Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier: 2R8ZtCJZwNRtqQ304tCAud2va8V5GdOleyWxmHw8aps=
Subject key identifier: CC:AA:7E:21:8F:10:64:81:91:2A:FB:11:4B:A6:A4:DF:85:D1:EB:E8
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 0198D6CD95B17484F5CB7E87F4DACF638574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: 7z3of+fVkQBnyoF/SFwzGL1JUruB08OJiFSwsSJWd3k=)
2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:95:b1:74:84:f5:cb:7e:87:f4:da:cf:63:85:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=ccaa7e218f106481912afb114ba6a4df85d1ebe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:7d:51:55:f8:75:c5:a5:fe:69:40:91:8b:
a7:13:11:97:9c:4b:a1:95:ec:30:a7:b2:4b:2c:4c:
0c:ec:11:7c:0e:62:24:7e:42:ac:f0:5b:59:76:e2:
ed:eb:35:ea:54:12:78:21:b7:a5:95:55:5e:a8:67:
92:9c:b8:9b:16:5d:e2:2e:fc:ff:fe:1d:52:3e:27:
a9:b7:55:85:fe:45:c8:48:1b:53:a2:26:e8:9f:96:
4c:15:f9:94:eb:d3:0c:bc:d2:74:8d:e6:77:c1:21:
bf:13:1c:17:15:54:3d:47:af:03:ab:ce:87:20:f7:
ba:f2:e5:eb:8f:4f:d6:13:01:7e:59:62:68:06:26:
f5:fa:f1:cd:ae:ab:99:a5:f0:13:5f:df:15:e1:c7:
67:72:79:5f:31:db:89:4c:86:23:a7:17:d1:a8:37:
41:01:37:f8:84:a6:a6:01:db:94:8b:ca:23:79:59:
ad:09:e9:01:bd:e2:15:7c:25:c3:fa:33:9c:5d:90:
d8:44:a3:35:64:2a:2e:8a:00:81:00:95:f6:70:a9:
0b:db:aa:49:53:55:42:06:f3:69:d7:85:af:61:5b:
53:fb:e6:05:e1:13:1d:95:2e:00:4a:5d:9a:cd:b9:
84:95:9e:ac:73:06:ec:f8:ff:99:46:92:b0:1b:1b:
19:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AA:7E:21:8F:10:64:81:91:2A:FB:11:4B:A6:A4:DF:85:D1:EB:E8
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:63:02:9d:d8:14:ca:ec:00:d8:e9:6b:92:da:65:3b:60:56:
f7:9a:92:ff:62:02:98:2c:94:65:53:1d:bf:79:39:5b:e0:0f:
de:78:f9:2c:b8:5b:01:5b:8a:fa:9c:21:7c:cf:ef:79:e1:21:
48:b7:e7:db:ce:06:24:a2:44:b5:f7:de:26:ee:2c:74:fb:8f:
5f:95:5d:55:44:e3:6b:53:19:ac:9a:01:7b:4a:29:e1:4d:94:
50:52:57:3a:b0:bc:48:cf:f7:48:19:38:83:f0:6f:98:11:e5:
e0:fb:09:c4:52:ee:34:2e:a8:2a:bc:f4:d9:94:2a:72:92:43:
50:19:dd:41:2f:c7:63:65:af:25:22:b0:f5:94:f6:6d:2e:79:
0b:90:bb:0d:c1:ad:e1:d6:d1:e9:a8:df:9e:07:3f:7a:b7:4e:
0b:e7:d4:68:02:57:2b:62:42:f4:0c:5b:82:24:9d:04:c8:d2:
cd:89:29:45:1a:a7:96:9d:6d:0e:e7:30:00:d0:d7:fa:62:cb:
f4:48:88:d8:e0:8b:8f:d3:7d:8f:13:71:0d:84:e8:07:7a:7c:
51:9a:55:9d:f5:a1:23:f0:44:43:79:e7:8f:0c:d6:12:cf:24:
16:a9:dd:45:86:11:3b:f9:4f:fb:68:af:e6:28:34:24:a6:28:
c4:de:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:39 2025 by rpki-client