Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: TlSFGUVuWYKtprlQmr401Pig7VAWTk5i0ruYqUKq+V4=
Subject key identifier: 68:D4:E5:71:18:58:60:BD:F8:D2:8A:2C:9E:7B:80:64:53:50:A4:71
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 0198D816756D8727BB4A7A4F3D8D5E68C11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 08B7
Signing time: Sat 23 Aug 2025 18:00:06 +0000
Manifest this update: Sat 23 Aug 2025 18:00:06 +0000
Manifest next update: Sun 24 Aug 2025 18:00:06 +0000
Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: a4hxMuY8gwEpKnkb6xnhKc7K14rwrrKayZSBNUwQhhw=)
2: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=)
3: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=)
4: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:16:75:6d:87:27:bb:4a:7a:4f:3d:8d:5e:68:c1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Aug 23 18:00:06 2025 GMT
Not After : Aug 24 18:00:06 2025 GMT
Subject: CN=68d4e571185860bdf8d28a2c9e7b80645350a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:61:bd:5d:07:91:96:a2:e4:e4:9e:35:3e:
ff:32:1a:9f:48:0e:dd:9b:62:f4:72:db:cb:d4:9e:
00:f9:c6:20:e3:5f:49:a3:2d:9c:ec:27:39:ae:b3:
11:70:2a:e2:01:8b:6a:3a:44:a4:a9:0d:92:47:c9:
b4:86:d3:ad:9f:c8:92:c0:65:7c:f5:01:7b:ae:da:
aa:0b:db:1c:0d:86:7c:78:a2:c2:1d:08:4d:48:46:
7c:73:76:da:a8:b2:2a:f6:65:9b:64:9c:e2:3c:fd:
72:cc:10:02:f6:e5:0e:54:88:cd:e6:a0:9e:b2:ed:
86:db:7e:93:b3:13:c1:61:ad:aa:b2:0d:fb:a2:bf:
a7:61:58:de:fd:74:99:04:79:a8:53:b1:e7:56:c0:
5e:6e:93:06:17:4e:ae:3d:40:d2:21:47:48:db:c1:
34:03:48:10:1d:df:87:1d:5e:9f:17:b8:47:f5:75:
21:84:5e:3c:9f:2a:fc:f4:ac:a9:15:b9:be:01:77:
a0:34:9b:25:2b:2c:d3:dd:94:c6:8a:01:31:12:3b:
cf:21:9a:00:5f:61:23:2d:4b:72:bb:ae:fa:55:43:
8f:99:d5:7b:c7:c4:23:4f:64:32:01:cf:4d:32:a0:
0f:51:0c:2d:d2:71:58:42:a2:e6:a0:93:20:58:f7:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D4:E5:71:18:58:60:BD:F8:D2:8A:2C:9E:7B:80:64:53:50:A4:71
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:94:b5:9f:17:24:63:b4:47:ae:ea:7d:17:70:64:6a:18:9b:
5e:55:c1:de:33:c1:d3:ad:ae:e2:8a:9f:69:cc:d6:a6:fe:92:
5c:06:5d:bf:9f:cd:cc:23:3f:9f:65:22:73:ba:6a:11:58:12:
6e:08:ad:ae:8a:f8:5b:42:98:32:1a:3b:fa:d2:9a:c1:d6:f3:
40:fc:b8:8c:c5:65:1a:fe:b2:d3:26:7b:87:9d:ca:37:13:92:
7f:80:29:fa:66:2d:7a:eb:6f:b7:a4:8b:ef:4b:33:8c:60:e3:
2d:18:f0:37:fd:b7:19:63:ab:72:ad:bc:13:19:78:b3:58:95:
92:0f:3a:ad:97:50:4a:df:57:e6:16:23:46:7c:3e:3f:d6:55:
cf:b7:92:e3:a1:23:f8:70:b1:9e:8c:47:a8:58:e3:ee:e7:bd:
af:4f:62:ff:d2:43:fb:13:6b:72:c7:cd:91:f9:0b:17:8d:90:
0a:df:6a:3b:c6:19:71:e3:7c:77:9f:3f:a9:5b:74:92:88:25:
21:cb:54:20:ce:0a:be:31:15:0e:4d:c6:de:b2:dd:22:14:e9:
f2:d6:8c:be:6d:91:d3:41:2a:4d:be:7e:65:20:46:7a:7f:25:
ca:af:a1:52:f3:4f:d1:e7:4a:0a:3a:12:44:a9:fe:e2:76:6b:
d2:76:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:29:55 2025 by rpki-client