Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
File: OUaa8zYRt5CE9XXpWxPmZVDts4M.mft (raw, json)
Hash identifier: irjQRcVU9FPpZJ1DI5QOo2NKfbMs+dFW7xT9cKdWJ1s=
Subject key identifier: BE:EA:25:A9:5C:58:94:E3:0E:C6:06:88:6A:A8:AA:CE:36:3F:BD:DA
Authority key identifier: 39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
Certificate issuer: /CN=39469af33611b79084f575e95b13e66550edb383
Certificate serial: 0199356EC4E8AB026DD8170801B75144FFBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 21:01:15 +0000
Manifest this update: Wed 10 Sep 2025 21:01:15 +0000
Manifest next update: Thu 11 Sep 2025 21:01:15 +0000
Files and hashes: 1: OUaa8zYRt5CE9XXpWxPmZVDts4M.crl (hash: 2f8C1Pgj/tL+XiSHK2hADy4iS7sW5RUm04ViBFttoX4=)
2: es8QJCh0ckzLwfP8fcS7Bv9ovnQ.roa (hash: vTpYfK5q1nJR4gRnUXuRk239gyWGFIrlMOouYSRgbnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:6e:c4:e8:ab:02:6d:d8:17:08:01:b7:51:44:ff:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39469af33611b79084f575e95b13e66550edb383
Validity
Not Before: Sep 10 21:01:15 2025 GMT
Not After : Sep 11 21:01:15 2025 GMT
Subject: CN=beea25a95c5894e30ec606886aa8aace363fbdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:43:f7:53:a8:6c:18:3f:05:10:91:49:fb:
f4:86:b1:55:f2:15:43:a0:37:a8:69:a9:ff:8c:00:
01:e9:96:f0:9f:68:45:09:b8:f6:e7:a9:18:91:d9:
80:e5:1c:1a:4e:b1:68:38:9c:48:bb:e8:4b:e3:e6:
ec:eb:2e:fc:b7:a1:c0:28:95:23:22:41:2d:53:e4:
be:f3:f9:68:a2:f4:c6:09:c0:1d:ff:ce:b0:f3:41:
f0:26:34:27:50:ca:28:6b:30:cb:e8:e3:d4:4f:d4:
18:9b:5f:55:e3:5f:88:64:17:51:f6:40:f2:ab:31:
58:ac:48:fe:0d:bb:ba:f7:13:26:57:15:e1:48:93:
09:89:44:3b:9b:01:3e:53:c5:b1:4d:aa:12:e0:7a:
15:a7:df:a7:dd:90:59:7d:3e:ac:c2:a2:38:ad:09:
68:6f:40:2e:2a:ad:89:98:af:35:81:6e:6a:56:71:
63:a0:82:ae:8b:d5:2e:a6:4f:26:b5:81:cc:68:e0:
1e:a7:84:42:00:f7:52:74:14:a0:8a:d1:01:0c:3c:
ec:7f:1f:b6:36:86:98:93:0d:a1:38:d5:48:70:00:
09:53:ee:c0:f5:4a:76:9d:d6:ae:c6:c2:90:cc:1b:
2b:d2:1b:30:36:50:b2:52:02:d3:ec:72:b3:52:6d:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:25:A9:5C:58:94:E3:0E:C6:06:88:6A:A8:AA:CE:36:3F:BD:DA
X509v3 Authority Key Identifier:
keyid:39:46:9A:F3:36:11:B7:90:84:F5:75:E9:5B:13:E6:65:50:ED:B3:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUaa8zYRt5CE9XXpWxPmZVDts4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e38f-a091-4e5c-bf63-66dd2a91faca/1/OUaa8zYRt5CE9XXpWxPmZVDts4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0b:56:59:c1:4f:50:be:f0:19:a1:d4:5c:a2:6a:81:1c:20:
c4:28:ea:ae:90:27:83:8c:8a:3a:43:89:3d:62:20:9a:95:96:
85:80:0e:fd:79:2f:37:cb:8b:bc:a5:8f:58:ad:9c:63:dd:69:
9a:f4:a8:3e:66:64:12:10:e9:d1:ea:7e:a6:3f:4a:47:d5:dd:
ef:88:ac:e3:90:bf:21:db:5b:80:70:6a:b2:cf:c0:93:3c:26:
28:d7:d1:1d:3a:d1:17:00:12:fd:f9:6a:9f:0f:51:00:b0:e7:
fa:9b:27:3f:2d:0c:51:03:61:18:12:14:af:c3:71:0b:18:2c:
0c:ea:5b:0f:c7:15:5a:ce:be:31:ba:8d:31:5a:f1:1f:94:a4:
0d:3f:98:ec:40:44:83:97:7a:2f:48:58:61:8c:38:78:c2:2a:
a8:c6:5e:c5:f5:93:42:20:a4:1a:48:34:8c:52:1c:2c:60:29:
87:e5:02:d1:76:40:a8:f1:68:08:33:2d:82:9a:15:25:31:bd:
48:20:47:ff:db:b3:cb:fd:7f:c0:1f:60:4f:26:99:a8:af:c6:
82:2e:a4:3c:b5:cf:a4:39:25:c9:df:0f:9f:66:ca:b6:98:ed:
fe:fe:a5:f5:4d:61:8a:08:a1:f3:3b:24:8c:e3:28:b2:89:b2:
7f:c1:ca:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:15:13 2025 by rpki-client