
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File: ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier: 9a5JNV1g9WMBuX3gcFbDYBjr0M9GJ1Pyy0J9I99JcIQ=
Subject key identifier: 7E:66:7D:70:46:79:EE:3E:C0:3E:40:9E:6C:AA:78:CA:39:2B:5A:CC
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer: /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial: 01987CAE66EE94BA8424DC80E0F3168F7600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 00:01:01 +0000
Manifest this update: Wed 06 Aug 2025 00:01:01 +0000
Manifest next update: Thu 07 Aug 2025 00:01:01 +0000
Files and hashes: 1: 1-oPnzeRnS2wes3eHWFhju7Aog-g.roa (hash: 0Z/IUXs4OK8CJd/fYdgboQWjbgJJCz+sIFSEwO7NpmA=)
2: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: g8xBZfsfuQT7IvBLYhpeukqOFAamJhu/2qXCSErsIx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:66:ee:94:ba:84:24:dc:80:e0:f3:16:8f:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Validity
Not Before: Aug 6 00:01:01 2025 GMT
Not After : Aug 7 00:01:01 2025 GMT
Subject: CN=7e667d704679ee3ec03e409e6caa78ca392b5acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5d:0c:d4:c6:aa:4f:b7:db:99:c9:2f:d8:a8:
d8:bc:32:84:62:b1:a4:8f:6a:24:c5:b1:e0:ff:30:
c0:ec:15:2f:41:c1:7a:fc:7d:61:37:90:a8:f8:24:
3a:98:dc:60:63:f9:44:cc:16:87:01:5b:bd:6b:ae:
d9:6f:15:6f:8e:b0:b0:ca:34:37:ca:a5:6f:61:bd:
ec:c7:0c:ff:c2:5c:96:ae:fa:a6:7f:53:34:2b:d9:
28:0b:06:84:85:5a:fc:76:a1:9e:de:b6:16:70:42:
2a:df:6b:53:db:38:b0:0e:30:82:f1:f4:7c:20:f0:
63:4f:90:52:cc:15:1c:b3:b5:cf:c5:bc:3d:8b:3d:
53:49:89:1b:8b:c6:27:36:d3:2d:72:b5:e0:d9:90:
7d:c0:a1:4d:a1:f8:06:51:02:54:14:93:a1:f0:dc:
3d:af:1a:c7:b6:8e:81:d0:58:83:5c:ee:f4:85:32:
b0:75:96:3d:86:95:a0:82:45:8e:11:f6:a9:a6:d8:
b5:1d:5f:40:dc:e7:99:a0:f9:37:7b:25:18:e7:37:
dc:58:5f:ee:15:30:18:e3:1c:b3:2a:50:98:d7:bc:
79:fa:a9:12:22:4d:83:89:ec:1c:39:c3:54:4e:cc:
1d:e5:87:00:cb:e9:88:46:b2:ce:c8:ce:71:3b:10:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:7D:70:46:79:EE:3E:C0:3E:40:9E:6C:AA:78:CA:39:2B:5A:CC
X509v3 Authority Key Identifier:
keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:17:c7:3a:f2:7c:63:93:fe:f9:a3:7b:ef:f0:30:96:bf:8e:
08:ff:90:6d:12:bb:6b:62:26:f0:e0:a3:32:d6:5f:a5:17:c6:
da:53:fc:c9:ae:83:af:a2:4b:7a:65:41:8a:60:7d:70:c1:ea:
14:66:d6:27:66:c7:e7:89:a8:6a:cf:82:cc:17:dc:6f:22:f0:
6b:98:e8:2b:b5:fc:d5:bb:f0:df:58:5f:db:e8:7f:3d:58:cd:
da:73:81:cd:c0:ab:d9:b2:05:49:a9:50:40:9f:30:fd:db:cc:
cf:29:8d:b1:5a:b8:a5:10:6f:0a:ee:ba:00:45:8a:c4:c7:01:
34:58:c4:2f:80:f7:c4:d8:39:00:1d:2e:e6:52:90:10:1a:27:
1e:e5:71:9f:f9:50:0d:a5:5f:85:76:e6:e0:d2:28:68:48:7f:
cc:71:af:16:b2:71:c1:3c:01:5c:e7:d0:5b:d6:c1:33:f3:ac:
88:d7:83:d6:e1:26:27:cd:9b:3c:46:ed:90:1e:25:4d:fe:6f:
9e:14:16:ff:79:eb:61:4d:19:96:2d:53:8a:78:21:9b:a3:d1:
17:1c:87:19:aa:64:c2:ce:b3:c3:03:bd:f9:ca:31:c1:f8:66:
63:0c:57:80:e2:8b:7d:0a:7b:3c:5d:0a:63:62:4a:3c:c4:82:
04:c9:54:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:59:14 2025 by rpki-client