Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
File: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft (raw, json)
Hash identifier: zK3f54MsGC4sTl4yXqCrHUYQ2wfBNyf6xLeGayKFPq8=
Subject key identifier: 96:F6:AF:EA:1F:AE:A5:D8:16:3F:A5:39:58:23:AC:68:CD:BA:E6:F7
Authority key identifier: 70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
Certificate issuer: /CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Certificate serial: 0198D5833C1CBD3BDCB8228306F408D6585F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl (hash: G+apB40aWkQDjwvG6Up70RvDthNW4yAb8TFTGQ4ii7g=)
2: hR1_ZEXfbdX4pGc2ctPKXHrqf78.roa (hash: ObK4r8CGHqPQX4CfItMJydsCSmFEvL3F0L64naX6VJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3c:1c:bd:3b:dc:b8:22:83:06:f4:08:d6:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70ef95d2cf0e7d84058b528e7902d60b403d7b76
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=96f6afea1faea5d8163fa5395823ac68cdbae6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:72:6d:d6:8f:5e:d3:19:59:3b:3a:d5:1b:
d9:0e:1e:05:d2:2b:84:0f:36:de:c0:37:dd:c3:c1:
91:17:23:06:c2:ad:04:4b:77:86:64:5e:bf:bf:d9:
52:76:e7:46:84:a2:a6:bd:3f:ab:2a:c2:3d:0b:86:
fb:56:e8:f6:92:c5:f6:b9:af:05:8e:ac:f3:e8:66:
5e:8e:42:87:b1:e9:0f:4f:d7:d3:97:bc:e6:8e:23:
7a:2d:4d:c9:21:42:9b:81:c3:59:4b:a0:93:26:c7:
a7:89:26:93:3d:aa:9f:3c:d0:32:f5:17:04:fc:22:
2c:b9:62:9e:46:29:45:0e:55:07:13:88:f7:09:81:
60:3e:61:d7:3a:c1:76:40:3c:d0:47:fe:f3:c3:d0:
b9:6c:d2:0a:32:cb:f0:2f:6f:54:f5:45:a0:76:dd:
3b:b0:62:a8:51:60:4d:1e:7c:2c:da:4a:92:7a:47:
51:85:e2:23:53:89:f7:63:01:d1:02:d3:61:73:0b:
d0:64:45:24:b6:3c:3b:92:be:91:c2:d0:ba:6b:8b:
f9:1d:4e:02:71:6e:30:92:6d:62:ac:56:ec:ff:36:
e9:51:2e:b1:7d:fd:7e:00:85:6e:63:96:89:81:03:
e5:dc:9a:e3:87:da:40:e0:10:39:c6:40:9f:55:ac:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F6:AF:EA:1F:AE:A5:D8:16:3F:A5:39:58:23:AC:68:CD:BA:E6:F7
X509v3 Authority Key Identifier:
keyid:70:EF:95:D2:CF:0E:7D:84:05:8B:52:8E:79:02:D6:0B:40:3D:7B:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/153ee2-ba84-449b-81fa-a040c7b6a670/1/cO-V0s8OfYQFi1KOeQLWC0A9e3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:06:82:7b:81:c1:7c:81:0c:a2:64:57:b3:4e:99:3b:e2:12:
1a:ad:27:0d:a3:fe:7d:db:ea:fe:1e:33:d2:55:04:74:fd:bd:
0a:68:2e:fb:90:5b:bf:aa:6f:5c:c5:5b:f3:1d:1c:dc:7a:65:
06:01:6a:5e:0f:58:4c:45:29:8e:40:d5:20:1c:a1:6c:87:9b:
66:8f:67:20:02:b2:84:c6:ac:b5:b8:17:6b:42:3c:b0:1a:11:
d5:68:5d:57:d0:87:f2:67:d6:83:62:84:26:ca:60:8a:29:21:
7d:70:81:72:92:40:b1:97:18:1f:f4:76:bf:00:c9:79:42:48:
74:49:1c:b9:c3:ee:b8:82:50:47:28:83:e8:75:b7:88:97:18:
f1:a8:c5:7d:75:45:09:b3:73:cf:e7:0e:0e:57:86:d1:e5:96:
09:2f:2c:87:8f:d7:0c:d0:3e:d8:d6:cc:2f:62:a2:23:c9:7a:
dd:d6:81:d2:8f:bb:ac:76:48:cd:51:53:12:de:6f:68:34:11:
21:bd:b3:9e:97:04:9c:9e:02:53:b8:25:d7:aa:41:31:5e:6d:
67:df:ff:5f:f0:c6:65:ad:4c:84:21:28:c8:73:82:a0:1a:d7:
e4:29:db:33:ab:aa:29:2a:ba:06:25:8c:61:56:fb:cb:e9:c5:
5f:0e:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:28 2025 by rpki-client