Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
File: oLqoCzEKSu7SwjPP54LE83mmYgA.mft (raw, json)
Hash identifier: uwwdzXN7j8LYdOvKHpNQphNOTxM0ZX18mMIMg14Bjic=
Subject key identifier: 9E:3F:32:F5:D9:DA:DC:1B:1D:B3:4A:22:19:F0:5A:B3:89:B5:3B:F7
Authority key identifier: A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
Certificate issuer: /CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Certificate serial: 0198D73B1CF963C7DFD09EC1CFDF28F130B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
Manifest number: 016D
Signing time: Sat 23 Aug 2025 14:00:32 +0000
Manifest this update: Sat 23 Aug 2025 14:00:32 +0000
Manifest next update: Sun 24 Aug 2025 14:00:32 +0000
Files and hashes: 1: oLqoCzEKSu7SwjPP54LE83mmYgA.crl (hash: lw8QG84X2A/EuSSwSH6xNTmgyEg3CtlTOP/TdBds2hM=)
2: sT1fnBcommpqYG28Wvu_VZnisuk.roa (hash: bgoEmCHH3xYPTJAnecz6TfwkrZtOdQNWaY0Or/vvOhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:1c:f9:63:c7:df:d0:9e:c1:cf:df:28:f1:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0baa80b310a4aeed2c233cfe782c4f379a66200
Validity
Not Before: Aug 23 14:00:32 2025 GMT
Not After : Aug 24 14:00:32 2025 GMT
Subject: CN=9e3f32f5d9dadc1b1db34a2219f05ab389b53bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:e0:46:0f:53:88:31:55:5e:8f:5a:0d:98:
6f:08:8d:c1:29:58:2a:30:b5:55:e0:52:8c:bc:21:
cb:78:49:3d:97:03:f6:ff:92:28:6d:2f:f3:b1:d2:
a8:d6:7b:9a:3f:af:17:19:b2:49:57:f4:db:01:1b:
40:84:fd:e4:64:8d:3e:60:6b:b2:0c:d4:92:4e:86:
0a:f6:db:cb:83:22:fe:55:5f:c9:bd:ba:88:df:cc:
cc:f5:2f:a6:10:13:61:be:c2:a8:86:98:90:4f:05:
9d:56:a0:fc:70:71:11:16:be:19:e6:f4:27:36:b5:
b3:df:6e:00:88:ec:e4:03:58:02:38:f7:33:f7:93:
47:08:32:38:94:00:17:2c:8c:75:12:d3:ab:9b:5c:
da:b7:fb:ac:d2:f4:b7:a0:56:7e:2d:97:78:09:0d:
53:4d:94:54:6e:4a:2d:fd:58:9e:ef:a7:f8:f4:a5:
e1:7d:c6:c9:76:49:7d:a1:7b:fd:3d:89:82:09:14:
8f:a0:61:e9:f9:0f:a9:0a:aa:53:34:0f:13:c5:e6:
64:83:da:6b:9a:7d:f4:2c:fa:f8:66:50:0e:cd:dc:
02:7f:00:cc:ae:50:a3:d6:ab:d3:c8:97:01:70:5a:
b3:e4:4c:f8:d9:3a:62:cc:b7:5a:6c:69:1b:16:d3:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3F:32:F5:D9:DA:DC:1B:1D:B3:4A:22:19:F0:5A:B3:89:B5:3B:F7
X509v3 Authority Key Identifier:
keyid:A0:BA:A8:0B:31:0A:4A:EE:D2:C2:33:CF:E7:82:C4:F3:79:A6:62:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLqoCzEKSu7SwjPP54LE83mmYgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/888915-6987-4102-ae4d-02d54812cc6e/1/oLqoCzEKSu7SwjPP54LE83mmYgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:82:94:5b:67:2b:ed:b6:88:e8:0e:37:f3:bd:4a:25:a2:50:
fd:70:bf:41:2c:9c:fd:63:9e:fc:97:bb:0c:2d:59:1c:f0:a5:
11:65:76:92:66:ef:94:c6:8f:79:8d:13:e2:8b:88:0e:f0:44:
fc:eb:73:5e:7b:63:02:6d:34:83:ef:f8:9e:a2:a6:5b:17:bb:
2e:20:67:55:b3:e6:01:17:dd:be:ab:c6:a1:59:9e:e8:d5:7b:
6e:a8:54:a0:de:23:2c:b0:f1:ff:45:93:c0:5a:18:c6:20:bc:
b6:e2:6c:71:49:9b:85:1c:f3:87:42:16:07:6c:29:bb:7e:29:
67:00:3a:30:40:d3:32:f7:60:9c:91:e0:6c:29:c3:b1:c6:ca:
94:81:2c:87:5e:f0:74:82:a4:7f:c5:fa:52:74:d4:f2:0d:f7:
0a:67:0b:c2:01:9b:25:f1:b0:e6:08:85:c3:f7:bf:d0:af:87:
56:28:7a:75:50:18:55:bf:0e:e3:08:69:b5:19:ba:7f:60:d3:
21:7e:fb:61:21:47:80:a1:ed:d8:69:2d:0d:fa:9e:5f:9d:84:
97:af:9a:9c:7e:b5:04:bc:eb:10:9b:71:65:bd:a9:6b:97:d0:
37:8f:3c:25:97:83:70:bd:19:d7:80:72:44:16:50:3e:94:32:
0b:3e:cb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:41 2025 by rpki-client