Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: gwcpDEXJHiIvyqdnUtDiKD92Qlp9Na+PQqE0J4X/5EU=
Subject key identifier: E2:70:53:AE:96:A6:7B:74:A1:5C:15:BB:48:9E:4A:EF:A5:CF:0B:B0
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0198D5156099384DF52B331D12C8DA3A7BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: Ced+/CCYrO4/V+bIKwDk3DYDLBHgxuZYT6ANymckBWo=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:60:99:38:4d:f5:2b:33:1d:12:c8:da:3a:7b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=e27053ae96a67b74a15c15bb489e4aefa5cf0bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:fa:24:6e:4d:bf:93:f6:b4:05:df:16:99:
aa:3e:44:a4:8f:23:e4:03:c4:fd:cc:6b:f6:85:b6:
af:3b:1c:f4:8a:a6:9a:35:4a:96:c7:c5:e3:53:16:
9e:8e:f9:e2:0b:0f:a1:6a:17:6c:40:55:9d:4f:94:
cb:96:4f:91:cb:14:81:27:57:65:1a:0e:dd:82:95:
49:0f:61:17:53:99:2c:65:1c:31:34:77:3c:63:8d:
98:99:13:00:9a:75:44:b7:55:90:c1:d0:90:bf:5f:
d6:84:25:02:e9:b0:1c:32:62:c5:18:c8:0e:4d:bb:
19:99:c1:6f:d7:75:8b:7d:a9:81:b6:f6:b3:b4:c1:
82:95:63:9b:e2:af:2b:f9:25:26:4c:dc:44:ea:3d:
54:0d:86:f9:60:da:88:f5:43:21:dc:50:64:9a:6f:
fe:52:ea:80:2b:2b:df:25:f4:ad:bf:a0:3d:d9:cf:
56:d9:a9:38:98:a2:f5:d5:d5:ec:21:2b:8d:a0:3a:
e1:dd:37:bf:9d:45:93:9b:dd:3b:bc:38:30:3a:df:
b4:c6:5c:f4:e2:7d:d2:bb:b9:66:d8:57:45:8b:19:
44:16:0a:7c:57:36:7e:55:e1:6d:a8:35:8e:05:86:
c3:5f:4d:5e:d6:c6:d9:74:f7:93:c0:30:9d:24:6e:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:70:53:AE:96:A6:7B:74:A1:5C:15:BB:48:9E:4A:EF:A5:CF:0B:B0
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:67:b1:53:66:0e:13:5e:0b:22:78:e4:cd:1a:e2:ac:fc:ad:
1a:30:df:47:b1:68:1f:c8:af:ea:9b:8d:59:09:2c:b0:f0:eb:
f6:0d:99:c6:14:57:9d:4d:e2:b3:f3:09:d1:65:9d:fe:25:1a:
49:1c:59:0c:61:1f:7b:fe:e8:ca:71:f4:f2:4a:4b:b4:89:43:
01:31:e9:0d:c3:66:0c:9a:12:9b:5e:ea:bc:71:7d:ed:36:b2:
69:a5:31:97:41:ae:a5:ea:ca:c2:86:31:2a:8c:10:d3:45:7b:
c5:9c:16:a2:b1:c3:a8:3b:76:6c:42:7a:d6:ed:84:9b:62:db:
0b:e2:76:8d:67:fe:d2:b8:33:dd:50:1a:e4:ea:2f:c8:42:fe:
40:b5:a3:91:03:3f:9a:6a:e3:88:42:b1:21:3e:b4:bb:20:06:
b9:76:31:55:c1:84:23:53:0d:e4:7f:aa:1f:37:27:3b:09:32:
70:5e:be:47:7b:66:96:47:7f:59:1a:65:4a:42:ae:6c:c0:c1:
39:a5:66:64:8f:a6:2a:83:f4:95:79:bc:90:4b:09:e3:4f:e9:
84:6d:f8:c7:2f:ce:e3:46:e3:21:b0:cb:3a:70:ad:b0:54:80:
65:86:70:72:90:7d:2e:83:73:37:9b:2b:ea:72:75:e7:63:93:
91:a4:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:50 2025 by rpki-client