Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: 7W+TsC4cxy56cxH/BGAVGNA0sDemBgBQ+/TeyF4ppJ4=
Subject key identifier: 00:C7:06:47:2C:23:64:EC:00:E8:E1:5D:F5:23:3D:D0:6B:CE:45:73
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 0198D54DCE853F555D01DE45E5F60465ACBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: sj1DjWrWEiZeG4yfE+lcaxqjXfGf6B2N/JQIkn6gBJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ce:85:3f:55:5d:01:de:45:e5:f6:04:65:ac:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=00c706472c2364ec00e8e15df5233dd06bce4573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bc:62:48:74:3f:1e:27:21:8b:28:49:f5:7c:
86:a2:de:0e:7f:66:b7:42:a2:8b:28:98:c0:05:a3:
7e:a3:bb:ae:87:86:7a:6f:67:a4:6e:07:17:3b:e3:
6e:a0:bc:0e:d6:50:c6:22:42:52:d9:12:65:aa:65:
b5:7d:cb:32:2b:7e:76:13:10:13:f9:9d:f7:a2:3e:
e8:7c:c6:42:77:f8:3f:88:8d:29:12:a9:7d:10:65:
1b:55:e2:bf:6f:85:ba:0e:94:37:2e:d0:c4:94:70:
35:b2:dd:5f:5a:77:c9:7a:3d:2a:8d:bc:3e:b5:2b:
08:02:ab:9d:d8:ba:9e:17:df:1b:97:bd:2e:db:9b:
59:27:ec:f8:85:77:99:e9:64:81:12:59:41:0b:e3:
49:a2:e6:0a:b0:eb:fb:1d:d6:e7:40:eb:9b:cd:71:
9c:05:19:07:f3:55:12:3d:ab:14:98:db:90:9f:5d:
74:76:91:cc:7b:64:a9:30:14:ac:ed:fe:89:6e:33:
ac:0e:cd:d2:8a:d3:e2:19:e2:a0:b7:eb:45:4a:d3:
ee:1f:7a:fd:83:b6:a6:32:ab:aa:fd:07:58:c7:1c:
b5:4f:b9:a6:c3:21:1c:49:3e:fc:06:eb:a0:23:50:
c9:df:a3:7c:1f:d9:c7:b9:7e:03:ef:c0:38:96:c7:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C7:06:47:2C:23:64:EC:00:E8:E1:5D:F5:23:3D:D0:6B:CE:45:73
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:94:70:26:ea:b1:7f:8b:8b:18:ed:3f:01:e3:76:96:ca:
a6:7e:ec:a0:c1:78:82:96:93:7d:ab:64:fe:4f:76:66:65:0b:
56:fd:4e:1d:13:c4:41:0d:6a:5f:51:99:a4:82:06:d8:a4:df:
ef:96:af:a6:e4:58:76:7c:0b:3c:ba:71:4b:e3:cf:17:a5:92:
6e:9a:28:e2:4c:16:b5:db:00:43:46:15:80:a1:ca:0e:fb:e1:
5e:c1:04:36:f2:fb:08:14:6d:af:31:01:0c:e5:e5:de:b9:35:
c2:31:46:cf:d0:35:11:4a:b5:1a:41:80:cb:cf:15:7a:7e:11:
fd:a8:62:b4:6c:71:f7:6a:31:ae:6c:0c:e4:c6:ca:5f:2d:95:
a9:79:45:33:32:5e:19:4f:09:53:f4:eb:08:e0:f5:7f:a4:eb:
62:11:4d:2c:6d:ed:28:07:ff:12:2b:69:41:30:56:37:62:c7:
5c:92:08:f9:43:52:0d:5b:15:31:e9:28:5a:a8:44:34:64:7e:
f9:44:15:2b:33:88:ca:e8:52:18:8c:a1:36:d3:4c:ed:e3:cd:
b5:6b:42:42:1c:c6:65:3d:34:11:ef:e6:bc:58:4c:0f:08:9f:
18:06:ee:b4:ca:43:fa:b2:12:94:e6:4f:73:b9:e9:b3:23:0f:
99:b8:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:05 2025 by rpki-client