Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
File: oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft (raw, json)
Hash identifier: 6GSMhkBZGtqlIY4j7EUJzJ3C9ubUkWgxcG1FuC1coA8=
Subject key identifier: 5A:E9:B8:80:A3:20:E7:A5:90:38:EE:53:C0:00:1F:CD:79:5B:BF:C3
Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Certificate serial: 01987BD28124D2E5DFB02B8DA8570C19BA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 20:00:49 +0000
Manifest this update: Tue 05 Aug 2025 20:00:49 +0000
Manifest next update: Wed 06 Aug 2025 20:00:49 +0000
Files and hashes: 1: 2OFA6f1DjHXZMhryh5jA0oQbPrI.roa (hash: 4LohZFyvURnINNqOgIllTWqy2TcXQvTUTxllcCyXfjc=)
2: oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl (hash: wuS9zcYStIUov/vbg6/ZyxJz0BZDZ0AqhcOidAvBch4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:81:24:d2:e5:df:b0:2b:8d:a8:57:0c:19:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8
Validity
Not Before: Aug 5 20:00:49 2025 GMT
Not After : Aug 6 20:00:49 2025 GMT
Subject: CN=5ae9b880a320e7a59038ee53c0001fcd795bbfc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:8a:78:c7:d1:30:39:da:74:cc:ea:92:45:
c9:e8:e2:6a:21:79:97:10:31:3b:bc:28:bd:87:bc:
d8:fa:20:19:2c:e9:b2:09:ad:3d:f3:96:d4:50:86:
cb:0b:1f:36:c0:e4:df:af:e3:36:7b:62:df:e7:68:
03:a8:71:ed:d1:95:42:4b:a8:c0:02:c1:e3:e7:55:
18:f4:93:16:6a:54:5d:98:dd:b4:da:6c:60:d3:4b:
3c:ce:d9:ac:59:1e:6b:7b:11:b3:5c:c1:d3:fe:2f:
43:46:b8:43:96:2c:75:12:e0:b4:45:a2:bf:1b:33:
78:b6:38:85:93:7a:6f:19:29:69:85:82:59:4e:11:
c6:6a:93:92:4d:ab:3d:bc:2f:74:f2:92:65:2c:e8:
2b:df:17:f8:07:20:11:91:11:dd:f9:ec:2b:dd:4b:
73:c9:29:59:e2:f6:12:4c:25:8b:08:23:50:33:19:
35:00:6f:64:c7:76:76:9b:83:81:af:d5:fd:f6:d1:
af:97:c1:4f:ac:c5:c0:5b:96:54:94:be:51:1c:a3:
85:33:f4:81:ab:75:c7:25:58:5b:42:b8:fd:19:b3:
8b:a4:ce:0c:c8:bf:bb:8d:cd:e7:13:5c:73:9f:33:
66:4f:72:75:48:30:31:15:ca:c3:4e:e2:0a:6c:08:
55:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E9:B8:80:A3:20:E7:A5:90:38:EE:53:C0:00:1F:CD:79:5B:BF:C3
X509v3 Authority Key Identifier:
keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:df:f4:50:82:a2:30:29:fc:91:70:61:a6:ce:7d:7f:14:ae:
38:be:a0:cf:45:78:6c:ce:cf:a4:f5:a9:4a:5d:13:dd:28:0f:
a1:89:d6:af:41:e3:b0:e8:2e:30:e4:fa:d1:da:06:b1:4b:df:
91:97:52:ae:96:c5:fa:76:53:f0:bc:5c:9c:fe:b4:a0:61:1a:
2b:c9:e5:a6:ae:26:2f:cf:88:67:d2:d3:d8:5d:c1:20:36:be:
97:de:0e:8d:38:91:1e:5f:a7:02:96:fd:86:4b:cc:d9:d6:5f:
6d:f0:92:cd:a0:30:64:44:99:e0:74:b0:16:4c:53:34:ad:79:
73:9f:3e:34:a2:97:82:7c:a6:ea:93:9e:75:d1:07:6a:89:56:
4e:4d:4e:2b:9e:f1:c8:2b:d8:0d:ff:6f:94:e1:d7:c5:cc:cd:
18:e8:39:37:64:35:36:75:32:86:7e:5f:7f:b1:ef:5d:9f:ff:
09:38:91:4a:0d:47:8d:83:47:01:78:68:9a:99:fd:1a:50:70:
6a:e7:9d:4e:93:20:23:ae:3a:c7:42:16:06:86:46:8f:a2:0c:
8e:9f:3f:fa:1b:57:84:0e:8a:80:58:45:9b:3d:24:e6:2c:13:
ed:8a:f6:82:42:07:bb:be:e1:7b:71:95:b0:ad:c9:0b:c0:35:
f9:f5:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:01:50 2025 by rpki-client