Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: wq60AbTYQLzTUHObrxtqdVhlaFLMwVXCO/hUPereU/s=
Subject key identifier: 35:C3:51:81:F2:79:B1:F9:A3:88:69:8A:BA:D3:DE:AE:00:11:00:7C
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0198D6608CDB26B7D09AA701558E8F53CC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:48 +0000
Manifest this update: Sat 23 Aug 2025 10:01:48 +0000
Manifest next update: Sun 24 Aug 2025 10:01:48 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: oc/IsHNxf5P2xaFQJy+r2IOGfGOfNB2wDcllGIladqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8c:db:26:b7:d0:9a:a7:01:55:8e:8f:53:cc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Aug 23 10:01:48 2025 GMT
Not After : Aug 24 10:01:48 2025 GMT
Subject: CN=35c35181f279b1f9a388698abad3deae0011007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:a9:c8:ff:6d:dd:50:67:2a:69:0d:39:63:
fa:8e:17:f2:be:ee:a2:d4:1b:ff:3c:93:2b:0f:73:
f3:2e:22:fc:b0:5a:16:d9:28:80:9b:a6:92:70:dd:
dd:bb:d7:5b:41:4a:e0:fb:97:73:58:4b:64:90:a4:
7e:89:c6:ef:fb:76:bf:89:f5:6d:94:7c:88:79:59:
df:68:c5:bc:b3:0c:dc:47:0f:d0:47:48:39:d2:ce:
7b:dc:1e:24:25:fe:05:63:ec:57:ca:38:f9:55:c0:
ae:70:10:cf:92:8a:8f:13:27:42:25:91:74:65:ca:
95:b7:70:eb:43:b3:70:2e:c5:98:ab:b4:c7:57:b5:
b9:94:9b:5e:09:b5:23:38:a3:20:cb:ed:df:63:1b:
73:cf:2c:d5:50:f9:26:98:d6:0c:37:c4:23:1a:1b:
d7:36:2b:15:bc:da:7f:a2:85:8f:08:87:7a:f6:c0:
c4:9c:d5:5c:e9:b0:85:8f:1c:ed:2d:0c:3b:f1:39:
69:6c:f0:f3:45:15:17:63:ae:e8:ce:1b:d8:73:ad:
55:de:4f:25:68:43:bf:96:f7:16:83:23:91:d3:c9:
eb:1d:2b:d2:bd:0d:e3:13:d4:22:29:1a:3f:ff:eb:
f1:bf:1a:70:99:e7:d0:eb:26:41:6b:f7:6b:65:db:
be:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:51:81:F2:79:B1:F9:A3:88:69:8A:BA:D3:DE:AE:00:11:00:7C
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:77:06:c9:d8:3b:a5:59:42:a5:98:5e:d9:ab:13:f9:c9:42:
b9:2d:63:93:16:d1:af:a7:db:21:25:73:3d:18:f1:61:77:81:
82:83:1f:56:72:73:78:2b:38:7f:0a:f7:b0:4f:b6:c1:8e:63:
78:e6:0a:bf:d6:98:0d:16:0d:2d:dd:64:1d:e5:5f:0a:7c:66:
44:a4:8e:70:3b:0a:13:4f:a0:63:62:39:52:41:b4:42:66:11:
e6:5d:81:4d:b4:f0:76:fc:82:ee:c0:8e:e9:d0:d1:e2:84:6a:
cb:50:59:99:97:25:68:fc:ed:72:df:3a:9c:d3:b5:eb:b2:66:
48:96:1b:13:98:9b:7f:e0:c5:0e:ec:c5:43:c8:8d:bc:c0:81:
04:e9:0a:6a:d6:61:7c:44:48:10:f7:08:c1:47:cd:05:29:da:
44:94:d7:4f:49:ae:44:fe:32:15:2b:8d:fe:a4:7d:1e:69:08:
0d:7e:9c:2e:b4:71:8a:a4:26:62:40:4f:6c:ed:48:41:03:44:
0c:1f:23:ad:0c:b7:88:c9:ea:4b:5e:1d:f1:32:47:9b:69:52:
53:44:05:b6:51:7d:53:d4:d5:d4:6e:bf:95:c9:da:ea:6a:80:
9c:e8:c6:58:46:18:72:d1:0a:45:6e:68:3f:d2:1f:e9:47:66:
a7:1d:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:12 2025 by rpki-client