Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: ZBk62YLAcp1qhJ4fdFbvHOg9vA3FrR8GgdqtC1BeSXA=
Subject key identifier: 43:09:10:D7:63:C3:48:FC:07:B3:22:10:41:9C:0B:B4:94:A0:B2:8E
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0198D4A8471C52A4F1E2E4C8820739C74065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:54 +0000
Manifest this update: Sat 23 Aug 2025 02:00:54 +0000
Manifest next update: Sun 24 Aug 2025 02:00:54 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: d2nW+78AvY0waoCrTXEDFvKNq3rJsHGr0QKRdN1afgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:47:1c:52:a4:f1:e2:e4:c8:82:07:39:c7:40:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Aug 23 02:00:54 2025 GMT
Not After : Aug 24 02:00:54 2025 GMT
Subject: CN=430910d763c348fc07b32210419c0bb494a0b28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:02:bf:a0:0c:73:01:b7:8a:5f:ef:35:f2:
ae:2c:09:2a:85:81:b0:04:1b:11:b4:fe:62:95:ad:
ec:87:df:22:bb:30:e8:a2:bc:4e:40:3f:a2:44:6e:
3a:6f:3d:da:cb:0d:5d:f5:3f:88:c0:57:f5:2a:56:
25:ec:88:de:30:88:30:6e:e2:f9:49:54:cd:a1:a5:
74:eb:43:b8:7b:91:4c:70:2c:99:e9:7c:33:76:9e:
86:97:d9:26:ae:ba:ba:8b:6d:67:01:89:87:36:a3:
90:31:8a:94:ad:10:3a:8b:3a:18:26:ee:20:9b:ed:
c5:a6:20:27:ee:7d:aa:01:7b:ad:41:35:05:15:fc:
03:50:dc:40:83:e6:10:f7:0b:f9:0e:42:1f:e8:92:
f6:e8:8f:6b:41:10:de:56:68:a2:4c:88:4e:df:26:
88:eb:34:4f:4d:aa:47:f4:dd:4e:d0:95:0b:c4:d7:
4c:1f:25:af:0b:d9:e8:6a:c7:d6:9b:1f:04:62:05:
58:ae:c0:36:96:4e:1c:ca:37:1f:ca:27:28:7f:c8:
2a:6c:e5:36:d7:84:04:25:d4:e7:72:6d:c6:1c:47:
dc:6b:49:f5:11:85:63:25:05:2b:16:15:91:ba:2c:
9e:10:fb:7c:b5:21:12:55:d7:2e:7b:c2:cf:77:6c:
7f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:10:D7:63:C3:48:FC:07:B3:22:10:41:9C:0B:B4:94:A0:B2:8E
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9d:be:ac:9e:0f:d4:0b:55:ac:a7:cd:b7:86:64:5e:38:73:
d5:63:91:80:95:84:c0:1b:a6:a9:e3:40:12:1a:0b:fb:bd:17:
44:b2:50:32:14:c4:50:99:5b:9d:fe:7d:ee:e3:95:02:b1:24:
45:d7:01:fd:27:23:37:96:2b:9e:ca:89:10:7e:a4:94:c2:ea:
08:da:0a:41:e3:1e:b6:6b:52:e6:dc:12:b1:b3:e9:d6:39:5a:
c2:bd:36:db:99:cb:36:2c:db:a1:b4:37:97:d0:1f:e4:6d:c5:
7d:c8:18:57:bf:28:7d:71:68:bb:60:65:b3:e3:b4:d9:16:13:
a2:a4:e8:9b:1d:af:7e:e3:c5:72:df:f4:25:05:56:ae:48:e3:
a0:0f:d2:5a:33:fe:f1:d7:7e:53:56:76:b1:5c:9a:ec:25:ab:
80:58:54:1d:ab:71:78:e6:b7:47:75:76:e6:61:1f:c7:73:aa:
bc:94:5d:f1:47:e5:93:aa:e2:b7:0b:42:e6:f8:82:38:37:01:
6f:c8:0b:22:14:06:33:82:01:49:a6:3d:c4:56:04:f8:b4:a3:
05:dc:77:42:7c:72:cc:5f:89:38:dc:f6:15:a0:4f:15:83:a4:
b8:fc:ee:cd:9c:51:1e:16:21:bc:43:62:77:fa:5d:2f:02:4d:
63:f9:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:20 2025 by rpki-client