Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: 4AFm5YTSLQgKuTfj70N2fLvykK0C2F62UgTdAwCpApo=
Subject key identifier: 58:92:2C:64:4B:24:87:15:A1:D5:61:63:93:59:41:0A:31:67:34:CA
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 019885453D751319BA88207A2BA0DEB07F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 161D
Signing time: Thu 07 Aug 2025 16:02:44 +0000
Manifest this update: Thu 07 Aug 2025 16:02:44 +0000
Manifest next update: Fri 08 Aug 2025 16:02:44 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: cgD+9YFfaXOJnY3NIGus/mILyyVorQeO9h5gHzhz6sw=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:45:3d:75:13:19:ba:88:20:7a:2b:a0:de:b0:7f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Aug 7 16:02:44 2025 GMT
Not After : Aug 8 16:02:44 2025 GMT
Subject: CN=58922c644b248715a1d561639359410a316734ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:82:0d:97:39:09:ee:28:75:9c:60:af:b3:
d9:cd:1c:d7:51:0d:ac:5a:cf:d8:cd:0c:26:75:2b:
39:2b:c0:94:80:65:25:a8:c7:73:07:ea:9a:33:8f:
a2:cf:fd:c9:14:c2:94:cf:cc:f3:1c:92:02:6b:da:
cb:a5:3f:4f:5f:bf:db:73:b7:dc:ef:bf:ef:3b:ff:
f4:c8:7f:18:65:c7:10:a0:8d:f9:b8:05:e5:cd:eb:
04:cc:db:f5:a6:51:fc:38:f5:20:9c:57:c2:10:9c:
33:47:14:a1:57:20:48:ac:d5:41:83:c0:e4:17:53:
95:17:a6:02:45:52:45:36:0a:77:41:b0:6e:44:77:
6b:f8:d2:2d:b4:85:d4:29:6f:bd:f5:ae:5e:ca:96:
13:c9:42:f8:c4:71:70:2e:0e:72:a6:59:db:17:c6:
1b:06:f3:87:01:a7:dc:72:6e:e8:90:59:ac:27:06:
d5:83:3b:78:e0:91:0b:32:77:35:72:7e:72:f7:6c:
39:31:4d:34:65:70:b6:54:b5:bf:93:15:04:e1:bb:
29:71:4c:4e:54:e8:42:58:f5:72:dd:33:8d:17:84:
50:76:d6:d4:e1:32:73:80:3c:7b:ee:c0:89:1c:c4:
b2:5e:28:78:bd:e3:33:fb:d7:ef:c0:70:ad:47:80:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:2C:64:4B:24:87:15:A1:D5:61:63:93:59:41:0A:31:67:34:CA
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:7d:c4:82:86:4a:81:75:c3:6b:1f:6c:8f:e2:c9:6b:f5:
99:63:f4:59:e8:53:31:3d:03:7d:ad:b7:5a:ea:7f:c7:68:d4:
8b:87:95:1d:b0:96:45:5d:65:f7:b4:99:3c:1a:ef:ea:a2:bd:
a7:5c:e2:36:fd:42:54:e1:5e:aa:6e:02:04:9b:56:14:d4:64:
57:10:89:41:25:03:7d:5e:39:42:5f:0d:4b:cf:59:21:22:e2:
1f:0c:2c:f0:49:4f:8a:b9:7c:45:c2:6a:94:6e:c7:d8:f7:8f:
01:c2:06:ca:20:ee:5a:1f:5e:08:88:14:31:22:4d:e0:b0:08:
70:bd:3e:d2:0c:a0:0f:89:74:42:3d:31:17:b2:11:ab:2c:bf:
24:d3:ab:f0:0f:a8:62:b9:5d:4c:34:56:5a:24:15:be:82:bf:
8f:11:0b:13:46:c1:63:f1:0f:f2:ea:5d:12:c0:fc:34:5b:1a:
06:cb:fd:95:75:76:90:c1:2c:e0:6e:25:10:08:dd:d6:28:79:
85:eb:71:c3:f3:91:f5:e9:e1:9c:01:5e:70:a0:1f:43:d2:c4:
19:1a:5f:04:ec:0d:83:7e:c9:ae:f0:42:7a:ac:64:dc:e7:a3:
c0:c6:19:c1:d4:3b:96:9f:5e:07:bb:81:7e:e8:1f:e6:3b:90:
1a:c4:b9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 23:59:33 2025 by rpki-client