Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
File: oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft (raw, json)
Hash identifier: BWSsZCl1LoDY9PldBLLT8REN944bXlEP/sfvZr4kYh8=
Subject key identifier: F3:2F:BF:87:7F:EA:19:BC:E0:2B:63:94:D1:F4:3D:2B:78:2D:10:BB
Authority key identifier: A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
Certificate issuer: /CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Certificate serial: 01989ECC62E8967B2325D61C97C96C33363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 15:00:51 +0000
Manifest this update: Tue 12 Aug 2025 15:00:51 +0000
Manifest next update: Wed 13 Aug 2025 15:00:51 +0000
Files and hashes: 1: 1WhGgkr3JY5zEMoTpLWWw0HSqUE.roa (hash: iFLoTBcfXjLN91W8rDzjN3Un9O78u0pd8+4HdguEcmg=)
2: kY1a0BACd1_TYMv9GQ8E9K8p7qU.roa (hash: YxOrzROBL63q/PQ0W9//5oVoP7okiooDJdhlfo33RWM=)
3: oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl (hash: tnul7lPivWiEvK5UWBxiaXyxAjFv3sIAEOgFSZqH2gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:62:e8:96:7b:23:25:d6:1c:97:c9:6c:33:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e049d00ba8421e4c45a948492945c78fd9e16d
Validity
Not Before: Aug 12 15:00:51 2025 GMT
Not After : Aug 13 15:00:51 2025 GMT
Subject: CN=f32fbf877fea19bce02b6394d1f43d2b782d10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:49:1f:f1:33:0b:c5:cd:c7:bb:06:08:7c:
1e:97:0c:d8:cd:cd:59:bd:dd:db:f8:98:f9:db:10:
5d:6d:4e:5e:86:ef:e9:b2:a0:a1:ff:ce:f8:21:80:
33:36:42:4c:2a:fd:f2:d3:91:ab:e6:f6:ab:df:8a:
9d:a4:28:ed:fc:50:44:73:6d:c3:5d:53:f1:a4:e7:
00:7a:08:90:c4:3e:a4:1f:f5:4e:05:af:03:0d:31:
b7:21:45:f8:97:17:e1:ef:56:c4:12:61:a3:5a:ca:
45:16:43:5e:e2:43:4c:e7:47:56:6d:ad:e8:9b:6c:
13:6f:33:25:1f:9d:6c:1b:09:f3:7a:9a:ca:e7:89:
f9:1b:9a:61:06:a3:14:23:6d:36:46:0e:f4:9b:08:
fa:e4:3e:ef:d8:45:1e:46:9a:a3:37:17:48:30:19:
85:84:fd:64:67:60:20:15:ee:d8:8f:82:0c:46:c4:
f9:81:1f:27:2e:b7:53:ad:ad:08:13:62:7e:51:59:
0d:97:ec:39:b2:66:bc:a4:b9:ed:73:a7:e7:ff:90:
d9:8d:06:b5:db:d6:50:6a:fc:f7:2e:b4:2b:75:0d:
68:27:fb:04:03:d7:67:4d:4d:e0:bc:fd:22:bd:26:
00:b6:db:3f:95:46:e9:62:11:68:46:48:03:49:ea:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2F:BF:87:7F:EA:19:BC:E0:2B:63:94:D1:F4:3D:2B:78:2D:10:BB
X509v3 Authority Key Identifier:
keyid:A0:E0:49:D0:0B:A8:42:1E:4C:45:A9:48:49:29:45:C7:8F:D9:E1:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOBJ0AuoQh5MRalISSlFx4_Z4W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4560e9-7173-429c-b6f1-5f4a15cb9054/1/oOBJ0AuoQh5MRalISSlFx4_Z4W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:24:71:ae:21:1e:a6:c3:32:86:50:96:7e:44:2f:9f:41:6c:
d4:df:bd:fa:76:55:a6:7f:df:48:93:d0:b5:5a:61:6c:01:99:
d1:34:9c:6c:a5:ec:ce:1e:8f:aa:be:62:59:b7:9f:22:3a:e7:
af:02:3e:e6:b5:a0:1e:e0:68:91:fa:d7:74:2e:81:54:ba:ee:
79:e7:fa:58:af:29:63:0c:88:30:5f:14:4a:0f:27:f7:0f:b8:
33:6d:0f:ba:c7:7d:ef:55:0c:5c:2b:7d:3b:4d:d4:6b:f8:2b:
4f:62:6a:08:03:f7:50:2a:56:1f:3c:31:af:3a:bf:74:fc:f6:
45:c0:5a:fa:cd:db:bb:12:48:42:6f:b7:7f:99:5c:2c:2f:31:
28:af:27:fc:cf:53:5f:5e:17:86:3f:cd:da:fa:6e:8c:11:c3:
55:d9:20:2e:ce:a9:5f:96:59:4b:8d:bf:bf:0c:2a:6b:31:2f:
ad:86:3d:56:ab:51:59:69:ad:47:35:e0:3c:f4:69:bc:ac:49:
a3:31:5d:db:1c:71:a8:08:f4:c7:91:3e:82:e6:3d:f6:5e:1a:
d2:7b:b0:79:1c:c7:f1:89:5b:9a:bc:bf:3d:08:0f:c7:0f:31:
f6:cb:01:14:63:a1:e0:c2:8c:c6:82:f9:90:45:fd:d3:10:7f:
fd:fb:2d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:22 2025 by rpki-client