4:66:09:7e:85:10:a6:7f:87:4c:70:3c:e9:4b:
3e:d0:c2:75:0e:1c:4a:3c:c9:ff:87:69:a2:86:c8:31:7b:de:
93:f1:8d:5d:71:43:cb:a8:04:87:a3:11:bf:c3:38:87:e8:fb:
51:f1:05:fd:89:6f:61:dd:42:7a:6a:05:19:6e:02:ca:4d:7c:
09:60:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:50 2025 by rpki-client