
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
File: o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft (raw, json)
Hash identifier: FiA3WHI1Vjk1C9rzF8xpxjluOxQw4epCJgQW3A85uFs=
Subject key identifier: 98:A0:87:D4:45:49:06:C8:BD:92:C3:B0:8D:2A:9F:09:A4:D1:40:99
Authority key identifier: A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
Certificate issuer: /CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Certificate serial: 0198726253B048686BAD48EDD85D345F87A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 00:01:43 +0000
Manifest this update: Mon 04 Aug 2025 00:01:43 +0000
Manifest next update: Tue 05 Aug 2025 00:01:43 +0000
Files and hashes: 1: 0oVfx4tRY8OdO-PChC_5XteysH0.roa (hash: GbKCzhdeN2aFWua1Fqr/ZrjdIb+wfBYag5SVn3tUFwo=)
2: GZBEBDVvuKrEI33iqx5474Emrgs.roa (hash: SDZZZgxy/5ICMbfCuvtBTCFMkjZCnFz//IQw8odu3Ls=)
3: o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl (hash: /Exz3Al2sJ9c9XXpfnLrY+Ka2nG84F8YT6faYiXpFL0=)
4: oKzbCL58HVtAnFWpHugzLfrJ8iY.roa (hash: SJH3c6VE4yqyIoy12Om89pergpbwGay6VY1wyMQ+Tyk=)
5: tNdxttBXTBiTceqWIf2Yd2dCvUo.roa (hash: 2+tcAly28pcm8UnLTqlieZLYgz2WMmQ9UXx8tjmG79M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:62:53:b0:48:68:6b:ad:48:ed:d8:5d:34:5f:87:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3679bf4c627d85fee2ce13a53c44851b9df0563
Validity
Not Before: Aug 4 00:01:43 2025 GMT
Not After : Aug 5 00:01:43 2025 GMT
Subject: CN=98a087d4454906c8bd92c3b08d2a9f09a4d14099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:e3:30:63:20:00:7d:5e:e4:d3:1e:29:ad:
7b:1f:2e:a7:d9:8f:5d:26:47:d3:ec:f7:12:29:6d:
db:5d:f8:63:82:f7:dd:8b:e5:73:b8:07:ae:af:81:
81:ba:52:2b:ea:05:78:8e:15:23:3f:e7:3b:71:c8:
97:0a:40:e0:c7:93:f4:ed:99:8b:cc:c8:ca:74:76:
1e:b8:b8:da:ce:16:75:ea:47:ac:bc:d1:05:e5:f5:
8a:7f:02:1e:ef:95:3c:91:aa:7e:45:4a:23:cf:40:
5f:34:02:97:3f:00:8a:0a:7a:25:de:23:9b:85:67:
a1:c4:83:29:a4:54:05:3b:a3:7e:bc:38:b8:e2:e1:
69:b1:41:51:0d:d8:e0:48:73:65:14:23:ac:bb:69:
e5:e0:f7:16:63:03:4b:fc:dd:b7:80:43:6c:57:65:
9d:57:e6:35:99:31:8f:dd:06:ce:52:f6:cb:cb:fd:
cc:99:99:ca:8c:17:85:a9:6c:ea:34:14:2e:ea:c1:
8b:b6:1b:65:19:1e:f7:3b:4b:c1:80:b2:1e:46:a3:
c3:60:ae:2a:b4:38:97:83:ab:65:35:3f:21:2c:43:
14:5b:32:6d:93:58:04:65:9c:cf:c9:16:8e:96:ec:
0d:11:10:dd:2a:fc:c7:35:65:c2:5d:09:f5:57:99:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A0:87:D4:45:49:06:C8:BD:92:C3:B0:8D:2A:9F:09:A4:D1:40:99
X509v3 Authority Key Identifier:
keyid:A3:67:9B:F4:C6:27:D8:5F:EE:2C:E1:3A:53:C4:48:51:B9:DF:05:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2eb9MYn2F_uLOE6U8RIUbnfBWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b62e59-e2c5-4a76-8b67-55672634cbc1/1/o2eb9MYn2F_uLOE6U8RIUbnfBWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:94:86:dc:a0:f6:98:ad:b8:e9:3b:27:8b:4f:0b:9d:9b:14:
69:e8:73:a4:fd:a1:26:f8:c7:fd:1e:87:b1:78:5f:5e:9e:b9:
a7:84:48:c0:83:c7:ae:57:d4:ff:79:be:d1:9e:18:f3:c5:5f:
e9:f9:43:04:64:4d:19:fc:79:d9:c0:73:94:f5:c5:ca:28:8e:
07:df:fc:10:45:14:f5:e3:ff:ec:0e:47:e0:b1:5f:3d:b3:44:
80:46:19:e1:f7:f3:aa:56:cf:30:47:88:7e:9a:af:f0:12:c6:
30:14:d2:5f:ff:e0:0d:cc:cc:31:38:65:07:37:2b:a5:28:c6:
7b:61:a0:07:07:24:d5:d9:0c:53:78:4c:f7:f2:88:89:27:79:
82:cd:7f:cf:d0:af:a2:3d:29:b8:4d:a7:15:0e:35:27:40:be:
1e:93:24:7a:48:d2:dd:2a:6c:11:65:fe:32:14:15:2c:1f:42:
c9:0d:57:af:e2:6c:59:04:41:1f:94:35:41:a4:8f:7d:06:6d:
e8:b3:15:97:f0:ea:f7:db:61:2e:5a:d9:91:d6:67:0b:74:a3:
0c:f8:50:10:1e:60:6b:92:91:8e:fd:69:ca:f8:f6:11:87:83:
60:3a:36:2b:27:c7:c0:58:e4:6a:22:7a:e1:86:43:b4:83:7d:
c3:f8:92:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:23 2025 by rpki-client