Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: MMNdUC6zFn6V1MNGRUJBNySw/ti40N0L7RIGw7cXa0g=
Subject key identifier: 08:AF:44:45:D4:9F:77:92:F8:BD:53:89:54:32:7D:16:85:66:91:ED
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0198D7A916BE5E4292E2C37BAB6130914C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 16:00:39 +0000
Manifest this update: Sat 23 Aug 2025 16:00:39 +0000
Manifest next update: Sun 24 Aug 2025 16:00:39 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: Ai24GeHmhEdLxGTcB1S+Uu/n1FrLDg41lK8RryFH5FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:16:be:5e:42:92:e2:c3:7b:ab:61:30:91:4c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Aug 23 16:00:39 2025 GMT
Not After : Aug 24 16:00:39 2025 GMT
Subject: CN=08af4445d49f7792f8bd538954327d16856691ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:93:70:b0:83:4d:b0:8e:84:2e:52:5f:83:3f:
fe:fb:b7:39:ca:55:3b:c1:4e:32:c1:ab:cf:9a:23:
57:1c:ca:7b:0f:0d:f5:b4:fd:9e:36:1b:84:a8:e5:
44:b2:3c:18:bc:31:76:b1:ad:6b:1f:1d:3a:84:b9:
f8:d5:11:0c:4c:3c:67:79:8c:17:bc:7c:6d:41:59:
65:d3:2b:12:bd:98:87:7a:77:6c:dd:e4:30:f5:1e:
bc:5b:37:2f:fb:2d:ee:d2:f7:98:55:0f:ae:6e:79:
dc:4c:e4:d7:91:a3:22:33:46:02:b5:73:e1:04:15:
56:82:23:16:42:1f:a7:d5:65:79:c7:6a:88:44:0d:
76:74:fd:16:88:45:c5:89:29:73:c3:a0:2f:01:6e:
af:e5:e1:07:e3:cb:a7:15:d2:8d:c1:69:41:ed:d3:
fd:96:95:f5:16:97:03:14:48:6b:ee:64:ff:fb:03:
ab:ca:b0:cd:38:6a:ad:0e:ae:fd:10:b2:21:b9:49:
6f:12:1a:1f:95:4e:37:8f:3b:e8:64:ba:70:db:5a:
b8:ec:10:3e:88:60:54:ef:be:59:e6:2a:c0:ed:2d:
9f:82:89:8f:cb:a3:1a:ca:d3:9c:09:b6:35:8f:00:
e3:3d:69:fb:eb:12:18:d1:1e:1b:1f:cb:86:42:9c:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:44:45:D4:9F:77:92:F8:BD:53:89:54:32:7D:16:85:66:91:ED
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:8b:09:c4:27:9b:a4:2a:62:a8:1a:47:e0:cd:f5:f1:07:01:
c6:15:8b:94:bb:5a:15:20:a4:bc:e9:90:c1:f7:38:08:89:b4:
c2:6b:b1:f1:81:67:8d:aa:cf:6b:9b:c6:e3:90:17:ca:cb:ca:
e6:f5:8a:71:40:2c:99:0e:f8:ea:6e:a9:dc:be:db:39:be:ac:
3b:bc:61:3c:67:f5:6e:29:82:95:e6:51:6d:76:8d:06:a9:85:
35:86:75:39:a8:ca:d4:2f:87:c6:2e:ca:5a:5c:9b:15:d8:ab:
aa:ce:b6:d0:27:64:2f:bb:57:24:d1:87:dc:48:a0:dd:2e:b8:
e3:d8:56:d6:92:42:08:54:c0:ce:3f:fa:38:45:2f:46:63:68:
53:80:e8:78:68:f1:71:f3:56:d4:bc:b7:5d:80:27:b7:cd:1a:
21:00:85:35:1c:9b:f1:9b:29:8c:e6:47:36:bc:22:28:93:91:
45:07:5e:2f:ca:d3:b3:3d:f2:51:fe:07:60:f6:02:83:51:d9:
e7:17:9f:8f:fb:ef:74:fb:1f:47:90:ed:2f:b2:1b:53:21:ed:
52:01:77:0b:50:17:7c:c7:5a:d2:2c:40:e6:64:0e:dc:e5:42:
40:46:8a:39:ec:29:c9:69:cc:22:10:59:8f:e5:cc:c4:71:27:
62:f3:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:55 2025 by rpki-client