Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: U4ac41WnAcgAIu608hmKQEX28hYhhseUYsth19elyP8=
Subject key identifier: 91:96:7D:D8:5F:AD:EE:CC:CE:22:6F:E6:26:00:59:A5:83:A5:03:F0
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 0198D5BC05F5632FE6696F3FCAFC0C1708C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 136D
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: qhZD7lhgaBIlTKFv6M763lwNzvJP+lcAPBFsHfbKkcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:05:f5:63:2f:e6:69:6f:3f:ca:fc:0c:17:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=91967dd85fadeeccce226fe6260059a583a503f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:84:d1:5a:02:dd:ab:d1:5f:28:16:6c:d1:ac:
ac:2a:a5:e3:0a:1e:be:81:87:51:e1:7b:c2:93:b5:
89:ee:03:f6:da:93:b9:49:1d:e6:e1:1a:e4:7c:29:
b4:81:92:33:57:bd:b2:00:2d:f4:01:3c:e7:a7:54:
e4:d3:27:03:a4:c5:cf:54:ca:85:ed:b6:bf:91:1e:
a5:6a:1a:a6:b5:46:a1:f4:ff:54:bb:f2:28:40:1a:
78:f6:88:3d:d0:0d:2b:b4:1c:ba:8e:03:7b:93:70:
18:d5:27:68:bf:4b:56:bc:0c:8b:2a:bd:e7:31:b1:
db:39:ae:e5:61:73:f9:2c:2c:60:75:d3:ee:6b:8d:
b5:22:9f:b8:73:3e:62:57:31:bd:8b:52:43:96:6b:
c7:15:f8:da:25:df:2d:ee:dc:35:1b:96:24:9e:2e:
71:b7:22:c2:c9:10:40:a9:11:ea:cb:c8:18:89:63:
c0:eb:34:aa:1f:62:26:cc:a1:b4:4b:8e:47:94:93:
44:ce:0c:ac:3f:ba:9e:b2:85:e0:d5:ac:60:7e:2f:
8b:8d:14:2b:20:93:d0:28:aa:d8:03:c2:1f:b2:e7:
70:90:a9:4b:45:86:80:aa:3b:a8:f3:4b:e4:bc:77:
5b:da:2e:44:2c:99:25:82:d8:cb:32:05:81:b7:c7:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:96:7D:D8:5F:AD:EE:CC:CE:22:6F:E6:26:00:59:A5:83:A5:03:F0
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ff:2d:5f:09:87:99:f9:0a:da:f8:7f:65:64:4a:5f:16:bd:
57:cf:b5:3b:f2:f4:27:cc:c9:52:66:b4:f5:6d:a8:19:a1:4a:
f2:2e:5d:ea:df:ab:b7:ea:c9:e4:8f:cd:e6:62:e4:34:24:bb:
c8:a0:7d:38:46:0f:0b:85:b4:48:96:2c:e9:7c:a8:8a:35:cf:
37:9e:32:24:7f:54:02:0a:33:0c:15:4c:ff:b2:62:31:60:05:
5a:6c:1e:83:db:90:77:09:37:b6:f2:05:1d:13:ab:18:2a:0d:
66:6a:0a:31:1a:c2:88:d4:08:aa:36:03:d6:52:8f:89:dc:14:
6b:ee:41:45:72:22:af:ea:f4:cf:2d:75:ab:7e:e7:15:48:5e:
fa:8d:41:64:f2:a0:05:dc:de:44:22:22:dd:d2:50:b4:a0:13:
cc:be:e6:98:ba:ef:0c:16:5f:95:a8:51:63:6e:ce:bd:b5:6c:
de:bb:6a:ee:b9:f5:75:27:72:34:b3:d9:a1:30:05:c6:6c:1d:
df:cc:d0:b1:d9:85:3e:97:7b:4c:34:1b:55:b7:2e:b6:19:fe:
f6:7d:9d:d2:5c:d3:a3:3f:47:14:df:56:f2:8a:82:91:72:a1:
c8:05:fd:19:38:75:b1:49:6c:f6:a6:29:d6:32:ce:6f:18:96:
e9:31:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:33:54 2025 by rpki-client