Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: 8cbWSk7/M6WQ5d7yNLz1moh8vwaImpixvrJR8kapNzw=
Subject key identifier: B8:E6:6D:62:05:82:50:AE:1C:B1:39:FD:24:58:19:93:CE:2F:18:3C
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 019873E2CEEFB253018E09177347F77B3C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:01:40 +0000
Manifest this update: Mon 04 Aug 2025 07:01:40 +0000
Manifest next update: Tue 05 Aug 2025 07:01:40 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: d2+NcjpTMLY2fT1gge4lFMIv9XwxIaPS8oP0HMAOADk=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ce:ef:b2:53:01:8e:09:17:73:47:f7:7b:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Aug 4 07:01:40 2025 GMT
Not After : Aug 5 07:01:40 2025 GMT
Subject: CN=b8e66d62058250ae1cb139fd24581993ce2f183c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:3a:b0:e0:38:1c:b5:d7:65:ff:da:86:c1:
fe:ff:6a:94:3a:e9:69:22:5f:f1:9d:10:a5:71:be:
0b:1b:3b:7c:71:a8:6b:ca:ab:25:5e:a1:d5:28:c3:
e4:7a:ca:2e:85:d3:20:d4:3b:26:e5:2c:53:bd:8b:
bb:21:57:3d:7b:1f:89:9d:6e:4d:21:34:24:ae:fa:
1c:e1:97:a7:01:88:f4:e5:89:1c:dd:4a:ad:83:cb:
9f:24:a3:4f:74:e8:a3:62:fb:73:d5:a9:71:5d:84:
d6:72:72:80:40:e6:2a:f9:19:9d:bd:c2:e6:4e:b5:
75:86:29:15:bc:13:b3:bd:d7:44:8b:47:af:ab:84:
f6:8a:50:a0:50:06:2f:2d:c6:72:7d:60:4b:20:d6:
e6:17:1f:bb:f3:04:87:1c:c9:14:05:62:d7:ec:3c:
c9:b5:eb:df:c7:d4:b0:c4:38:e4:90:6a:73:92:87:
4e:f8:bc:d3:91:84:f1:8d:d1:b4:68:1f:e3:ab:24:
7d:ff:8c:ac:4e:1b:75:cd:57:b1:e1:35:88:71:e7:
34:49:16:cc:99:a1:7d:ec:60:5b:42:0c:66:54:06:
9b:6d:a5:12:76:31:d7:a4:bc:4b:29:c7:12:8b:d5:
7f:6b:d5:14:5a:f7:b1:5f:0f:ff:c7:d7:f9:c5:be:
90:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E6:6D:62:05:82:50:AE:1C:B1:39:FD:24:58:19:93:CE:2F:18:3C
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4e:e7:34:fb:53:3c:f0:47:64:1f:75:15:53:2b:11:71:48:
79:84:a1:c0:55:bc:58:db:78:90:6a:dd:41:77:e8:24:e8:c2:
1d:ca:e9:a7:5d:ce:81:b0:ab:0b:85:b0:6b:e2:94:18:5b:c7:
c7:9e:e8:12:98:e0:ef:3a:b7:47:aa:f2:d6:ce:48:e1:92:b4:
d4:04:73:ef:d3:a2:16:e6:1f:89:16:94:eb:23:9e:8e:ad:7d:
14:d5:60:3e:06:89:cd:40:04:6d:b3:f9:3c:bc:56:a8:dd:89:
09:b8:4b:c7:2b:e2:e3:24:b5:9e:6a:ed:7c:db:0a:5c:a8:79:
e3:5a:5e:6c:40:5d:0b:f6:f4:03:59:1f:6e:24:2a:c4:71:df:
fc:3b:6a:85:d9:64:ca:25:92:08:13:62:a0:97:53:0d:7d:96:
d8:7e:67:6c:51:27:e7:a2:6a:4b:5e:87:36:ee:4f:b0:70:b0:
f4:91:38:e7:92:b2:80:40:7b:7a:f4:74:75:41:c0:85:dd:bd:
25:df:72:84:22:65:97:67:6d:48:38:72:f1:c0:ea:76:dc:a4:
12:24:47:04:a3:15:57:3e:f1:33:8c:fd:3e:f5:18:ab:cc:21:
73:98:2b:09:6b:b1:36:e0:b7:f3:aa:e2:f2:aa:e7:3b:f1:21:
d1:c6:7b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:39 2025 by rpki-client