Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File: OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier: lmg/1/ZpBxFVRrsiZazy9L4unuye2jNguFv/mMBzxDo=
Subject key identifier: 58:49:A9:70:59:FD:02:8C:F7:CF:44:3B:0B:81:78:A2:2D:12:FA:19
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial: 01984C2F2E3AB3AF3F590BA3D3D2B39F2879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number: 160A
Signing time: Sun 27 Jul 2025 14:00:17 +0000
Manifest this update: Sun 27 Jul 2025 14:00:17 +0000
Manifest next update: Mon 28 Jul 2025 14:00:17 +0000
Files and hashes: 1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: nfHcPMiSe1b7FhJbUWXlNg3ueEq3AZwZldPUOj0bN1c=)
6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
7: W0I5WxQMrOu6TANHFOGcvsplCew.roa (hash: as8TMPog4cNQstxcdryoIwh9zVe/CWxue8zaTtgppZI=)
8: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
9: qwwHopD_0G8M1Je41mhruAKGMpE.roa (hash: aHrYRaDs2jeGMQeUQIc+2frl2SVKEgdlFJTzXtA4yQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:2e:3a:b3:af:3f:59:0b:a3:d3:d2:b3:9f:28:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
Validity
Not Before: Jul 27 14:00:17 2025 GMT
Not After : Jul 28 14:00:17 2025 GMT
Subject: CN=5849a97059fd028cf7cf443b0b8178a22d12fa19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:9c:ea:97:e1:cb:6b:51:1d:83:a0:3a:0e:
0e:01:54:fe:f3:ef:d7:4c:1c:8d:cf:97:d2:9b:1f:
70:a1:1f:26:7f:0d:5f:e7:56:9e:90:58:1b:46:8f:
72:0d:dd:7c:9b:5a:aa:33:7b:53:d2:68:cc:5b:af:
a1:31:f7:77:23:26:14:4b:5e:0d:e2:c5:45:f4:78:
d9:ec:34:06:4c:23:f9:d5:75:d1:92:79:a9:e3:f2:
36:b7:f8:19:97:04:99:19:9f:bb:d9:65:d9:99:21:
21:83:ca:cf:fe:56:21:3b:bd:b2:a8:03:e1:7f:c2:
67:72:1a:f5:71:68:e5:6a:01:b3:77:3d:ba:43:e1:
aa:a4:f4:db:12:b9:a9:c8:1f:30:e6:c5:9b:a6:a5:
53:8e:04:48:6c:a5:de:7f:58:51:be:fb:44:fb:f3:
99:b4:90:45:53:95:8b:9b:3d:7d:65:f3:e8:7c:da:
e5:e7:cd:90:2b:6f:3a:03:8e:ed:6b:ab:8b:c6:df:
c6:92:52:31:bc:04:0c:9e:21:19:d5:ce:99:10:b6:
45:d1:46:3f:cd:54:dd:cf:9c:fc:2d:90:ed:43:32:
2c:4c:e9:05:34:b4:5c:92:49:47:20:33:71:35:6e:
db:c3:61:b1:0e:e5:73:53:a1:5b:d4:f1:dd:16:30:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:A9:70:59:FD:02:8C:F7:CF:44:3B:0B:81:78:A2:2D:12:FA:19
X509v3 Authority Key Identifier:
keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:b0:e1:e2:f9:d8:15:7f:48:f4:18:60:be:21:68:4c:54:
68:79:37:b0:9c:a5:7f:87:20:2b:e4:d6:d0:96:74:0d:aa:fa:
38:90:f2:86:d8:3d:78:61:f5:d5:0e:82:f3:f7:1d:4e:91:f3:
58:31:c2:45:30:d0:4d:8b:90:92:2e:3f:e2:be:25:f3:16:b8:
6d:a5:9b:91:32:42:fc:bd:ae:f8:61:de:3f:4b:63:fe:6b:b8:
06:ea:59:1d:46:2d:a7:11:2d:91:a6:93:b2:eb:a4:72:67:27:
34:50:98:87:3a:f2:9c:12:17:06:5f:9f:65:43:28:cd:ca:53:
83:b8:a6:64:6e:3c:ea:0e:7f:62:65:71:ce:9d:8d:6f:38:ad:
2b:50:49:36:0e:94:c5:df:a5:18:98:8a:de:10:72:0d:c7:bd:
e3:24:4e:b6:10:5e:f4:15:0b:19:27:0b:3f:fa:83:e3:34:07:
8b:02:53:e5:a2:52:40:94:d1:bb:00:fb:a2:aa:1b:52:e6:24:
3e:08:48:27:27:17:5c:5d:9c:e5:9c:e8:52:7a:26:ca:a4:a4:
6b:9d:41:70:10:ad:16:7f:fe:64:4d:69:61:13:49:ef:8a:b2:
e1:35:7d:cc:1d:3d:f7:22:00:3e:3f:fc:85:3f:3b:2f:44:1d:
1f:d8:9e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:50:42 2025 by rpki-client