Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
File: OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft (raw, json)
Hash identifier: nZZGSRgiwZe7Uo9mkmS8hjYYZ8i9e8mW8XOtkIKzc5o=
Subject key identifier: 85:B5:6F:C4:CD:66:B3:CF:7C:9C:11:B5:B2:E2:2E:E2:00:15:63:85
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 0199323663A423A0794AE8A27E8CD4EF2815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
Manifest number: 167C
Signing time: Wed 10 Sep 2025 06:00:49 +0000
Manifest this update: Wed 10 Sep 2025 06:00:49 +0000
Manifest next update: Thu 11 Sep 2025 06:00:49 +0000
Files and hashes: 1: OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl (hash: gQUp4h6ABvtlANglWXJG4uC8PwG4iUK6NhrpkZoIj44=)
2: gkWQrDSBz4IQ4_XEEVy4Y27yU80.roa (hash: VF6i/0gNwt2tTOONBHG2KH5sytCAkilisQqp9v19k2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:36:63:a4:23:a0:79:4a:e8:a2:7e:8c:d4:ef:28:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Sep 10 06:00:49 2025 GMT
Not After : Sep 11 06:00:49 2025 GMT
Subject: CN=85b56fc4cd66b3cf7c9c11b5b2e22ee200156385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:f3:9f:b3:c4:e1:a2:26:df:9e:7f:0d:6d:
ee:fe:88:89:7c:f0:19:fe:63:d2:b5:25:0a:bc:47:
8d:25:a5:9a:1b:ae:99:de:cf:9d:5d:46:db:3b:af:
f3:08:6f:69:84:85:2d:7c:a4:07:02:08:cc:49:2d:
7c:d7:b1:cb:f2:f3:69:5e:49:7c:7a:e0:4f:89:2a:
ee:dd:9f:42:85:3a:87:68:12:3a:1c:cc:a7:53:a3:
4b:b3:cc:a5:b8:99:e3:b1:e6:ef:9c:48:5e:cb:ee:
95:ed:94:ab:cd:6a:fd:22:12:11:c9:44:f6:f3:20:
3b:89:78:4a:b5:16:2e:88:70:1d:a9:e7:5e:83:fd:
3a:c0:42:ab:93:7a:06:43:4d:4b:fe:2f:5b:4e:7d:
60:07:d7:13:b7:0f:a7:b3:77:cb:b9:14:5f:73:46:
5f:c9:db:6d:ed:d9:e4:a1:6e:df:51:8f:82:dc:fb:
f6:ae:4d:40:98:28:79:80:dd:b1:10:af:67:e5:b2:
ff:b3:b3:9a:c0:ed:1d:d2:f0:5a:27:15:4b:94:3a:
ff:4c:e5:3e:9e:e8:2b:53:2a:10:83:c4:e1:61:52:
da:0f:66:e5:ea:5a:9b:7f:1b:86:72:9c:77:a0:d9:
0f:48:e7:c3:8f:96:0d:b9:37:e9:58:0b:e5:20:9e:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B5:6F:C4:CD:66:B3:CF:7C:9C:11:B5:B2:E2:2E:E2:00:15:63:85
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b6:6e:32:86:1c:ed:93:1f:f0:b1:84:8c:5c:ba:ae:d9:25:
2e:f8:fd:33:40:79:46:5a:52:5d:ad:b9:7a:87:b4:32:34:aa:
8c:58:49:b5:b5:03:44:0c:4a:2b:24:09:08:be:a4:a1:4b:90:
36:13:2e:7a:95:65:a9:7d:2f:3f:b6:1b:b8:3c:58:28:c3:72:
e7:2e:13:bc:36:2b:c4:84:e5:91:a4:ee:6e:aa:43:70:35:1a:
2b:8d:ef:d1:91:a4:52:11:7b:26:f8:1e:29:1d:f6:12:1c:d3:
0f:2f:af:f9:00:5e:aa:80:d9:7d:95:37:5f:a1:ed:05:88:37:
2e:bc:76:d5:a9:a7:cc:2e:b6:2b:bf:c8:04:40:be:60:68:c0:
f8:5c:9f:be:be:88:c4:2b:7a:82:41:92:5f:97:e5:f3:b0:45:
22:b8:41:ef:ce:8a:1d:71:1a:c2:dc:17:d8:ed:df:78:8c:54:
65:23:f0:23:10:4c:27:f7:a8:dd:87:13:f7:fe:47:c6:6d:38:
2e:52:d7:36:14:0a:8b:cf:36:b5:19:68:0d:72:1a:dd:f7:5f:
95:94:02:41:8f:d2:e4:72:04:07:6b:9f:d9:a3:03:eb:0a:72:
0e:de:5b:25:5e:a8:c5:74:5a:ce:3c:b3:39:6e:32:c5:6a:11:
4d:be:b3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:11:07 2025 by rpki-client