Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: E+DzUuVpVziFXmLYBunb6X8g+XCFsPqXTUghr6J7w0s=
Subject key identifier: BD:65:43:E6:F3:05:F6:A7:36:D7:80:FD:22:AB:A2:37:58:51:9E:3C
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 0198D58350C8FE35790E153BA3A0F7D2AF26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:09 +0000
Manifest this update: Sat 23 Aug 2025 06:00:09 +0000
Manifest next update: Sun 24 Aug 2025 06:00:09 +0000
Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: htnRfWii+lKe3I3VUtLzqXrPB2TV3YRDPlMhPUgdFv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:50:c8:fe:35:79:0e:15:3b:a3:a0:f7:d2:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Aug 23 06:00:09 2025 GMT
Not After : Aug 24 06:00:09 2025 GMT
Subject: CN=bd6543e6f305f6a736d780fd22aba23758519e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:27:bb:9d:74:c4:f7:d9:a6:d0:93:ba:d1:
9d:7d:f7:f3:bb:f1:36:8a:dc:2f:fb:92:01:b6:4a:
6c:ae:58:54:73:f5:a0:23:52:90:6c:db:1e:ee:88:
62:51:90:2d:51:ee:71:14:93:bb:ee:33:e1:76:ef:
bb:a1:7b:ee:a2:e3:fa:95:cf:b1:22:73:2f:b8:4d:
26:77:6e:7d:b8:7f:16:f0:05:6f:93:60:88:1c:7b:
68:32:a5:76:e9:2c:b3:90:a8:a0:a5:78:8d:a6:95:
9f:2e:4f:a0:88:7c:2f:07:a7:71:9e:75:16:82:c1:
75:c3:b1:39:73:ef:c9:78:f4:05:0c:1e:40:e9:ca:
24:ed:33:57:af:52:ca:a3:41:0b:37:5d:92:af:1c:
c0:a2:1a:a6:6d:4c:15:55:34:b3:55:ff:f9:f2:59:
5a:2c:b8:09:e6:5e:ce:7f:0b:98:a2:db:bc:20:37:
cc:fd:f5:cc:d8:d1:56:21:77:3f:59:f4:e2:93:be:
3d:59:c4:2e:b4:ed:7d:33:4d:e3:06:44:c0:f1:53:
85:c0:94:88:b2:05:77:fe:9d:d7:bf:39:b3:81:d9:
16:e4:0b:37:d2:58:92:48:7a:5e:d1:8f:4c:27:98:
f6:35:e4:10:87:d5:e7:05:a7:99:63:e8:51:82:26:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:43:E6:F3:05:F6:A7:36:D7:80:FD:22:AB:A2:37:58:51:9E:3C
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:31:6e:25:f0:53:34:62:0f:a7:cb:72:5a:54:a4:8e:8d:
6c:d6:7a:96:ae:e8:03:bd:55:68:4c:b6:bf:42:10:7c:86:8b:
ef:b8:9e:e1:e0:ef:10:32:4e:04:fa:3a:d1:94:90:ae:ab:04:
28:50:c8:13:ba:36:d7:b7:95:82:85:cb:10:af:d6:45:ef:33:
6f:aa:c4:a8:25:7d:fc:4e:00:ca:39:f4:09:af:9d:13:3b:3d:
35:eb:fc:7f:71:a1:15:d5:69:a1:14:7c:99:a9:4c:cd:57:43:
10:65:a1:c0:b0:c9:13:d3:a4:5c:ed:aa:f0:24:b4:a9:a6:10:
08:36:fe:83:e5:38:8a:cc:73:4a:68:fb:d5:4f:af:79:ca:87:
6c:62:62:ec:d0:d4:33:3e:2d:5c:f7:9c:5f:02:f2:72:36:77:
7f:06:f6:0e:e3:f7:b5:c5:ed:79:d6:f8:bf:6f:ea:b0:84:1d:
52:f6:d7:7f:2c:03:90:bf:f7:4c:91:b6:dd:00:95:b7:3e:0e:
55:ca:3d:27:3e:10:ba:b0:ba:d5:f8:07:e9:e3:ca:cf:1b:b3:
75:60:60:86:b0:0d:dc:06:b5:e6:35:45:35:d4:a6:26:7d:5a:
b0:d4:75:49:74:a2:e6:5e:b3:08:31:20:59:bb:c7:d2:9c:b2:
c4:13:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:56 2025 by rpki-client