Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: d2BquxenxaQrCAs0hQb2zTNDWAJz88XaJN5DjlBR4Rk=
Subject key identifier: 38:9F:4A:93:7E:DA:47:E1:78:26:AA:84:29:0A:4A:7A:11:B9:E2:FF
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0198D583F666FAA774D7F5C234A1896F774B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:51 +0000
Manifest this update: Sat 23 Aug 2025 06:00:51 +0000
Manifest next update: Sun 24 Aug 2025 06:00:51 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: 7U0H0OVNkBTM2njUhyyg2qiye4JFkheZxPFsXVZynFw=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f6:66:fa:a7:74:d7:f5:c2:34:a1:89:6f:77:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Aug 23 06:00:51 2025 GMT
Not After : Aug 24 06:00:51 2025 GMT
Subject: CN=389f4a937eda47e17826aa84290a4a7a11b9e2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:4e:72:22:b1:66:4b:f8:f3:2e:48:7b:0a:
a9:8a:ea:a8:4e:06:63:8b:b1:a5:f7:3e:ff:4b:35:
68:11:8b:ad:98:65:23:a4:44:e6:6d:10:09:d4:f5:
30:cc:84:a0:27:b9:c6:6b:e3:12:8a:f1:ec:9a:5a:
d3:23:80:9f:64:c8:21:96:f7:b9:55:4b:18:85:bb:
72:14:55:6c:45:4f:e2:0a:bd:ec:b9:82:d0:50:ea:
7b:7b:6a:af:c5:3a:35:22:07:94:8b:36:07:bd:bf:
cf:71:68:23:e9:5d:2b:e6:94:14:01:cd:4a:ec:b9:
e2:0c:63:34:38:cf:cb:17:a0:79:e8:5d:7a:11:a7:
29:44:10:05:59:fd:02:97:b0:2c:0d:ca:12:f4:1a:
63:86:fc:bc:dc:df:b8:90:3a:84:56:5e:b6:0c:1a:
d0:0c:6d:2f:4b:73:03:11:59:f8:53:65:c7:7c:15:
f8:27:e6:e3:ba:84:7e:10:0c:ab:19:ce:ee:e7:55:
41:a6:3f:b8:8e:07:df:ca:d6:03:7e:d1:ea:cf:0d:
90:76:f8:92:4d:95:7e:36:0c:36:55:ab:78:a3:a6:
50:83:fb:d9:05:54:90:55:ab:43:67:e0:9f:4a:7b:
d6:5d:cb:53:9c:ff:b6:c7:e3:9e:a3:a2:07:c5:1f:
3d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9F:4A:93:7E:DA:47:E1:78:26:AA:84:29:0A:4A:7A:11:B9:E2:FF
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ea:9f:27:e0:b6:85:7b:fe:f9:76:45:d3:3e:2b:25:14:55:
3e:ca:59:87:34:3b:61:00:43:ad:97:56:43:81:39:84:1f:56:
e9:e5:a2:1a:51:10:19:6d:fe:ec:b0:41:2a:87:e0:d8:d7:d4:
fd:2c:f5:c1:cc:ac:f9:98:22:33:7f:e0:c5:70:7f:44:71:79:
c8:98:50:7a:c4:a8:fd:0c:18:7c:de:f0:5f:50:39:e8:10:f3:
c5:49:95:fa:2e:a0:a1:f7:db:9d:07:8e:78:fc:73:0e:60:fd:
23:4f:21:a3:a7:36:2f:3a:fe:61:a6:a5:a1:e2:33:7e:d4:1a:
25:1f:8b:2a:bc:fb:51:aa:48:20:62:58:2c:be:eb:8c:40:0b:
2f:62:d1:26:72:e3:8a:92:17:d6:6c:c7:cb:c5:3e:4f:6d:e3:
8a:de:6d:95:90:b8:d8:12:ff:9d:59:87:bc:1b:ec:56:b1:3c:
34:99:f1:9c:4c:2e:0a:e2:11:45:de:f5:d7:8b:ae:cf:62:fe:
87:f5:6f:ea:9e:55:9b:a6:c9:ba:67:1b:9f:ef:91:56:50:61:
ad:b4:c8:24:ac:38:ab:30:82:f5:2b:ed:c6:b1:1c:28:ab:a3:
d8:48:a3:4b:1e:14:7b:ad:ce:b6:07:7d:c8:b8:2e:fe:74:cd:
12:0b:a9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:43 2025 by rpki-client