Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: wmyNTFeVd8BXxBuU2h4ly6KxV0h1i31hXILv9ZHwlbI=
Subject key identifier: C3:F0:F5:50:4F:77:79:FE:27:10:38:BA:14:F1:E8:F1:BF:D1:81:E5
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 0198D4734B908DEAC10AF49AB4F7D644D914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 01:03:02 +0000
Manifest this update: Sat 23 Aug 2025 01:03:02 +0000
Manifest next update: Sun 24 Aug 2025 01:03:02 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: b8KredDRWh2lUgwxKj7RJLm+LT2vVObyUdkqUsC8w8I=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:4b:90:8d:ea:c1:0a:f4:9a:b4:f7:d6:44:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Aug 23 01:03:02 2025 GMT
Not After : Aug 24 01:03:02 2025 GMT
Subject: CN=c3f0f5504f7779fe271038ba14f1e8f1bfd181e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:e7:77:aa:dc:9d:c4:9f:c2:da:7b:1d:bf:
91:c3:ba:28:65:0d:22:c8:cd:d7:fa:7b:57:b0:98:
79:f4:1c:20:a1:23:75:7a:67:4c:42:b6:bb:3d:18:
49:a0:45:55:fe:ca:a3:f8:2b:60:1a:8f:09:fb:36:
aa:83:8a:e3:93:3e:a2:cd:19:0d:42:59:3d:da:04:
86:2d:10:9a:18:fc:7b:7f:0f:3a:2b:91:2d:f6:9c:
c7:be:2d:b1:dc:47:5b:72:30:cc:96:71:50:86:7b:
95:cc:93:6d:f2:66:99:a2:9e:77:38:dd:f2:32:fb:
87:9f:2e:56:a6:a3:af:21:f6:9c:c6:d9:0e:f7:e8:
20:02:c0:9a:88:1f:79:fc:fb:91:e3:a2:0f:58:ac:
cd:13:e6:1a:f9:ef:e8:97:15:1d:6c:b8:41:b2:3c:
4b:40:78:80:07:2e:1c:43:95:97:88:74:a3:23:68:
27:a5:56:39:c5:dd:79:f6:94:d1:1c:91:4c:93:29:
b2:aa:de:a9:4d:65:da:ca:3b:9c:7a:0d:63:e0:8a:
a6:23:8f:1d:68:ff:65:f7:da:f0:e6:6f:85:00:cf:
50:e3:17:64:3f:fb:4c:00:e3:32:0b:17:80:92:bb:
36:85:c1:a1:27:41:f8:93:e5:56:fc:0c:b0:46:a9:
d7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F0:F5:50:4F:77:79:FE:27:10:38:BA:14:F1:E8:F1:BF:D1:81:E5
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a6:52:dc:be:c8:e8:fb:b5:a7:84:cd:08:90:55:ef:d9:46:
5e:b9:eb:8b:a3:6e:37:62:3e:b0:f1:55:b0:b4:3e:54:9e:e2:
3b:c2:0f:ef:0b:b1:d5:f2:27:ab:d0:a5:08:9f:a6:72:ed:76:
39:05:97:81:0e:43:bf:09:11:5f:8e:d0:ed:e1:fc:7f:09:6c:
6d:1b:3f:24:e0:0d:69:c9:91:de:61:32:91:b0:f5:39:68:dd:
15:d6:3c:11:4f:60:23:fc:d7:27:b0:76:f4:12:62:98:a7:d2:
5f:03:cc:5a:fd:81:0d:1d:06:bd:b1:56:ff:b5:7c:8f:05:05:
f0:ea:16:d7:07:25:2b:18:f4:f1:12:88:89:e6:e5:7a:83:29:
75:b0:65:92:27:2a:ff:03:9a:55:9e:34:a3:de:87:57:fa:60:
84:d4:83:34:d5:15:7f:e7:9c:28:16:25:65:c8:9e:98:77:f0:
b3:8d:b8:84:1c:5b:6a:fe:93:c5:b9:ff:4c:c8:9a:7d:5d:0d:
8e:d4:bd:b7:e2:27:3e:88:77:de:c6:63:1b:76:17:4f:04:46:
00:63:5d:e6:79:dd:44:a6:47:c7:07:56:03:bc:1c:e1:71:9e:
9d:8e:92:c8:b2:92:b4:53:a6:0a:89:79:d3:34:08:44:33:2c:
a4:4d:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:47 2025 by rpki-client