Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: KeEJ7+FH1YRbsUaNFbRucp/szzylJ860XuuBgQLTE04=
Subject key identifier: 01:43:F9:A5:80:3B:44:85:5E:42:D2:EE:BA:FD:68:68:FE:EE:D3:BF
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0198D54E1EB92FFF04CE82D201A00C415EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:02:03 +0000
Manifest this update: Sat 23 Aug 2025 05:02:03 +0000
Manifest next update: Sun 24 Aug 2025 05:02:03 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: 7F423+sd63Pw4pA/yht8NcJpczfsDhiWRAIEFHKSC6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:1e:b9:2f:ff:04:ce:82:d2:01:a0:0c:41:5e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Aug 23 05:02:03 2025 GMT
Not After : Aug 24 05:02:03 2025 GMT
Subject: CN=0143f9a5803b44855e42d2eebafd6868feeed3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:af:a9:fc:e9:48:72:1d:c8:b0:2d:07:71:
41:f1:25:ad:b7:9c:5f:32:39:ff:10:35:5f:d1:05:
71:6a:c1:dd:50:07:f7:aa:3d:6a:5c:b9:5c:c7:2b:
cd:08:d0:e4:ab:3b:49:94:41:63:fa:5f:97:0c:94:
4b:66:18:7d:85:2f:e1:02:da:3e:d9:4e:19:f4:d0:
78:84:e4:6a:d9:d6:a1:5e:6a:fc:cc:ef:d7:ec:a1:
71:36:9f:85:ca:39:f8:bc:09:13:51:e6:27:d4:0f:
4c:02:52:8d:10:b6:84:67:87:26:aa:cf:a9:f5:93:
87:e9:b6:63:2a:8e:0e:9a:3e:b3:74:f8:98:a4:b3:
26:11:a2:70:69:c5:e1:9b:be:fe:ff:f4:80:f1:ca:
d1:35:d8:cd:50:7a:00:5c:a1:86:81:97:14:ee:d0:
2f:43:38:e8:ad:ce:92:68:80:5d:95:f4:e9:f8:3c:
68:40:66:82:20:b4:44:1c:c4:f6:40:d1:b2:af:9b:
9a:3c:8a:22:28:4a:43:ac:10:35:b5:5d:1b:c1:22:
31:0a:af:73:d9:3b:3e:c0:1c:9e:04:8d:65:16:5e:
5f:06:7a:fe:05:d4:35:3a:49:c8:40:d9:26:39:8b:
16:a8:8f:fe:09:c5:27:b3:9e:88:f5:bd:10:ee:4e:
74:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:43:F9:A5:80:3B:44:85:5E:42:D2:EE:BA:FD:68:68:FE:EE:D3:BF
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:e2:b0:c2:88:ce:d6:33:db:b4:e6:1a:86:bc:53:01:e8:
99:1b:99:d1:ca:87:d6:07:bc:a5:b9:f7:04:d1:02:fb:c7:60:
73:96:71:9a:41:52:bd:f8:68:d2:74:06:c8:89:8f:46:1f:b8:
43:73:d3:04:83:f3:31:79:80:e7:22:b6:59:d6:5a:bd:26:20:
af:6b:0c:96:80:cc:85:16:17:e3:f6:0d:d7:e9:cb:94:a8:a7:
f1:69:18:f1:1e:73:0c:33:45:89:61:21:c4:b0:be:21:1c:ef:
62:a4:24:65:77:2b:b4:fa:68:84:e8:66:29:3b:58:f4:09:cd:
29:8c:a2:2b:e7:f6:4e:6e:07:69:95:ad:05:7d:e3:45:70:b6:
ac:1d:27:5f:17:3f:d4:6a:94:c5:ee:b4:7e:41:3d:4a:59:92:
1d:d4:22:e0:42:33:22:33:2b:2c:26:27:0f:2b:28:9a:68:83:
4a:f2:21:ed:d7:94:f7:d2:20:1d:9f:9d:f8:dc:a2:b4:82:ea:
43:87:1d:c0:e6:07:2d:d4:67:c1:9e:7c:6f:0a:d4:a2:e7:ff:
1e:52:eb:8e:7e:da:be:f6:e8:01:5e:9d:c3:b7:b0:da:ce:f9:
9a:9e:e2:c8:f1:3c:65:e4:d9:d5:99:cc:5e:32:b4:6a:35:d9:
91:41:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:48 2025 by rpki-client