Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: /yu23cZd8bsrQ4DSZ+XG15nbho4NuxanITJMTSRQspo=
Subject key identifier: 47:63:00:2A:28:10:D1:05:83:21:66:04:34:FF:9E:D1:AB:91:89:66
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0198D6CCDA23AD7E8FEE3B3665A20D105CE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 12:00:05 +0000
Manifest this update: Sat 23 Aug 2025 12:00:05 +0000
Manifest next update: Sun 24 Aug 2025 12:00:05 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: uZOLZM0R4aFztQejElfz7Rpby8tkL/kjbCh5dnOeREk=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:da:23:ad:7e:8f:ee:3b:36:65:a2:0d:10:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Aug 23 12:00:05 2025 GMT
Not After : Aug 24 12:00:05 2025 GMT
Subject: CN=4763002a2810d1058321660434ff9ed1ab918966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:9c:bb:c7:8e:0e:47:d7:50:42:81:e9:77:
38:7a:7e:ab:b2:00:23:11:e4:9f:0c:ac:b0:36:f3:
3e:42:64:32:43:bc:9e:e3:55:8c:7b:1a:a4:42:bb:
40:de:01:94:95:54:49:52:2a:a3:0e:3a:1c:a7:d8:
0c:87:4f:14:3a:2b:32:82:c1:57:62:ef:b7:c7:5d:
0e:9f:38:61:64:d5:87:7f:82:72:b3:db:2d:7b:29:
3f:1e:d0:7b:80:52:4d:26:5f:14:6b:70:1e:3a:d8:
2e:bc:4b:84:ab:f7:90:76:40:d8:7c:9c:85:fb:c2:
e3:50:c5:6b:f8:74:5f:e1:2b:f9:79:0a:0d:65:80:
2c:c5:98:bd:e6:b4:b9:22:75:89:d3:d1:a8:d3:dc:
16:83:02:63:27:30:a5:10:e5:64:d0:f5:e0:ad:84:
9c:6f:6b:1d:ef:6f:04:53:bb:96:25:60:f9:39:99:
42:cd:d8:c0:6f:c9:66:9b:8c:5f:e2:5b:3b:48:1e:
72:66:f5:25:66:a4:2e:de:8b:ec:64:b1:4f:df:54:
9f:3f:db:44:86:07:f8:e5:f8:d6:34:b9:77:fd:05:
7d:1b:02:97:48:6b:ad:fc:85:cc:19:0a:ec:1c:a7:
f9:76:dc:9a:17:8f:3c:89:b7:fe:63:71:93:a8:a7:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:63:00:2A:28:10:D1:05:83:21:66:04:34:FF:9E:D1:AB:91:89:66
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:02:c8:cd:8f:00:7d:ec:dd:7c:9b:fd:de:19:9c:af:c1:63:
65:67:b6:2e:a5:d6:ed:f9:cd:29:16:ca:84:73:8f:6c:5b:f5:
12:cd:70:3d:5d:9e:2b:10:65:67:08:d9:fe:ab:6e:b7:f5:b7:
02:dc:ee:6a:76:90:db:fa:93:a6:e6:d2:be:0d:95:07:92:21:
6f:d1:14:d9:b9:25:7b:b8:79:3f:bf:3c:ec:72:eb:4c:9c:6a:
d3:12:17:0f:be:0e:10:08:56:08:5e:67:a3:2f:e6:f8:68:74:
d9:f8:42:86:ef:28:40:af:d0:cc:46:35:dc:32:9e:dd:19:f3:
74:d3:25:77:68:54:55:6c:8d:43:cb:25:07:c8:28:b9:7e:1c:
e2:65:fb:34:cb:8d:dd:a2:4c:c4:bb:78:79:9a:53:3d:98:78:
c6:24:89:ac:67:5d:9a:48:54:0e:ec:03:13:2e:e2:82:14:3d:
23:11:c9:00:92:45:37:9f:b6:1d:ea:dc:cd:9e:ea:ca:79:cc:
c4:ee:57:0f:70:77:cd:e7:1a:1c:e2:6b:77:71:09:8f:b8:27:
46:df:3f:c4:62:78:de:0f:f9:d8:89:ff:20:85:12:ff:3d:36:
c4:66:d0:24:6b:ec:20:c7:9a:68:77:bc:ef:29:36:e3:f1:93:
87:86:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:10:43 2025 by rpki-client