Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
File: O-LwFktmp2eVhgtOo1hvrVY7rEc.mft (raw, json)
Hash identifier: NYr/MgLM2haaMgJIarLDddRNdeFoGuA2oz+BwbNTRcA=
Subject key identifier: F1:A2:CA:94:E8:85:D1:ED:CD:2D:F2:14:6E:47:0E:41:61:21:56:6A
Authority key identifier: 3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
Certificate issuer: /CN=3be2f0164b66a76795860b4ea3586fad563bac47
Certificate serial: 01988D6ADA978096C44DE67E5E8ECB7E00E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
Manifest number: 162C
Signing time: Sat 09 Aug 2025 06:00:46 +0000
Manifest this update: Sat 09 Aug 2025 06:00:46 +0000
Manifest next update: Sun 10 Aug 2025 06:00:46 +0000
Files and hashes: 1: O-LwFktmp2eVhgtOo1hvrVY7rEc.crl (hash: KqFknx8HpNpweE9b45iAcikpT8wUMyVZZ0bMPXQIdoY=)
2: ZlDfI1uu-dfJ7bkWIwNbrouZ8LU.roa (hash: RwbfiOlsTOjHsdHQ269mkGq2Xn2wHvdgM/XYUPYNH8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:da:97:80:96:c4:4d:e6:7e:5e:8e:cb:7e:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2f0164b66a76795860b4ea3586fad563bac47
Validity
Not Before: Aug 9 06:00:46 2025 GMT
Not After : Aug 10 06:00:46 2025 GMT
Subject: CN=f1a2ca94e885d1edcd2df2146e470e416121566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1a:cf:6f:32:f1:f9:09:c7:a1:49:62:34:07:
69:5f:7f:59:80:b4:44:86:98:57:89:eb:27:d8:92:
40:68:76:8a:61:c6:03:0e:e1:a3:e1:72:17:50:13:
c1:33:e9:e1:96:07:68:7e:af:2f:ef:ec:fe:0a:73:
26:dd:83:c1:86:a3:00:bc:97:cb:94:c2:30:fc:3c:
ad:c6:41:2f:47:d7:60:ae:99:75:a1:db:e4:62:34:
bb:4f:0e:af:5a:cb:ed:9b:dc:4f:7a:df:f6:f4:f2:
52:97:40:26:72:4d:a8:23:71:27:15:1b:58:0b:70:
7e:f4:ea:6e:1b:f6:b0:c0:9a:5e:46:50:9c:3a:9f:
80:d6:59:1c:0b:00:c0:8e:ec:54:83:a1:0b:6d:31:
3e:e3:21:f5:a4:4b:7f:29:9d:b8:92:d3:a8:81:33:
c3:e1:56:97:f8:08:a5:c8:0d:81:8a:ba:1d:a1:14:
0f:68:9a:e0:eb:af:04:db:2e:9c:20:08:4a:9a:7b:
7f:83:09:62:15:d4:7f:e3:09:55:9c:2f:b2:c1:ba:
78:85:4e:d3:43:7c:d9:19:90:80:d6:cb:77:c1:f2:
23:a8:29:9a:ee:1b:b4:6c:1b:50:f1:a1:55:3f:df:
16:88:63:69:7a:9a:17:11:37:be:dd:34:c7:a7:f3:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A2:CA:94:E8:85:D1:ED:CD:2D:F2:14:6E:47:0E:41:61:21:56:6A
X509v3 Authority Key Identifier:
keyid:3B:E2:F0:16:4B:66:A7:67:95:86:0B:4E:A3:58:6F:AD:56:3B:AC:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LwFktmp2eVhgtOo1hvrVY7rEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c72b67-76ec-4afa-b376-f9ad38051220/1/O-LwFktmp2eVhgtOo1hvrVY7rEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:af:04:66:6b:40:b3:e0:e6:93:f5:26:93:13:7f:7c:7f:2d:
c6:88:2f:46:fb:c6:26:0b:ee:55:d7:ea:b2:e0:b8:40:2d:1e:
e6:12:63:82:32:34:91:d5:19:7e:85:2d:d3:7b:ca:d1:9d:15:
ea:6d:d0:61:ff:87:20:6f:a8:1b:8d:29:d6:c3:d2:fc:2d:c6:
98:0f:f6:c8:de:08:25:d8:b0:66:0b:10:45:59:e6:b7:7c:2f:
7d:ed:e9:1a:82:35:3c:11:18:33:27:d5:be:f2:b1:a9:5e:dc:
f2:ea:f3:ba:8e:65:b1:78:54:e8:76:c5:42:94:ff:5d:cd:f3:
05:96:39:eb:6a:e7:c0:df:30:e8:28:45:84:3a:2d:d0:17:51:
c2:ee:ba:c1:f6:28:00:3c:29:e8:c0:c4:57:2b:86:8c:24:bb:
9f:e4:da:fe:01:ae:7f:26:64:19:36:63:e6:91:b4:91:f5:21:
57:66:e6:9b:e6:c4:0b:a6:a3:99:66:e0:6a:72:28:f9:e5:21:
3c:3a:52:d2:78:fa:0d:b3:76:d6:8b:6f:1d:f6:dc:95:64:18:
d7:fe:2b:2e:cd:73:c9:c5:14:79:83:89:f1:86:4a:19:da:25:
e3:fd:8e:ef:88:0e:e0:8f:c7:7d:e5:2d:6e:92:6b:71:28:53:
2c:d8:d4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:48 2025 by rpki-client