Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: UE/htldf8qHEYTSLHVAYlBx+leRhCobk6fFUoy3eBIU=
Subject key identifier: 83:C0:97:45:69:18:50:D7:D4:60:31:96:09:73:1E:71:A1:74:F9:DB
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 019879E46A5C7672C63063FCA6947B21EF52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 11:01:09 +0000
Manifest this update: Tue 05 Aug 2025 11:01:09 +0000
Manifest next update: Wed 06 Aug 2025 11:01:09 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: Z884mm+h7bbvWzX0AyMZ59hSUxe5z5cDbm2SYfnm/rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:6a:5c:76:72:c6:30:63:fc:a6:94:7b:21:ef:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Aug 5 11:01:09 2025 GMT
Not After : Aug 6 11:01:09 2025 GMT
Subject: CN=83c09745691850d7d460319609731e71a174f9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:26:d8:45:56:04:e6:9d:93:cc:75:c6:21:
fe:87:d2:75:37:39:fe:bb:c3:94:bd:4c:d9:b5:76:
92:70:f5:33:df:36:9a:9d:7e:e1:54:08:f3:de:11:
ac:c0:e9:17:d2:99:42:81:a1:1a:b9:43:c2:d2:1f:
c4:d2:e3:f3:fd:ac:9a:ee:61:d0:93:de:61:dd:09:
3d:c6:a6:85:6e:3d:a4:7d:6c:9f:b4:57:1e:6f:f1:
70:74:2b:8d:c9:7f:77:c8:51:fc:8e:89:f2:57:0f:
2a:77:d2:b8:e5:c1:05:39:60:0c:88:f7:99:d3:1a:
83:31:5d:80:ad:e4:09:d3:e5:c7:d9:2a:e1:2b:4a:
34:1b:36:ee:3b:e2:1f:4d:d4:dd:d4:29:4d:53:8e:
1f:47:cd:8b:06:65:6c:64:9d:be:42:9d:50:b7:16:
65:fd:5f:8d:6d:e4:a9:39:e9:fd:d9:4c:c8:08:b0:
1a:9f:44:ed:56:0a:20:62:63:ef:74:dc:42:cd:a2:
67:7c:42:95:da:3d:6b:2b:46:02:49:a5:0a:33:20:
23:86:36:59:31:0a:53:f9:71:5e:a0:9f:66:e9:d3:
47:43:ed:09:6d:00:65:91:fb:58:38:97:6c:ef:a9:
90:7e:80:1b:58:4d:af:f3:47:93:af:70:83:23:d6:
54:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C0:97:45:69:18:50:D7:D4:60:31:96:09:73:1E:71:A1:74:F9:DB
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6d:8f:2a:1a:eb:56:9a:97:b4:b5:5f:ff:90:d8:25:f2:a5:
3a:56:1c:e4:88:a0:7d:c5:de:3e:1d:ad:c2:7d:80:a8:de:33:
ff:a9:cf:c7:ea:0f:37:80:74:82:b3:84:99:4b:f7:86:b3:f9:
91:57:b8:95:4d:ab:16:4e:62:90:3c:e9:21:92:b3:dd:0d:7a:
5f:59:2a:ed:b3:45:e0:8c:02:20:33:85:cf:0d:bf:99:f2:cb:
a5:52:ba:62:ac:c3:2e:cf:73:73:8e:12:39:68:d1:91:65:6a:
c0:d0:93:2d:d6:bf:2d:dc:f8:36:cf:b5:a3:72:6b:11:95:9d:
8a:4a:70:c5:17:97:cb:75:19:63:cd:7d:9b:4f:0f:2e:dd:14:
8c:e5:ad:1c:57:8c:6f:ff:12:6e:eb:d6:bb:59:c3:f0:8e:81:
e0:01:99:17:94:bd:5f:ad:17:82:a9:69:54:28:9e:d0:78:97:
9d:38:19:58:aa:34:6a:1d:51:8a:7c:9a:d2:b3:6e:fa:9f:20:
01:8c:83:7d:ea:dc:70:83:6e:63:3d:ca:94:a3:24:14:1d:52:
a6:7d:8b:b1:ce:f0:d8:98:67:9c:a1:f5:4c:db:fb:71:b2:b4:
66:8f:24:3b:c0:f5:3d:e3:62:ef:68:c3:18:de:e1:43:90:3d:
ac:42:19:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:02:35 2025 by rpki-client