Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: yLh/nYeYSaFmvfy5TXAxwmZkyMX1Y+sVw97iCD5z0zw=
Subject key identifier: B4:FE:6E:0D:5A:90:A6:25:CB:4C:21:E5:A6:BE:32:A4:DF:52:D1:89
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0198D4A7CDF5D11BABB7835C9D1758011D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:23 +0000
Manifest this update: Sat 23 Aug 2025 02:00:23 +0000
Manifest next update: Sun 24 Aug 2025 02:00:23 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: 0PN2t3e/ZC46KlBWpqQVXFK6qAnfOlokGBCOKcfd5RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cd:f5:d1:1b:ab:b7:83:5c:9d:17:58:01:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Aug 23 02:00:23 2025 GMT
Not After : Aug 24 02:00:23 2025 GMT
Subject: CN=b4fe6e0d5a90a625cb4c21e5a6be32a4df52d189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:f6:1c:fa:2f:df:28:e8:82:9b:0c:f7:2d:
ab:a1:84:3a:cd:12:e4:67:2f:91:8b:b1:58:df:21:
57:30:c4:77:1c:f2:5d:c5:75:c0:9c:77:4c:25:53:
e1:69:8a:15:1a:b9:23:22:1b:56:0e:e2:9b:01:33:
27:c4:a0:77:bd:1a:31:da:cb:0f:9f:f1:fd:33:b0:
ab:df:e6:e7:c8:c4:7c:04:42:39:d8:3d:7a:7f:a3:
37:97:11:0c:52:32:92:c5:07:63:d7:f4:5e:e4:58:
5e:21:69:8d:1e:47:90:63:ef:bb:d4:42:fa:03:a7:
50:aa:0f:bb:56:b7:6d:25:95:7a:11:f8:f4:7b:b8:
e9:5b:39:37:e8:65:4e:33:f4:0e:a6:72:1e:45:62:
f2:7f:ec:11:01:09:93:79:6b:8d:9a:fe:b8:d3:43:
98:89:b3:4d:7b:70:6c:74:26:c3:e8:19:53:3e:ff:
a2:ab:55:85:9c:58:70:f8:e9:83:50:e8:da:f2:df:
98:72:72:3f:31:14:7c:a0:94:e7:bd:4b:5f:28:76:
9f:b2:17:6a:f5:ce:4c:5c:af:1c:57:1c:73:8a:41:
c2:91:e2:37:84:32:39:3c:3d:da:2a:3f:25:38:cf:
38:da:81:60:35:8c:60:3d:85:00:8f:a0:a2:17:f5:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FE:6E:0D:5A:90:A6:25:CB:4C:21:E5:A6:BE:32:A4:DF:52:D1:89
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:17:75:23:87:a7:55:d5:15:ab:6c:b7:e6:6b:52:a2:97:3a:
90:ad:40:62:c5:35:cf:75:4c:73:70:a7:7f:d6:e5:89:a9:9a:
bf:4e:78:da:7f:b6:e7:aa:9a:7d:14:2c:a5:80:40:1f:2f:b0:
43:12:06:f4:20:ef:f5:c7:85:63:74:2b:23:47:f0:95:f8:fe:
aa:77:b5:8f:1b:10:8e:24:fd:79:4a:30:65:64:dc:51:85:b1:
25:eb:40:d0:ad:8e:b5:8c:6a:cd:95:0d:60:5f:c1:b2:5b:7f:
2f:ba:e6:1d:77:d1:e9:17:82:fe:c1:80:28:78:b8:cb:91:ab:
b9:1d:90:ae:40:fb:73:0e:99:f4:40:5b:40:3c:aa:43:81:0a:
b8:12:69:88:23:99:3d:4b:a0:2c:e3:d6:52:1f:34:fe:f6:ee:
d2:93:4c:b4:db:72:e2:0e:54:6e:1c:e6:96:ea:be:ba:1f:63:
c3:3b:85:f3:d5:27:52:62:c6:09:f2:93:98:ab:74:e2:18:31:
41:55:40:26:bb:72:bc:3e:77:2c:03:f8:37:c7:d0:d9:0a:92:
4f:dc:b3:3d:57:b7:c1:c0:7a:bd:66:24:ed:6b:d6:d2:44:18:
ec:c8:d6:8f:0f:a3:2c:3f:2b:b5:38:1f:29:89:af:f9:a5:9c:
87:7e:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:45 2025 by rpki-client