Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: PFGIA5AiCTd8VimOmCGatCQbL6G0Dv44M4irvMm0TNM=
Subject key identifier: DC:20:E9:1D:B7:3D:AF:1B:C2:19:47:21:73:4F:0E:DA:6E:F2:D3:85
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0198A0BB2E87D26F9C1230CF537E0BA666C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 162E
Signing time: Wed 13 Aug 2025 00:01:18 +0000
Manifest this update: Wed 13 Aug 2025 00:01:18 +0000
Manifest next update: Thu 14 Aug 2025 00:01:18 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: NUy+j2nsY7W9jh4YCsZAVhnVDMQCjgf3LBh9ZismPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:bb:2e:87:d2:6f:9c:12:30:cf:53:7e:0b:a6:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Aug 13 00:01:18 2025 GMT
Not After : Aug 14 00:01:18 2025 GMT
Subject: CN=dc20e91db73daf1bc2194721734f0eda6ef2d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:6d:03:af:5e:52:fa:61:0f:2d:8c:10:24:
2c:92:24:44:d6:c0:70:ed:40:9e:30:3e:44:94:c6:
68:b4:3e:1b:24:3b:74:36:7d:03:38:0c:87:da:3c:
2c:af:7e:be:46:f8:9a:c9:b1:d8:b8:22:62:c0:1e:
5e:32:1f:18:3d:34:76:54:03:b0:e5:7e:a6:0b:3e:
3e:90:28:5a:3e:66:f8:48:44:a6:a8:72:77:85:e6:
8a:eb:ea:2b:3b:ce:48:cb:e7:f8:a3:b9:15:20:eb:
dd:a3:72:28:0b:75:70:3c:0d:1e:e6:7a:57:ec:5f:
3c:82:b9:9e:9a:b3:af:2c:b2:2b:e2:f6:c6:17:d2:
ba:03:88:b1:e2:a2:2c:df:31:1e:ae:de:99:90:91:
27:54:12:6c:4e:8c:19:ac:1c:d5:0a:34:80:7c:5c:
df:5d:c0:2a:e9:97:c4:a4:18:9a:54:b3:6a:df:44:
51:93:d2:8e:17:c2:a1:9d:c4:25:5c:ce:d2:a5:70:
53:84:7f:e0:02:5c:9d:66:26:35:de:b5:06:e3:9c:
55:bb:f4:f0:03:39:5a:6f:63:d4:a3:1f:f8:1f:09:
f7:3f:c9:c8:3a:74:4f:e6:d1:0a:ec:50:4b:c2:e2:
2f:46:5b:cb:f1:9a:e0:f2:55:3f:d1:c8:ea:52:b2:
10:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:20:E9:1D:B7:3D:AF:1B:C2:19:47:21:73:4F:0E:DA:6E:F2:D3:85
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4f:b6:90:4f:3a:e3:2f:6a:df:8d:b8:96:04:0b:9d:e1:8f:
6d:d8:36:cb:da:38:da:c4:0b:6e:53:35:9d:14:ec:cc:95:12:
53:6e:d2:51:a1:84:5d:8f:b5:aa:f5:7c:3d:47:3b:db:7c:e6:
51:df:05:b8:7c:03:e7:38:95:04:26:36:48:02:bc:ec:56:51:
9f:39:ff:b7:b9:87:0a:7d:a0:e3:05:a5:c6:e1:78:9b:ca:c1:
0a:9f:65:c2:92:d3:49:e2:ed:50:60:6b:b9:35:12:bb:50:27:
68:d9:94:c4:65:56:54:53:aa:db:f5:44:fb:a4:55:43:ce:a2:
e4:88:4f:de:9a:f9:fd:99:0d:f0:29:a0:f9:9b:e9:11:2f:a2:
e7:77:8f:0a:7a:fe:f1:06:b4:44:13:7e:21:02:03:d6:d6:c7:
df:b8:88:40:f7:35:cb:56:65:fc:e5:d0:4e:15:56:d3:0c:90:
a1:52:34:14:8c:13:01:3a:02:2d:f2:15:c6:8e:81:73:e2:36:
76:e5:59:86:85:d5:35:f5:49:35:9e:06:fa:91:51:fc:3e:a9:
bf:d0:72:86:bf:71:5c:78:e8:b6:3e:c3:d5:7b:44:c7:52:ad:
eb:eb:cc:c8:a4:77:ae:5e:1c:04:cb:a0:ed:7d:e2:bb:7e:9e:
0c:53:58:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:24 2025 by rpki-client