Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
File: OQJ3OPl4_tokqdh7DLi7mqevVA0.mft (raw, json)
Hash identifier: YQ1j9KFNPCN7Oog921l/bZb+qBLaLAzXXq+JCLtQQ6I=
Subject key identifier: F8:69:C0:B9:58:16:C6:A9:C5:98:E1:3D:70:AD:C8:0F:EE:E4:18:B5
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 019847E4CC9A7BEA2F9651F17EB55ADBA240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
Manifest number: 160A
Signing time: Sat 26 Jul 2025 18:00:33 +0000
Manifest this update: Sat 26 Jul 2025 18:00:33 +0000
Manifest next update: Sun 27 Jul 2025 18:00:33 +0000
Files and hashes: 1: OQJ3OPl4_tokqdh7DLi7mqevVA0.crl (hash: BsrhFLZepbVV0flzmHXN+bwD0OlumLlqMVc9nVGNwI4=)
2: THEjTsFNcxDVZEOdq3GfXqXC4zc.roa (hash: x5CBmcScUC+Y/Wuw5WgYT+dNtpSqSEasQSVqzZJLzc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:cc:9a:7b:ea:2f:96:51:f1:7e:b5:5a:db:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jul 26 18:00:33 2025 GMT
Not After : Jul 27 18:00:33 2025 GMT
Subject: CN=f869c0b95816c6a9c598e13d70adc80feee418b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ef:85:0f:b5:be:6b:7d:d8:98:cf:94:0f:46:
1f:4b:f2:fb:b9:72:bd:1c:44:b5:f1:42:3e:2a:fe:
65:c8:17:80:e4:a4:5c:03:a2:30:c6:4a:2d:67:b0:
4e:5d:58:5a:f2:52:ce:67:a7:a4:6c:d5:45:46:f4:
9f:b4:13:53:48:6c:9c:34:3f:ff:a0:39:3d:16:bc:
fd:a3:43:35:77:29:51:4f:91:67:43:8c:f9:1b:ed:
ff:b0:04:bc:c7:2b:e7:ae:23:f2:c3:7c:75:3b:89:
46:56:81:56:e1:d7:3a:ae:89:ba:4f:00:8c:29:31:
2b:7b:92:2d:b9:d3:73:8e:27:2b:b3:55:07:f0:25:
ce:1a:46:23:6c:58:ca:0c:c0:26:26:23:fe:57:8e:
2b:e1:49:bc:a6:ac:ae:c5:8e:2c:01:1c:f3:d7:bc:
8c:74:8a:67:3a:e7:a4:de:3f:88:62:92:e5:ef:31:
6e:f0:3f:f2:2e:b4:f1:43:40:e7:fb:d6:46:5d:d4:
9d:f1:56:9d:0b:9b:8f:a8:83:ef:93:cf:cf:c9:1d:
27:e1:c2:b0:ce:1a:7e:00:91:8a:95:dc:ef:bd:a3:
bf:95:26:74:2f:07:59:53:b3:5a:91:05:f7:b1:88:
ac:28:6f:53:c8:f7:13:d4:26:04:83:5c:28:bd:93:
16:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:69:C0:B9:58:16:C6:A9:C5:98:E1:3D:70:AD:C8:0F:EE:E4:18:B5
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:74:51:1d:53:9f:83:b8:4a:23:af:b4:05:4c:3a:85:a7:3f:
25:70:65:5b:1e:cf:92:15:2b:9f:eb:3c:31:8b:08:f9:10:ab:
d4:cd:39:99:2f:4e:5c:45:85:66:77:f5:3d:3d:a1:70:e4:8a:
89:63:d4:e1:40:38:09:72:b1:f8:75:bc:e6:49:1a:ac:df:6b:
a6:2a:e1:f4:ed:58:5f:f6:57:f9:ad:c6:e9:d2:fb:cf:54:67:
69:3f:9c:01:40:bc:b5:c9:b5:c6:18:a8:86:74:09:c5:c1:66:
c0:de:ea:c8:b2:08:e9:cc:79:54:7f:21:4e:8c:2f:d7:ed:21:
11:0a:81:9a:2a:3b:c6:e3:7e:cd:47:25:9d:97:69:df:dd:12:
b7:1b:5d:fd:50:67:7b:83:b6:08:1d:88:87:95:43:5d:2d:d6:
c0:9f:cf:b2:f1:59:77:81:8c:ab:7c:50:98:77:0f:85:30:13:
8c:23:2d:b0:41:f0:a3:22:a4:eb:2e:b2:a5:fd:69:da:d5:63:
87:6f:90:35:02:ea:5f:4b:42:06:28:fb:df:21:d8:d2:ee:32:
bc:84:9a:02:8b:1c:bb:37:87:4a:e4:a3:69:7a:64:01:ca:3a:
73:b8:e8:a6:c3:91:11:1a:cf:46:3b:ac:a2:47:b2:5a:49:26:
73:b4:10:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:27 2025 by rpki-client