Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: vJWsGbLaQebl/XWE/rgqfCJics+jR3juWfC8s+f9ugo=
Subject key identifier: BC:9B:7A:C8:2A:76:A5:42:59:DC:72:8D:B1:20:BA:27:0A:C2:56:B5
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 01987C098DEFC1EA52067929C8823A5FC4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 21:00:57 +0000
Manifest this update: Tue 05 Aug 2025 21:00:57 +0000
Manifest next update: Wed 06 Aug 2025 21:00:57 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: kgURQ+OYDnXBtNnVV7EhG74vIOCjopiE/+SruhQ6Nag=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:8d:ef:c1:ea:52:06:79:29:c8:82:3a:5f:c4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Aug 5 21:00:57 2025 GMT
Not After : Aug 6 21:00:57 2025 GMT
Subject: CN=bc9b7ac82a76a54259dc728db120ba270ac256b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:5b:50:7a:8a:7c:87:c8:56:7c:15:25:fe:
43:19:20:2c:76:ad:74:27:8f:b6:01:53:0e:aa:5c:
89:f6:20:30:36:90:d6:0e:c6:47:1d:98:94:db:84:
7f:0a:d7:cd:2b:3f:e0:3b:db:4c:ff:b4:12:51:f3:
86:e7:d8:98:dd:8c:d2:b2:8b:a4:e1:58:f9:03:25:
31:83:8a:ac:0e:33:36:6b:a9:78:a7:44:2c:e6:be:
8d:cc:77:26:63:0a:81:37:c5:5e:fb:fb:d2:0d:18:
1a:8c:71:72:93:9a:7d:dd:d1:d3:12:f5:d6:62:e2:
00:00:a5:93:bb:92:f3:27:f2:17:46:9d:eb:4d:0b:
e7:93:86:e2:13:34:06:68:10:fe:2f:29:6c:9b:ff:
8c:84:b2:4b:03:c4:3c:28:1e:26:b4:4f:1b:73:4a:
b4:07:3f:af:ca:08:a5:7b:3b:26:4b:47:19:13:1c:
66:79:b7:f0:d7:d7:7e:c8:87:25:e7:40:d9:44:fb:
50:5c:67:7f:e1:56:d7:27:af:7f:74:18:7b:b6:12:
73:ba:ff:31:91:05:da:45:26:b0:f0:cd:38:86:8d:
03:e4:0b:84:bc:c7:98:15:e3:d7:99:a0:be:57:0e:
8d:e1:b4:fe:f5:4f:ff:a1:db:37:f6:e1:49:85:df:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9B:7A:C8:2A:76:A5:42:59:DC:72:8D:B1:20:BA:27:0A:C2:56:B5
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:dd:9b:1a:da:5f:e7:53:e7:5f:00:e3:9f:a6:25:41:11:a6:
0e:e7:2a:13:b7:19:76:03:04:43:a7:2c:ef:e2:4e:60:4a:29:
bd:a7:cd:8d:25:f7:94:25:18:83:53:e7:de:d5:c0:f9:f0:1b:
71:9c:0c:d2:c1:f1:05:ab:40:20:88:76:13:05:33:92:57:80:
93:a3:29:8f:ed:ca:3f:db:27:f9:da:a1:cf:a8:18:72:7e:02:
69:5a:e9:cc:46:e8:11:f3:af:96:ff:1f:d1:a4:b7:6d:5e:21:
53:bb:d9:14:3c:90:c5:e9:b5:50:90:c7:28:f4:94:47:82:ad:
10:2e:c7:23:88:b5:3b:6d:c8:39:ba:b1:37:f8:a3:23:93:64:
43:23:79:84:ae:3d:eb:64:c2:98:3e:6a:e1:45:11:96:eb:ca:
cb:44:b5:22:11:1e:a9:b4:11:31:28:33:a2:fe:e4:b5:82:e6:
34:1b:02:2c:22:6a:c4:f2:45:2b:85:5e:c7:bf:8f:72:f5:72:
cc:38:0e:11:8a:4e:71:a4:11:2d:af:63:25:ce:2d:8e:97:db:
15:ed:1d:be:7c:5c:2f:60:3b:97:e7:95:e9:e1:1c:27:be:fe:
ca:9b:56:eb:b4:ac:5c:20:83:db:91:04:23:99:c0:6b:27:70:
96:6d:53:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 22:54:24 2025 by rpki-client