Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: 6oAQihCdXciwZVMApa4NuWMi7Ukw9DWEby4z9a+l07c=
Subject key identifier: DF:46:09:1C:C7:F2:19:89:4A:31:36:0E:9B:D4:0A:22:26:1E:DA:0A
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 019917640BCE49D4B66D8D85D490257885CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 166C
Signing time: Fri 05 Sep 2025 01:00:56 +0000
Manifest this update: Fri 05 Sep 2025 01:00:56 +0000
Manifest next update: Sat 06 Sep 2025 01:00:56 +0000
Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: RLaWnxSrZtBGrALi8DmcmwwWII48NV/aKaFrf0t3qYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:0b:ce:49:d4:b6:6d:8d:85:d4:90:25:78:85:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Sep 5 01:00:56 2025 GMT
Not After : Sep 6 01:00:56 2025 GMT
Subject: CN=df46091cc7f219894a31360e9bd40a22261eda0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:c1:a9:d2:53:95:02:6f:52:b5:a1:c2:2a:
90:93:95:39:1e:de:33:09:e3:96:bb:65:4b:af:4a:
5c:5b:56:c6:2e:90:4e:14:e2:00:31:5a:5f:ef:56:
3d:26:3e:a4:b9:47:c3:9c:84:bd:25:d6:c6:b4:82:
af:09:4a:d2:85:9a:e1:bd:cf:58:eb:4d:ff:67:6a:
5e:5e:6d:5c:53:a5:0f:b1:fc:03:56:79:99:c5:11:
0e:49:6b:b0:dc:fd:e6:6d:71:7a:08:b9:a7:5c:f8:
e4:a7:68:4e:00:ea:5b:3c:11:74:1a:73:ff:4e:3f:
dd:45:4c:9c:ae:88:1f:6f:da:22:a5:25:95:56:c2:
06:66:5f:36:cf:9a:a5:9e:a0:66:0b:5f:56:00:22:
94:7f:a4:a8:73:6b:81:03:fc:38:fd:dd:b4:18:da:
35:f9:73:71:d5:23:ea:94:08:5c:05:0a:7e:88:b0:
eb:52:5d:a5:a4:a9:4a:6d:26:97:37:49:4f:bb:b4:
ee:f6:89:ca:12:7e:1d:cd:96:34:87:39:ea:99:71:
0f:cd:be:09:a4:86:4a:0d:64:b0:36:68:01:7f:13:
ac:bf:ce:a1:bb:e2:c1:79:bc:f5:e9:cf:c0:c7:36:
0e:94:b0:0f:43:4d:a2:50:68:1c:17:50:23:fe:64:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:46:09:1C:C7:F2:19:89:4A:31:36:0E:9B:D4:0A:22:26:1E:DA:0A
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3c:c4:8f:99:84:07:9b:34:58:d4:da:77:ef:85:2e:99:2c:
bd:65:44:d2:fb:83:f6:c3:02:70:c8:94:b0:a5:da:35:d2:38:
a6:96:47:46:c1:38:c5:ab:42:da:8f:f3:3d:d4:33:6c:61:1f:
80:d3:87:68:d1:47:e3:ce:44:48:24:04:b4:d9:d3:d1:60:b2:
9b:3e:d0:30:d9:8e:52:f5:4c:ec:3d:fb:63:36:a0:8d:46:03:
82:d6:eb:51:50:01:19:b8:79:b9:99:5a:e4:7e:3b:d7:38:2c:
f6:5e:b0:54:d4:a7:6f:8f:49:7d:ba:ec:d7:42:27:04:47:65:
ff:a4:a3:41:3c:cc:16:8e:bd:9d:3f:d8:ca:5e:e4:6d:83:90:
e1:14:da:8a:75:3f:17:5d:1a:ef:76:a3:09:9c:99:8e:2e:7b:
ad:c2:9d:a9:ba:1c:d4:c6:55:64:60:9c:85:18:44:97:06:2e:
17:90:f2:99:33:7f:92:f3:31:1d:c6:6b:ee:30:e8:d1:7c:ac:
92:ef:09:aa:2c:0b:9d:e2:16:fa:18:d6:08:af:27:02:d4:10:
65:83:48:a8:3c:96:47:b1:d3:bf:25:44:34:5f:87:50:a8:b9:
a5:30:86:d1:37:12:ff:de:ef:94:74:28:48:9a:54:9a:c7:cd:
ff:88:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:56:22 2025 by rpki-client