Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: x78FdoBQg1SzHbPBBHTG8EKadIasPBuq97z+yCJH45c=
Subject key identifier: 38:05:0B:99:84:54:A0:E8:9E:E4:9F:04:5C:0D:80:1B:94:EC:A1:1F
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 0198D7A90FEFD878163CFA3C86A7783940E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:37 +0000
Manifest this update: Sat 23 Aug 2025 16:00:37 +0000
Manifest next update: Sun 24 Aug 2025 16:00:37 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: o8uRn4kgzF2guEUmWWIjLGB3VrAZNhrbdIVS5zBEKMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:0f:ef:d8:78:16:3c:fa:3c:86:a7:78:39:40:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Aug 23 16:00:37 2025 GMT
Not After : Aug 24 16:00:37 2025 GMT
Subject: CN=38050b998454a0e89ee49f045c0d801b94eca11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:a2:81:6a:98:55:ad:30:5b:ab:0b:ef:da:
55:c5:c8:41:2c:19:bc:1b:bb:b3:35:08:61:07:a3:
96:56:92:88:08:25:63:ab:93:54:f0:0c:51:fd:f9:
8c:ba:48:0a:4b:4b:ba:68:88:ab:b7:c5:0e:13:a8:
6d:da:3d:f0:12:8b:19:f1:49:33:4d:fa:06:03:7f:
8a:7d:79:8b:56:d1:39:dd:8b:48:f4:0b:b7:ad:69:
a0:58:e4:bd:a9:9f:0e:49:82:7d:e0:0d:b0:d5:80:
14:79:92:d5:38:4c:c9:4c:1f:63:f4:42:06:5b:8a:
3a:50:a5:1f:d3:fe:4a:3f:77:73:c6:30:2b:4a:99:
3a:d7:a3:68:c1:85:fe:af:71:19:9f:23:b2:db:50:
1f:16:86:c1:e6:e0:6e:85:79:3b:ac:b4:f8:37:db:
dd:33:2f:63:04:dd:45:31:5a:49:a1:6f:df:32:01:
53:79:ff:72:f0:6e:f5:44:e0:7b:41:8a:f0:64:20:
3e:03:b5:82:52:d3:c6:3f:a3:60:94:d9:cb:f9:ee:
c7:60:b0:b1:a4:b9:fd:a1:c1:27:9d:64:eb:5d:15:
f9:60:af:1e:4b:bb:f7:3d:94:7e:71:bb:d9:2d:da:
5d:ce:51:89:ce:c1:f9:c7:82:2f:34:20:ce:a3:c2:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:05:0B:99:84:54:A0:E8:9E:E4:9F:04:5C:0D:80:1B:94:EC:A1:1F
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:47:22:dd:b6:bd:48:22:62:35:ef:f0:e1:b2:3d:dd:ca:28:
3f:4e:8b:a9:7b:a0:96:75:0e:1f:f9:61:a3:f3:b8:6b:22:66:
15:8b:10:23:44:bc:c4:2b:94:b3:6c:9d:2e:b6:bd:38:2b:74:
37:d2:ef:85:f8:4d:3a:5a:21:4b:78:99:49:95:15:d4:c5:8d:
24:32:ff:b9:9c:98:9d:26:3d:37:52:42:3e:57:51:4e:ff:7d:
1f:4a:40:4a:51:3d:d0:14:b4:6e:3c:9e:86:22:1c:c1:25:3b:
24:68:1c:47:50:c8:9d:ea:84:83:88:3d:40:a4:bd:4f:83:2f:
a9:0d:11:c2:a6:12:64:24:06:a0:1d:1d:0d:03:35:c7:e2:b4:
04:f3:9f:94:31:9f:35:2d:7d:2a:a4:eb:0b:9e:d9:c9:46:22:
ff:30:46:8c:d3:66:0c:75:c9:0f:b3:d7:19:fe:94:2c:e4:c3:
2a:36:f3:61:4d:76:5b:d5:b3:ff:f0:4f:90:d9:9d:94:e1:03:
b1:38:0d:8b:2a:d9:67:3f:d2:09:20:99:55:dc:d4:1c:1b:71:
fe:84:45:eb:38:f3:a0:d7:5c:3d:e8:e7:4a:52:43:f6:10:ad:
0c:de:70:2a:09:ec:1d:03:d5:d3:1e:68:a3:94:b0:b3:24:61:
33:e0:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:50:50 2025 by rpki-client