Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
File: o-boI_bdpn0oOp9BpykJkGrJqDc.mft (raw, json)
Hash identifier: TUfMytJYceyhNSQiEuRMkxXTrBSnq8Cl3jsn00BLKGI=
Subject key identifier: 8F:1E:C7:F0:1B:36:40:B4:A9:42:C4:F2:62:D6:43:E6:96:A3:25:C3
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019893A3CEFDD7EE70677919F79C0BA83AE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
Manifest number: 162D
Signing time: Sun 10 Aug 2025 11:00:42 +0000
Manifest this update: Sun 10 Aug 2025 11:00:42 +0000
Manifest next update: Mon 11 Aug 2025 11:00:42 +0000
Files and hashes: 1: 6_a-aeOKvfIVcw7qcE2cQDyNLOY.roa (hash: WdgelCFy5E02aPpURS4UTgXi3wN5eWjkYjrBc+OZPSI=)
2: 8WHNdpvFKOcR1NYdd7sGV-5deCM.roa (hash: 1JOP6RuQiDJQnqR2UlsIBnEE2gJbfnp6EUOaKdVsJlw=)
3: aJfMXR0KgD85hp2B5m_o11nFhQY.roa (hash: KbbBuzotL/jgzy+EpOCalbhLtTBDf/lVI3VgkQVW38s=)
4: o-boI_bdpn0oOp9BpykJkGrJqDc.crl (hash: c119571pte/FwXT2gui6mbDIKhd/EhNyH9uoLFfBcPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:ce:fd:d7:ee:70:67:79:19:f7:9c:0b:a8:3a:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Aug 10 11:00:42 2025 GMT
Not After : Aug 11 11:00:42 2025 GMT
Subject: CN=8f1ec7f01b3640b4a942c4f262d643e696a325c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:3e:5f:bb:96:a2:58:de:c7:ec:a7:0b:3f:
94:08:a3:44:1e:5f:95:c2:3d:31:ea:94:68:ed:7e:
93:fb:26:09:f7:63:4d:e2:e6:f0:30:62:c3:7e:b8:
54:81:63:74:bd:fb:83:6a:4a:47:c8:87:e5:b0:c0:
af:fb:3b:58:5c:df:e6:05:ba:76:8d:8e:3e:96:a2:
b0:13:5d:81:e4:5f:57:c0:89:4d:26:63:72:1a:c0:
b6:b8:59:46:9a:34:4b:07:7a:0e:40:0f:82:56:c1:
d8:93:db:bd:54:74:7a:79:46:5d:0a:9f:03:53:54:
08:bc:f6:9d:a1:1c:59:ea:79:8e:a3:9e:26:8d:bb:
89:58:e7:34:cc:c4:5c:fd:f4:c6:dd:81:11:e4:4b:
27:ee:c5:29:7c:fe:4b:7c:1c:f6:ae:07:3b:3a:89:
e4:cc:0e:d9:e8:35:5d:b9:20:90:8b:d4:df:0c:73:
5f:9c:a7:16:30:41:d9:28:61:60:7a:d5:e0:84:6e:
d1:51:71:14:7f:c7:f0:e6:ce:e9:56:65:42:4a:a5:
e5:76:2c:0e:10:63:0a:51:73:e1:7a:55:95:5e:df:
3f:f4:ab:21:e5:5e:9d:88:2b:49:12:70:14:39:6f:
e5:91:b1:6e:f4:5c:9b:f6:dd:64:1a:aa:e4:ef:59:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:C7:F0:1B:36:40:B4:A9:42:C4:F2:62:D6:43:E6:96:A3:25:C3
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ed:08:78:a3:e0:61:6f:6f:d7:7c:eb:5d:d0:22:20:70:f9:
8a:e4:17:c5:08:fa:c3:d3:8f:15:09:52:bf:e9:1f:77:93:d7:
a6:ea:86:bb:d3:1d:76:ac:4e:8c:c7:80:fb:a4:f3:e7:e4:2e:
4b:c9:bc:f9:32:80:29:5d:a6:35:1b:61:c7:cb:f7:71:98:f3:
fe:dd:ef:99:ad:9c:a2:39:09:8a:5f:57:a3:14:71:be:95:19:
ca:87:2e:1a:0d:4a:02:15:9c:4a:43:72:b1:75:6f:0e:44:e7:
2a:2d:49:30:d3:d4:ee:c8:0a:18:d6:42:36:ae:4a:ca:e0:dc:
e9:27:e7:0a:e7:33:a3:bc:b2:ed:1c:31:e8:ec:77:6b:dc:ba:
2d:e4:61:36:46:25:37:6c:3e:63:df:bd:f4:f6:02:cd:e1:7f:
3f:4c:db:75:fe:c4:31:85:72:9d:50:e3:59:ed:bf:df:47:4d:
5f:d6:de:63:83:5a:a4:37:9d:85:fa:e8:f4:10:e2:9c:f8:26:
99:d9:1d:b5:43:68:72:1b:73:ee:52:79:06:42:ed:d0:cf:bf:
58:4b:fc:bf:94:b5:1e:97:3f:ae:33:9b:a3:a1:e7:fe:e8:22:
7a:9b:fb:12:61:1d:0d:12:60:17:47:4c:81:21:47:ab:9f:c9:
aa:4d:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:10:39 2025 by rpki-client