Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: lUFxWNRBfrBBylFhULuG9OXeaJYBxar2Yeih81bpzOo=
Subject key identifier: 9B:F7:41:25:E0:0C:60:AB:23:DA:70:27:52:42:AA:63:C5:3C:89:B8
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 0198D6616525FD96DB76D1E851C19CA46A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:02:43 +0000
Manifest this update: Sat 23 Aug 2025 10:02:43 +0000
Manifest next update: Sun 24 Aug 2025 10:02:43 +0000
Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: +NhdGJ8dOA3n8QQ7BgoIwvsmn+IM2tW4lhcGHyN5/pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:65:25:fd:96:db:76:d1:e8:51:c1:9c:a4:6a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Aug 23 10:02:43 2025 GMT
Not After : Aug 24 10:02:43 2025 GMT
Subject: CN=9bf74125e00c60ab23da70275242aa63c53c89b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:e5:56:4c:f3:bf:d6:14:b8:bc:48:40:a5:
f8:91:8c:83:a7:db:be:16:b0:a8:e3:6e:75:39:03:
3e:31:ba:88:44:a7:a8:dd:25:20:e4:d2:d8:66:2d:
25:20:2c:e7:72:da:01:ab:50:fe:55:b2:cc:5a:8d:
13:58:93:e6:ca:b7:6e:9e:ef:bf:0e:4d:6c:0c:66:
dc:4f:be:f0:d3:c8:f8:79:a2:92:48:92:a6:52:ca:
70:fb:d6:5f:bd:d1:9f:22:90:ff:d4:0a:21:e7:31:
6b:0c:20:94:9c:9e:49:5d:de:cd:82:f7:0e:23:2c:
88:ea:64:f2:6a:5b:06:10:13:c1:6a:89:bf:4d:a9:
01:0d:9b:f8:46:12:c8:ee:db:96:4c:6d:b0:65:46:
86:f0:34:69:67:d7:8c:e2:f1:80:e3:fb:80:11:c5:
cd:52:07:9f:d8:86:3c:c8:89:38:30:c8:7c:eb:a9:
fe:71:c0:b1:f0:56:85:06:49:5e:74:a3:87:cd:0d:
68:29:15:70:24:f5:b0:63:8e:4e:36:83:d3:7e:4a:
9e:b0:d9:7d:90:0d:b2:00:2a:a5:da:79:33:c4:4f:
a3:9d:82:04:49:34:54:cd:36:fd:2d:9b:25:3e:be:
5a:40:0f:46:be:5d:43:e5:66:81:12:ea:ea:bf:e6:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F7:41:25:E0:0C:60:AB:23:DA:70:27:52:42:AA:63:C5:3C:89:B8
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2a:78:5f:98:66:04:13:d4:e9:66:aa:a5:4f:71:e4:5a:7c:
39:2f:87:c5:d3:19:ec:f2:da:61:0c:f0:b5:cd:86:6f:e2:e2:
74:6e:29:46:58:69:df:45:07:bb:12:ed:57:de:22:da:03:b4:
64:42:84:5b:0a:12:b2:22:9d:d9:03:48:92:d4:ee:9c:4c:9a:
0d:57:81:73:f6:91:a4:11:7f:7c:ba:19:cb:25:2b:78:d5:82:
3d:29:0c:3e:91:13:32:4e:90:e7:e8:c5:66:0f:90:34:0d:73:
82:06:80:03:75:36:e2:0f:ae:1f:aa:a0:b1:75:6b:9e:91:a7:
d0:66:51:ac:ac:ce:6a:f4:51:dc:5a:80:fc:21:ff:cd:18:09:
fd:8f:28:13:2b:97:88:c7:c4:b1:9e:c2:26:35:c0:a5:ee:b7:
3b:22:ce:d2:d4:b4:de:b2:72:2a:b4:75:4d:fd:d3:b9:71:ef:
6d:63:04:c7:c4:2d:94:ec:95:97:70:34:37:7e:8a:47:38:3d:
89:58:ad:c8:da:ae:eb:70:9f:59:a7:2d:72:16:c1:18:98:74:
1d:9e:e7:ae:c6:37:e1:de:d2:10:de:c5:09:57:f8:1f:92:fe:
c3:59:83:43:e4:e3:71:d6:f4:bb:4d:ae:ae:82:4d:7d:95:b1:
e8:22:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:23 2025 by rpki-client