Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: DXWNFWp0egPMdjttyOLAO4di6CXKdwKKNrRdISzVhtc=
Subject key identifier: 08:8F:18:51:BA:D7:15:52:35:F0:52:3A:47:BC:1F:AC:AD:07:80:4E
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 019937CA9DCB94D8D5D7F020511CBC55D4B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 167B
Signing time: Thu 11 Sep 2025 08:00:49 +0000
Manifest this update: Thu 11 Sep 2025 08:00:49 +0000
Manifest next update: Fri 12 Sep 2025 08:00:49 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: qdLSNgUpRkSrvDwmQTSVQotrEtCZnAyMW9d566GYf3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:9d:cb:94:d8:d5:d7:f0:20:51:1c:bc:55:d4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Sep 11 08:00:49 2025 GMT
Not After : Sep 12 08:00:49 2025 GMT
Subject: CN=088f1851bad7155235f0523a47bc1facad07804e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:83:8c:5f:31:ff:e6:f1:40:cd:db:85:d7:6f:
9f:1a:ef:d1:3c:f6:0f:59:8d:84:a8:cf:df:89:d7:
4b:3c:1d:46:25:6f:49:80:29:25:69:e6:7b:42:c4:
b9:59:b6:fe:53:ce:dd:e8:3b:a5:2d:2d:9f:12:0f:
9f:ec:e4:3b:a1:14:20:dd:ae:9f:44:d3:85:13:f3:
fc:b9:68:15:a6:e5:12:60:d3:03:58:f2:8c:f2:7a:
6e:48:02:7e:37:41:86:68:d0:ff:00:64:fb:52:47:
34:8a:09:94:74:ce:d4:97:b4:f6:24:39:2f:f9:b3:
66:f4:66:69:9f:9e:7a:1d:cc:ed:1e:57:a7:9f:3f:
32:57:f7:e2:79:7e:bf:27:f7:bc:60:89:e4:e3:79:
65:89:45:45:7b:bd:2e:25:cd:15:f3:7e:88:9c:78:
f7:70:c6:c2:a3:5a:24:60:a9:2e:5b:a6:84:7a:9e:
87:f9:e2:76:aa:d0:b4:0c:80:43:b5:53:da:1b:bc:
42:ac:51:d4:92:01:bb:0c:60:1a:13:87:ed:3c:fa:
50:fd:b7:59:a1:06:f4:1b:c1:f8:2f:58:98:64:c7:
48:50:1c:5b:ec:6a:3d:54:5c:8c:9c:a1:fe:3c:f0:
20:ea:1d:28:98:55:67:2c:bf:7b:af:ac:ec:62:6c:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8F:18:51:BA:D7:15:52:35:F0:52:3A:47:BC:1F:AC:AD:07:80:4E
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:02:a1:58:66:a4:1f:5a:fa:15:45:7c:a4:ef:5e:00:f4:19:
c9:64:db:8b:b5:2f:8b:62:7c:fb:45:d5:17:ba:dc:44:2d:9b:
f8:92:62:72:c7:67:f3:89:43:09:73:92:75:b2:3e:58:57:63:
73:dc:1a:26:50:61:fa:56:d7:47:6d:c3:3c:c0:71:cd:de:c2:
63:4e:da:a7:73:28:90:d4:82:be:73:f9:58:20:61:8d:a5:de:
8d:95:5f:e9:89:19:fb:a1:07:5b:d4:d0:73:d4:46:c0:77:21:
0d:a4:44:1c:ab:00:cc:2d:b5:53:19:62:cf:34:88:6a:2a:c6:
9d:8e:d2:6c:99:1d:fb:dc:f7:94:fa:02:a7:e4:f0:68:ef:21:
48:89:4e:3d:98:0c:75:c6:1c:e0:f6:f5:a0:89:33:18:44:56:
0f:56:e8:f0:a0:5f:85:ce:62:dc:16:49:8c:75:48:25:fe:d1:
fe:88:21:73:9e:bf:9e:37:34:48:ad:54:e7:d4:e6:f5:9e:35:
74:40:15:22:0b:40:9a:d9:de:d4:39:46:af:b9:b4:85:48:0b:
8d:50:60:64:dc:32:81:ee:7c:d1:21:19:28:f2:4c:4e:db:b9:
49:3c:e9:88:ea:fe:ef:28:f1:53:66:ff:07:5b:a7:ca:0c:27:
56:a5:0c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:19:31 2025 by rpki-client