Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: sNXeIRW3ho0qSPXpo+8qoG9+T1fXLzh6JW19FrJD+t4=
Subject key identifier: 0C:92:14:87:F9:FF:5C:A3:E2:54:F5:02:3D:7F:6A:5E:20:2C:36:B0
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 0198D4725067D008885E1FE9C26152E85BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:01:58 +0000
Manifest this update: Sat 23 Aug 2025 01:01:58 +0000
Manifest next update: Sun 24 Aug 2025 01:01:58 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: AYI+M7nx/vE+Ic5CSzkNpaJ9AnMobBMjeVC6OUVD/pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:50:67:d0:08:88:5e:1f:e9:c2:61:52:e8:5b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Aug 23 01:01:58 2025 GMT
Not After : Aug 24 01:01:58 2025 GMT
Subject: CN=0c921487f9ff5ca3e254f5023d7f6a5e202c36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:05:a2:fa:d2:ed:0e:ca:47:e9:a7:cb:6c:
55:94:29:cd:1e:74:20:ca:f9:a3:07:60:ec:96:37:
1c:dd:1f:84:0f:eb:ba:50:88:e7:7d:cf:ad:62:26:
e0:64:d6:8d:a3:da:fb:b7:3d:b6:30:57:1b:08:47:
08:7f:ef:85:75:78:69:c0:84:be:90:c2:ac:e7:b0:
6c:24:41:33:50:d8:a0:34:fe:78:dd:14:5a:a7:ba:
5b:36:ea:04:30:65:d8:d8:64:32:74:0d:c4:02:33:
56:7b:7b:5f:38:c1:8e:db:85:67:84:42:b2:60:ae:
f2:6b:c4:8a:e0:f4:ef:22:45:44:9a:a8:9f:b3:8f:
ac:79:95:70:81:b1:d1:47:04:d6:f4:7e:e0:dc:a8:
ee:fd:35:23:ac:0e:89:2e:93:9b:79:49:56:13:d8:
20:bd:84:93:c9:92:1f:ed:19:bb:f4:2b:ff:1d:fd:
9e:6d:c6:ca:e5:be:a4:ba:6b:db:ed:87:cb:e8:cb:
8f:7a:8e:84:f7:e0:63:05:08:37:db:0a:cc:bc:df:
e9:81:56:c9:8a:b9:22:28:39:4d:72:2c:12:8b:df:
08:32:57:8c:ba:b0:fc:c8:b1:41:28:e3:1d:77:e5:
ae:57:77:b4:75:da:d2:76:40:b1:8b:28:01:6c:40:
3a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:92:14:87:F9:FF:5C:A3:E2:54:F5:02:3D:7F:6A:5E:20:2C:36:B0
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7c:09:c6:9f:bd:cb:ca:5e:78:a6:5a:91:52:2c:3f:37:ac:
4a:de:c5:ed:fc:28:2d:89:82:1d:3d:41:d9:0d:b9:3a:03:1c:
8b:cd:e2:32:b7:d6:4f:1c:3a:5a:ca:8e:4e:6e:72:20:5c:eb:
31:11:44:8d:75:cc:e3:29:10:68:80:9f:7b:d7:a1:27:61:d9:
7a:f6:0b:07:38:b0:18:f9:f2:28:5b:ac:62:b4:90:9b:fc:16:
13:da:8e:0f:4e:41:5d:76:0b:51:b7:5f:38:fc:b4:d3:32:3e:
aa:58:cd:03:c4:13:79:37:86:89:84:be:1f:01:06:8e:66:de:
eb:5c:00:7c:7e:72:1e:21:33:1c:d7:c7:bb:1c:6f:9f:cc:af:
cb:5d:9a:e7:d7:f4:c9:aa:1f:a7:fc:5a:47:24:5b:ef:c9:16:
aa:f5:c3:a2:c4:31:4a:2a:75:4b:1a:90:32:1f:b0:45:32:f4:
b6:0f:50:79:38:94:10:91:fc:6c:8d:05:ce:28:74:ff:a6:a2:
24:12:20:dc:3d:f1:65:a0:08:01:70:2d:7b:0d:69:62:57:53:
85:af:bb:84:c8:a1:61:08:2a:9e:c5:64:7e:5c:58:c6:6c:35:
7d:c7:ea:9d:63:ff:24:5f:87:67:5b:90:83:86:b3:70:22:8a:
3c:92:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:37:48 2025 by rpki-client