Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
File: OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft (raw, json)
Hash identifier: FWjTM6oezcv9y5eH7OBeTYt2+tnInfqRH+eO4nbPsSU=
Subject key identifier: 68:21:0A:41:AD:C3:60:76:AE:32:95:EA:84:39:6B:82:C8:F2:7B:91
Authority key identifier: 38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
Certificate issuer: /CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Certificate serial: 0198D4A7FD0B2F34B3610349E7DD7ACA1999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl (hash: H2VJAJeolthGXt8h4yex4URnDa1GIZLg2ZlQWpx4JU8=)
2: Q4SQTvELqYETYT6vjRCA2iGLGgc.roa (hash: tzC8sef+XSgDXhot9EyLUIit2vwD1a0sRJU8Ks3S1wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fd:0b:2f:34:b3:61:03:49:e7:dd:7a:ca:19:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382528ab1cd1b6dc73c0b09b67d3e7e3584f363d
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=68210a41adc36076ae3295ea84396b82c8f27b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:14:35:8e:70:22:91:b9:e5:76:45:04:32:
3e:68:39:54:02:62:59:22:7a:d7:24:b3:15:51:2c:
8b:f2:f8:ac:2e:09:82:22:f3:f3:52:e7:8b:10:e2:
08:13:a6:b0:20:f2:73:20:db:24:04:27:96:44:c2:
35:36:85:df:00:18:f9:3d:b0:0b:da:d2:c4:05:02:
6c:67:35:3f:3e:d9:c9:f3:92:f2:2e:84:d0:5d:68:
09:67:ba:f1:1f:d1:a8:f2:b2:c6:59:f1:6c:6b:fa:
aa:35:57:eb:37:66:66:17:a9:dc:bb:a2:81:ef:a8:
8c:3a:d9:ad:5d:99:e6:25:6a:f3:c8:4b:d1:e6:79:
c8:91:92:91:25:31:de:f9:ca:e3:19:84:8b:81:c4:
54:cc:bd:64:89:e8:97:1b:b6:4c:60:2f:0d:e7:04:
8e:80:20:73:7c:dc:d9:ae:6c:8a:3b:42:14:74:9f:
b9:e8:60:74:0e:07:3d:d8:90:69:72:19:f4:1b:3e:
38:c2:7f:86:30:40:b8:9d:cb:73:70:a8:ef:54:66:
36:73:17:8d:aa:9e:35:34:9e:db:69:df:84:cb:ca:
29:de:77:37:67:cb:63:27:5e:a2:3d:ba:10:e0:e0:
fa:f3:c4:77:22:8c:3d:91:ab:a9:da:68:c8:01:c2:
0a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:0A:41:AD:C3:60:76:AE:32:95:EA:84:39:6B:82:C8:F2:7B:91
X509v3 Authority Key Identifier:
keyid:38:25:28:AB:1C:D1:B6:DC:73:C0:B0:9B:67:D3:E7:E3:58:4F:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCUoqxzRttxzwLCbZ9Pn41hPNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/00816a-eedf-4190-bc33-3a02a242f444/1/OCUoqxzRttxzwLCbZ9Pn41hPNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:15:b4:80:12:db:d2:16:e7:3f:a8:53:7d:0d:3a:b9:17:ba:
ab:79:5e:d1:ef:68:f2:69:cd:13:b8:27:7e:0b:b4:4b:3b:18:
34:17:76:17:6c:2e:d4:67:ae:47:1d:c5:af:ad:9d:53:7e:a5:
c9:9d:70:fe:83:66:3e:ca:a8:d1:5b:0c:39:e8:bc:57:b8:e9:
f8:9e:27:25:65:26:df:d4:e8:e5:82:60:42:2d:8d:74:2b:7a:
4b:c3:5b:0e:c1:4e:7c:18:a3:d4:67:58:80:ef:0a:25:0a:f2:
fb:72:0d:90:55:80:46:17:a5:f3:7a:35:a9:da:b7:4a:9b:48:
21:37:91:c0:04:21:3a:df:5c:6d:39:9a:a6:74:bb:d2:80:c7:
d5:e9:44:b4:54:e6:84:1f:ee:f5:9d:fd:9e:10:59:5e:da:97:
df:33:3b:3a:80:ea:2e:d6:d4:15:59:89:e5:17:c5:16:f9:c9:
fa:0b:f3:92:0f:f5:67:70:c0:43:6d:5c:84:f9:9c:f9:3f:7b:
44:50:a6:68:4a:ce:fd:c5:87:da:9c:e7:71:85:1e:90:49:eb:
99:17:36:88:a7:c5:ea:d1:50:25:ca:42:8d:ad:e5:d5:d6:ed:
97:68:4c:9a:04:3a:a4:61:b6:5e:a4:2e:5c:7e:75:82:b2:ad:
ba:8b:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:14 2025 by rpki-client