Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: orEyG/yZCMDrUemlchRBijNPHgbXLDEuR+ZyLAlLzSw=
Subject key identifier: C9:AC:7A:B6:44:A4:63:77:ED:66:1A:20:24:45:4B:9D:2F:C0:D7:0B
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 0198D4728824DC2707E09D8869A22D733AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:02:12 +0000
Manifest this update: Sat 23 Aug 2025 01:02:12 +0000
Manifest next update: Sun 24 Aug 2025 01:02:12 +0000
Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: SOOaKF2fJ4waCLkZk3AdsVKGWbVmmt/T2gW0iK5iu9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:88:24:dc:27:07:e0:9d:88:69:a2:2d:73:3a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Aug 23 01:02:12 2025 GMT
Not After : Aug 24 01:02:12 2025 GMT
Subject: CN=c9ac7ab644a46377ed661a2024454b9d2fc0d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:02:b8:0e:2f:aa:6c:59:2d:d3:7a:9b:71:4b:
a0:4b:7b:12:85:d5:af:19:d2:d3:4d:1a:ad:5b:e2:
cb:7c:b1:21:ed:2f:c6:ab:08:5b:7d:19:92:41:56:
93:7e:5a:b7:bd:52:8e:e0:d6:b8:04:60:76:f8:4e:
0d:9e:a1:78:2f:1a:88:77:f6:29:ed:cb:43:d5:40:
57:a5:8d:d3:15:88:4a:37:d8:d7:9c:57:7c:0f:96:
cb:c8:ab:d2:7a:42:8e:bf:9c:c0:b9:cb:6d:13:b4:
d0:73:2c:a4:f9:22:76:51:4d:3d:7a:1f:72:df:96:
bf:39:e5:00:a2:f3:ab:ce:03:d6:e7:a2:42:75:67:
e1:24:f6:24:79:72:dd:27:69:86:34:4b:da:dc:c6:
18:78:37:31:55:6d:ee:39:d4:90:a1:c4:d3:2d:f3:
df:47:15:ec:96:b4:06:c4:b5:95:e0:b4:3e:e6:91:
1a:d8:50:f4:e8:2a:6c:d2:86:1d:91:b9:46:e6:ee:
29:10:05:39:71:d1:2c:dd:8b:6e:2f:86:56:32:fd:
f4:94:23:7a:b0:e4:78:9b:16:2c:56:e1:60:47:28:
31:5e:f9:ef:97:00:5a:41:4d:96:1f:b9:84:6d:c5:
e4:45:be:75:cc:cd:a8:cf:b8:7e:47:63:f4:5b:6d:
4c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AC:7A:B6:44:A4:63:77:ED:66:1A:20:24:45:4B:9D:2F:C0:D7:0B
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1b:84:94:df:e1:a5:e0:3c:47:67:24:d2:74:73:47:24:98:
74:19:c9:f5:8d:5c:49:4a:ca:f3:39:2d:cf:13:8a:83:b8:7e:
e5:13:d7:a2:c4:d4:22:ac:2b:fa:a1:4c:3c:1c:c4:50:0f:d4:
4d:da:6e:dc:83:99:d9:fb:8b:78:53:b7:fb:85:8b:9a:ba:1b:
d3:a6:62:d8:d6:72:af:5c:d7:b4:e9:bc:cc:da:c9:d8:04:3e:
cf:84:88:f2:26:21:0b:bf:90:19:fc:17:bb:46:f5:b6:40:45:
d9:a7:ed:1a:1b:e0:84:53:2d:a7:25:10:cd:e1:60:2c:53:b2:
43:66:d6:85:0f:b9:69:0d:01:12:0c:e2:6e:18:04:45:26:e4:
5f:61:df:f4:31:ae:4a:4b:68:3f:bb:e3:62:38:7a:2a:a2:b8:
7a:2e:53:5e:cc:5e:86:ef:68:84:f7:4f:5e:67:a6:ae:ab:d9:
d7:b3:40:d7:1e:93:b9:f4:e7:01:10:d3:89:62:13:cf:b0:7c:
d2:8b:a4:fa:c3:da:d2:0e:ea:b7:3c:0a:df:b5:75:ca:40:7e:
d2:86:b2:44:d3:96:ad:67:d0:67:a3:aa:4e:26:35:68:7a:d9:
0a:e3:c0:da:2c:26:cb:6c:97:f7:58:97:e9:ed:05:be:66:13:
d0:3e:d9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:32 2025 by rpki-client