Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: iU3VbMoNU+BSjiyLUGvhbMf+mTcKr1NlbrGfsf2VnTE=
Subject key identifier: CA:32:D6:9C:4E:D0:40:3C:38:8E:74:C0:33:7C:28:44:5B:98:13:8B
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 0198D5BC4F30351F95C5B989787B3A1C65FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: YZGMIvadW2xPxhoSXpNJb8SDWu8.roa (hash: jQfGmlQO1sTVXZe+wmgboQPBpNBgVW+6jbuLSLsW9ZU=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: LBEwFvvji3KPtrHDxVx+srvkpFcBRsE2ISacIbHpqH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4f:30:35:1f:95:c5:b9:89:78:7b:3a:1c:65:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=ca32d69c4ed0403c388e74c0337c28445b98138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:c9:98:2e:c8:e9:04:55:52:06:00:b0:c9:
af:7b:3f:b8:ff:60:b5:3e:b4:c5:e0:3e:10:da:d1:
df:96:73:2b:0f:22:cf:7d:b0:45:5f:80:10:cf:36:
dd:fc:fe:9b:40:d6:f9:5c:8b:c4:38:ed:b8:55:b2:
36:ff:70:23:91:41:02:17:52:c3:a3:23:b1:78:71:
d5:87:6f:7b:8c:0e:ad:3a:16:42:8e:45:5c:4c:97:
e5:97:8b:1b:ea:89:3b:17:f5:90:28:b4:2e:1f:1c:
cb:ba:a5:6f:83:bb:50:f1:03:f8:f4:9e:4c:36:ef:
17:f9:3a:c3:41:96:0f:bc:7f:77:4d:a6:80:3f:4c:
fb:92:ed:a5:5b:b0:e5:f4:57:9e:01:c3:3d:0e:a6:
3a:d5:eb:70:b2:c2:c3:25:a8:ed:f0:d3:05:b4:0e:
cd:0a:c7:25:f9:77:30:a4:ba:ff:6b:e6:08:83:7a:
08:99:27:8e:6c:db:4e:47:0c:5d:d3:72:09:35:58:
6c:da:cd:2b:89:5d:95:ce:42:69:d1:af:27:85:a8:
76:dd:f7:f1:b0:6a:59:86:6c:7e:fa:6d:f8:2b:f8:
23:b7:4d:8b:ca:b2:c8:3f:65:a6:c2:e2:4c:05:e8:
37:2b:0a:2e:3c:c5:b5:45:70:7c:c7:59:63:af:58:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:D6:9C:4E:D0:40:3C:38:8E:74:C0:33:7C:28:44:5B:98:13:8B
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:58:4d:e1:02:4f:1e:d9:d4:63:97:fe:2a:3b:4a:ec:bc:5e:
c2:25:df:33:62:8b:3d:2d:ac:80:fb:52:ad:54:0f:46:8c:1b:
9f:0b:d9:5c:63:6d:de:6a:76:4d:fc:90:23:cb:56:8b:cd:e4:
30:c5:4d:90:19:7b:74:3b:4e:f1:67:95:50:7a:6d:42:26:82:
88:09:b0:5d:7f:93:47:28:a0:5a:34:14:6e:2e:a0:ac:5d:a6:
97:b4:86:44:b9:a3:aa:e7:8a:10:2e:b4:29:a8:c3:65:b9:9a:
39:b5:11:9b:b1:84:ca:87:ac:20:be:ef:21:3c:0f:e6:a9:4a:
6c:4c:64:06:c4:9d:81:9e:be:f1:a8:f9:91:ab:ec:79:97:fb:
f0:b9:b1:a1:13:67:29:e3:f9:4c:87:f4:e1:35:43:e0:b7:b2:
0d:20:d3:b8:01:35:cd:8c:99:da:a1:04:2e:7d:ab:cd:37:0b:
ba:00:42:3f:66:89:81:b1:6f:c6:6a:f3:3e:40:9a:61:c7:5f:
5e:a5:64:7e:e3:92:ee:12:07:0a:80:67:8b:45:fe:0d:7e:0d:
59:d2:ec:5c:a6:3a:e5:90:e0:c2:e2:59:53:44:7e:ec:30:7d:
6f:e1:e1:80:b5:14:38:88:5e:5c:41:e5:02:da:cc:ce:2e:12:
c9:e0:f2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:39 2025 by rpki-client