Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
File: o6znPa9SECzbhLf1aBKWlXoMmng.mft (raw, json)
Hash identifier: dGbSXSyEwABljC1ADpLz8Ki3aDD2jE1zmcTnQCqrLU4=
Subject key identifier: DD:D4:17:BD:88:73:7B:7A:3A:FA:C5:26:DC:CA:A8:9B:C6:44:26:3F
Authority key identifier: A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
Certificate issuer: /CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Certificate serial: 0198D660D2D9AB22FCB03ACED203A3BA1A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
Manifest number: 0847
Signing time: Sat 23 Aug 2025 10:02:06 +0000
Manifest this update: Sat 23 Aug 2025 10:02:06 +0000
Manifest next update: Sun 24 Aug 2025 10:02:06 +0000
Files and hashes: 1: PLwRwWOtSjw-0Pg41XEpQjuSA-U.roa (hash: lGtM/oEk7N2nkUdCvZFwDApY3dPL/dm/f6h+7RuL+gU=)
2: o6znPa9SECzbhLf1aBKWlXoMmng.crl (hash: 6QGywpOZE946VBq8Uve9H//5tovixpHD/JKMNXu7FhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:d2:d9:ab:22:fc:b0:3a:ce:d2:03:a3:ba:1a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ace73daf52102cdb84b7f5681296957a0c9a78
Validity
Not Before: Aug 23 10:02:06 2025 GMT
Not After : Aug 24 10:02:06 2025 GMT
Subject: CN=ddd417bd88737b7a3afac526dccaa89bc644263f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:18:61:c2:d6:8c:ae:a0:ed:16:14:18:0a:
9d:28:4b:8f:6a:a6:1b:dd:d2:45:e6:83:75:87:17:
e3:b1:a7:c9:ec:80:2e:63:f3:29:68:7e:44:46:aa:
7e:fc:8f:f4:1a:2b:c4:5b:ee:93:87:9a:57:29:53:
0e:a9:05:f7:40:43:71:7c:88:c2:57:de:65:8d:d6:
6e:40:dc:28:2c:6c:71:5d:dd:bb:36:9d:38:0d:84:
a1:72:be:4e:44:29:89:94:5a:67:e5:f2:f2:7a:c2:
17:1d:bd:88:4e:34:c0:6f:45:fc:e2:d7:86:67:a3:
c9:86:c0:f4:5f:9f:b5:97:9e:ae:5f:5a:24:6d:04:
65:4e:66:b8:a3:bd:8f:38:f5:e1:20:bd:b0:4d:b5:
f8:70:91:d1:00:96:9a:06:2f:b4:a5:05:85:f8:da:
d5:24:4a:ad:82:c1:e4:4c:3d:87:55:b7:20:a2:56:
2a:be:21:31:cc:31:a3:e7:7d:95:1b:47:10:0f:10:
95:7b:aa:49:ee:4f:5c:e7:96:4b:12:b1:9e:3f:76:
6b:ff:de:1d:0c:0a:84:03:a5:a2:72:a1:f3:cb:3f:
01:33:f2:f7:7a:e4:bf:c2:41:8b:4a:84:e2:f4:a3:
f0:7f:23:91:46:10:d4:48:64:00:20:73:6a:f8:76:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:17:BD:88:73:7B:7A:3A:FA:C5:26:DC:CA:A8:9B:C6:44:26:3F
X509v3 Authority Key Identifier:
keyid:A3:AC:E7:3D:AF:52:10:2C:DB:84:B7:F5:68:12:96:95:7A:0C:9A:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6znPa9SECzbhLf1aBKWlXoMmng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/77f5b9-5b8c-4546-9a0d-b8c5f84d9687/1/o6znPa9SECzbhLf1aBKWlXoMmng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:24:52:bf:8f:4a:13:c1:02:47:12:b5:ae:72:76:a4:fe:
dd:71:eb:bd:ab:d7:b4:c8:e1:7a:69:e0:07:5d:01:ae:ac:14:
e8:7c:e0:9c:3c:a4:a2:53:0b:20:0e:06:de:9f:b3:cb:99:fe:
ab:0c:3c:71:cf:41:3e:dd:22:51:6f:16:11:b5:2f:26:16:32:
1e:84:a4:88:85:bf:a4:48:f7:24:e6:0f:49:76:79:7b:b2:52:
f7:43:4e:26:b9:1e:e5:f0:60:e4:52:8d:43:86:3e:3a:28:da:
24:97:0e:47:41:8a:73:09:ea:7f:69:12:76:dc:0f:3b:e8:4a:
de:27:06:9b:dc:7d:8f:f1:42:ed:28:86:4c:9f:62:9d:82:81:
55:a5:cb:44:6f:53:97:32:51:58:0c:22:15:5d:13:83:02:03:
ff:7d:0e:83:77:24:08:79:34:5e:12:b9:81:8a:d2:f5:70:4e:
3d:73:5a:75:46:84:90:23:55:44:e4:3b:94:19:e9:4e:05:45:
65:71:af:8f:44:8c:21:81:4f:e1:02:c3:71:b7:35:eb:8a:13:
e1:d7:74:2f:1f:0f:6d:d3:15:96:d4:92:aa:9f:cd:ad:39:c7:
c5:37:ad:dc:f4:93:82:a3:7d:2b:0d:2d:ea:42:98:6c:25:b3:
87:a7:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:45 2025 by rpki-client