Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File: o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier: J4uOvydXsFmVwl5H9gW8y2SjNzDe2t6qbKBymJBhE8I=
Subject key identifier: 57:B2:AA:3C:17:99:B9:2E:C5:79:53:6C:57:8A:C8:8A:A6:86:FE:70
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer: /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial: 0198D705A7BF5EE456BFC64896C19FC32E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number: 158D
Signing time: Sat 23 Aug 2025 13:02:08 +0000
Manifest this update: Sat 23 Aug 2025 13:02:08 +0000
Manifest next update: Sun 24 Aug 2025 13:02:08 +0000
Files and hashes: 1: Wl5iM62c4902uaF6CR15o54SPrY.roa (hash: 9nSLjWOMe+TkmfFAZIjgcyogPeRigHrBzwxJ+UFPC0s=)
2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: X9lPMzh4Wuy99aBRPF2ySw6gqYUVHKoUnDWKmS/O4ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:a7:bf:5e:e4:56:bf:c6:48:96:c1:9f:c3:2e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Validity
Not Before: Aug 23 13:02:08 2025 GMT
Not After : Aug 24 13:02:08 2025 GMT
Subject: CN=57b2aa3c1799b92ec579536c578ac88aa686fe70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:86:d8:84:21:cb:d8:25:4c:76:29:72:ab:eb:
e5:34:76:48:1e:c0:9e:c2:4e:2b:31:f1:21:47:2d:
fe:25:d6:45:8d:9f:c4:a0:00:b5:9c:c1:73:1b:3e:
fd:54:cf:19:35:b4:2f:41:1d:11:b8:f3:4a:1d:6c:
44:d8:fc:98:19:9d:e2:4e:dc:37:9f:c3:9b:9a:a7:
8c:d4:54:55:33:bd:e6:61:99:11:80:43:4b:af:8f:
f3:9d:1f:a0:ab:b7:99:d3:f6:a1:9d:6b:de:ee:ca:
2d:f5:ff:c4:79:bd:8c:d5:03:e8:e3:6e:e3:8b:7c:
ad:df:2b:52:43:78:f8:ed:f0:bd:f9:4b:73:85:29:
b1:4f:7e:8b:3a:17:e6:b8:4e:d4:f4:65:43:61:6d:
62:e8:c4:a4:56:ea:ce:9f:2e:f3:54:83:65:72:1c:
75:73:9e:32:48:7e:d3:a3:77:13:30:92:33:0f:a6:
0a:e6:9e:47:46:48:d8:93:b5:29:83:77:1d:e9:42:
9d:5b:86:14:86:5b:3c:90:19:24:d2:dd:79:65:4d:
3a:c9:62:90:41:22:78:ab:86:b0:d2:3f:a9:c7:2d:
63:23:3c:22:a0:74:b1:35:0c:d3:8f:a9:30:d2:99:
ec:49:94:53:72:dc:96:8d:bc:e6:02:38:a9:aa:f2:
89:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B2:AA:3C:17:99:B9:2E:C5:79:53:6C:57:8A:C8:8A:A6:86:FE:70
X509v3 Authority Key Identifier:
keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:86:01:c7:28:e4:1d:f0:eb:68:b2:98:54:95:77:0f:7d:26:
a5:ea:2b:02:60:51:e4:e8:4d:8d:49:dc:ee:1c:e7:f2:6d:6b:
e7:75:29:fc:a2:3d:4f:77:89:0e:ae:12:f7:ee:80:20:fb:e5:
d0:67:86:ac:eb:1f:0e:49:0e:7f:5c:5e:58:8d:ed:90:ce:05:
5d:3d:38:a2:3e:c6:cb:a7:09:1a:13:43:b6:90:a3:53:32:a2:
cf:23:b0:64:94:d1:e9:65:46:c3:60:c9:8b:15:59:33:5c:3c:
2a:30:4c:e7:af:8d:cc:15:8d:c5:d9:13:99:47:92:e8:4c:a8:
6e:5b:e9:c0:d9:0a:61:16:1e:c6:b1:04:b2:c3:8e:be:90:1b:
47:54:c2:46:0d:d9:da:e4:62:de:f5:69:c8:fa:56:92:e5:30:
82:51:51:2f:45:71:48:5a:8b:bb:73:34:81:23:3f:10:ee:04:
22:83:00:fe:b7:90:57:ba:72:c6:c2:5d:05:99:ef:00:ec:bf:
03:99:39:d3:ac:6d:4f:32:81:5c:86:69:85:2e:0e:b1:10:4c:
53:fa:b1:36:35:0c:3f:b9:b8:90:13:dd:3a:31:72:5a:6f:a5:
2b:8f:aa:c2:d2:66:d3:4b:f9:28:33:62:ea:e2:d2:a2:99:88:
53:ea:52:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:10 2025 by rpki-client