Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: 4Ry3Fi2S+QfvdrIQeJxrgOXPTdJDoho+ogX3baOFhZo=
Subject key identifier: E6:A7:05:1E:68:A8:6F:D7:73:1B:1A:8A:50:16:E1:F8:00:3B:5E:F4
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 0198D4A7A1F1BD156C1EC17407A641487B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: ETzMLJ9E8ekQKvTuSVRndgg_ftE.roa (hash: zxZL9sGsfFQCpFwlHr+nLeuc9weJmZjmaUU+udBc04c=)
2: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: moYyAX2KfHnAszDoVsl2JKjvi2e7l+dJESSiyHXCLLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a1:f1:bd:15:6c:1e:c1:74:07:a6:41:48:7b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=e6a7051e68a86fd7731b1a8a5016e1f8003b5ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:55:99:a5:92:17:cb:af:f0:c5:c7:2b:50:
d9:5b:54:d1:e9:64:57:84:c5:e9:85:98:35:fd:01:
66:02:95:31:94:85:31:02:77:f7:85:d3:13:a2:e7:
10:49:66:be:37:e1:2c:ec:fa:d6:d7:74:5f:b0:b0:
a4:db:55:68:8b:3f:cd:51:70:67:87:a1:0b:d9:c1:
82:54:12:b5:af:8d:57:e4:6c:a5:e3:ae:e9:59:9f:
3a:d0:64:6b:cd:80:56:45:0d:7a:ae:a7:25:da:7e:
37:6f:eb:e3:09:4d:1b:5d:40:24:11:d2:96:8d:85:
5f:a2:13:20:5b:75:d4:60:93:2b:ee:ea:3a:0e:16:
91:98:9b:f9:ae:3a:52:95:58:41:0e:d4:ba:29:19:
12:21:3a:a0:c5:3c:47:d9:20:a8:c7:c8:bb:a7:f2:
0e:41:6f:b4:f9:69:25:64:e8:e2:ea:76:d7:81:69:
7e:91:09:73:b6:31:e1:c7:69:20:b2:c5:1c:a0:49:
76:fa:44:7b:e1:20:97:4a:e4:64:72:d6:0f:05:6d:
57:4c:22:48:6e:b5:d0:00:95:2a:b0:e6:69:64:e9:
4d:56:b0:ce:35:34:d8:c0:0b:8b:a4:b4:82:94:d1:
4e:d7:02:d0:95:8a:5d:06:30:b2:a3:18:69:d2:e9:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:05:1E:68:A8:6F:D7:73:1B:1A:8A:50:16:E1:F8:00:3B:5E:F4
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d4:8b:c0:32:c2:06:41:b8:3b:8c:06:38:6e:5e:6c:6f:4d:
4a:7a:d4:29:10:37:ad:b3:23:c9:19:41:2a:01:15:c8:ae:af:
a0:2c:97:07:57:72:23:15:fe:22:63:79:ba:57:c7:c5:ef:ad:
c7:e4:e3:5a:cf:d2:e4:88:d7:42:2b:0c:e7:fe:a4:25:ae:77:
53:67:e3:c2:f2:c9:14:53:6f:b9:2a:01:43:a1:01:e2:a3:f4:
03:14:f0:aa:c8:02:c6:dd:93:b8:4e:32:b9:8e:b2:10:fd:00:
8a:5b:da:26:57:1b:cb:a4:41:25:28:52:6c:f6:76:e1:e4:dd:
01:84:7e:37:e3:6f:38:ec:83:0b:48:fc:69:34:8c:c8:51:74:
23:33:36:9c:8b:63:da:16:14:59:9b:0c:b8:27:22:cb:70:2e:
80:e6:37:6f:1e:e7:6e:e1:ba:6c:76:44:3a:c6:18:70:8f:00:
ad:09:d4:8d:5b:a5:d6:d5:41:37:0c:6d:83:8a:5d:5e:92:3a:
1b:9f:89:eb:1c:66:cd:80:fd:1a:ca:97:88:6f:5f:c7:bd:4e:
70:d7:7f:79:ef:15:b1:41:2c:f8:d8:c5:50:9a:b7:ba:ba:a9:
2a:e6:e7:b3:5e:be:f9:89:07:a0:49:7d:a6:4b:23:2e:7d:70:
d2:97:a3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:43 2025 by rpki-client