Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File: O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier: jFP5p+JkoG9ALJ90SL8ZkV0eBeNMTRMSG0u5quinRKo=
Subject key identifier: BE:F3:ED:4A:73:13:49:4A:93:BD:EF:7D:C8:06:04:AA:5B:C6:68:BB
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial: 0197C64AA94C3A677F777F2719C1C98FDF57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number: 10F9
Signing time: Tue 01 Jul 2025 14:01:11 +0000
Manifest this update: Tue 01 Jul 2025 14:01:11 +0000
Manifest next update: Wed 02 Jul 2025 14:01:11 +0000
Files and hashes: 1: 4n60dmESH0S_t55G5kL7m5-9nPQ.roa (hash: 8Yl7mPdCOASLn21jFFZtRnqVACPq2IcHgd8DlOM4RfQ=)
2: BibofgsXi1m02E0sydv0lSzcS6M.roa (hash: 6kPi5tOuSZ0eERv1ZZd/XUAaafp/Tbm9N/8PWSqizA4=)
3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: O1DAKARknsYIaIU+dBu6bSAWUrCkwrR9Lrfipj51NZM=)
4: c4wHBWSbrNsVlf_a1cQ3OL9nR-U.roa (hash: b+RfZmuxixUWKJA86U4yLBBzKqnW3kWf0oaDSsDCSts=)
5: ovHMIugdzTg_bwipZYtU7WSoXAk.roa (hash: gF8CQNR3IscVXMALoF8UJJgAvjQPh7b9Wa8roCX6mtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:a9:4c:3a:67:7f:77:7f:27:19:c1:c9:8f:df:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Validity
Not Before: Jul 1 14:01:11 2025 GMT
Not After : Jul 2 14:01:11 2025 GMT
Subject: CN=bef3ed4a7313494a93bdef7dc80604aa5bc668bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:da:b9:d4:6f:a2:9c:66:23:73:cb:d8:50:
3d:d8:30:82:69:ca:3f:d6:e3:e0:81:ed:33:98:e2:
8f:74:56:35:21:26:50:90:68:da:51:bf:f6:34:dc:
65:5d:74:ac:98:95:0c:c2:d7:0f:f0:93:91:b6:0d:
21:30:18:e5:54:d0:1e:c7:cd:f5:b9:88:69:5c:56:
83:f3:cd:f1:c7:e2:ff:cf:2d:a9:88:d9:c7:0d:59:
73:a1:63:a8:df:45:a8:f7:6d:27:39:a1:f7:fd:d6:
46:7d:ae:f2:75:55:cc:48:64:e0:a5:5a:cf:60:d6:
7a:be:67:c5:4d:13:e4:17:46:59:76:32:20:68:63:
1a:ed:45:b8:dc:ff:5b:14:b8:7b:9e:0b:5b:0d:52:
88:28:b7:cc:a2:2e:75:86:7e:57:4e:d0:47:1b:a2:
02:83:69:8f:96:2b:92:68:f9:25:39:95:a7:9e:ae:
24:87:ad:22:45:35:e2:25:b8:17:7c:9e:cf:a5:77:
e7:f4:ff:d5:b0:19:13:22:54:af:bb:a3:9e:06:c7:
13:b5:c4:d1:89:81:04:5d:40:4f:1e:a0:22:0e:16:
b6:87:3f:bb:1b:2b:b6:94:56:47:5b:c2:34:6e:1b:
40:28:7c:42:48:59:f3:57:62:d1:f0:5c:41:1b:60:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:ED:4A:73:13:49:4A:93:BD:EF:7D:C8:06:04:AA:5B:C6:68:BB
X509v3 Authority Key Identifier:
keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:98:66:23:ea:73:67:89:23:66:10:35:65:e7:0e:f7:61:a1:
3d:7a:3d:62:43:79:3b:47:6e:e9:b8:d8:46:c5:f0:3f:22:43:
f6:ed:ae:05:3b:af:a4:97:e9:35:9a:df:22:da:f8:0d:7e:b3:
69:5a:25:db:d6:51:3c:45:f9:97:96:37:f7:e6:4e:60:cc:26:
da:8a:00:13:76:cb:0c:1f:d7:ad:5c:21:86:9d:0e:aa:c8:01:
54:2f:d7:54:27:b5:cc:4b:bb:ed:b1:44:69:3d:78:7b:94:82:
74:5d:4f:58:d5:27:a4:b1:57:b8:71:e2:27:dd:e9:d6:7d:7b:
9a:24:b5:8d:07:72:94:82:8d:d3:bc:d7:e6:7b:3e:e3:5e:68:
c5:17:1f:c7:41:ef:38:03:84:c1:a2:96:02:c8:6e:e2:ca:5e:
ec:58:34:aa:63:d4:3b:4f:4c:69:b6:54:e8:68:ed:81:41:94:
9b:91:f1:65:74:4a:aa:63:a5:ff:d2:db:c1:2a:92:21:49:2c:
d6:f3:f9:fc:c6:83:a9:d4:40:c2:d3:5e:11:2a:e7:b4:a0:8e:
80:f1:a3:9e:15:7d:96:78:8d:02:90:d5:ee:36:9c:1e:40:82:
0d:c1:cd:7d:b4:af:f1:f5:c0:84:5c:23:bd:25:41:c7:17:b3:
e6:58:9e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:17:49 2025 by rpki-client