Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
File: _ORf1v09kyaEwMW8J_T6YVoQkOA.mft (raw, json)
Hash identifier: JtCU8wZo/cGm0evQjlEgjnI1168PYu3kqRkIImiVOgo=
Subject key identifier: A9:7E:8A:4D:37:34:B2:6E:51:FC:85:F6:A0:73:9B:C4:F7:B2:DE:05
Authority key identifier: FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
Certificate issuer: /CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Certificate serial: 0198D54DCE44AD9120D465596A2FF2BDA4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
Manifest number: 0CCD
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: 0q3J-c3dMCcb0fEi4kT4_OFKaDo.roa (hash: GFF2i9DOD9iNc83o9PQkrJQokdzx6TTVi4lrSIyhIgE=)
2: _ORf1v09kyaEwMW8J_T6YVoQkOA.crl (hash: m0iR8sJWT68eWGMh7U4IrFWe+IjSNry2V7TQzEn087k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:ce:44:ad:91:20:d4:65:59:6a:2f:f2:bd:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce45fd6fd3d932684c0c5bc27f4fa615a1090e0
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=a97e8a4d3734b26e51fc85f6a0739bc4f7b2de05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0c:11:4d:0d:14:a0:98:29:08:83:9f:4e:60:
73:e7:dd:6d:d1:f2:bb:4a:da:ca:81:c9:7d:98:e5:
2d:2e:0e:a8:a1:3f:fd:72:c4:09:15:d3:a1:86:3c:
1a:e7:ff:88:37:44:79:91:65:bc:6b:60:0e:88:6e:
c0:db:19:45:59:ce:5d:30:57:5c:0c:a5:6b:ed:cd:
23:1c:28:61:f0:36:9a:60:8e:3c:54:e4:3c:28:fb:
23:21:6c:d3:f4:63:b8:f8:9c:d7:ab:f3:e9:bf:3c:
d2:f2:2e:e8:d2:f9:09:34:92:09:da:73:86:ab:cc:
93:7e:73:e5:14:21:9f:74:38:34:5c:1a:ef:0e:b4:
81:1f:0f:38:a3:e7:18:2f:84:e9:ce:59:61:23:bd:
a1:4c:96:d0:64:5e:5b:ab:57:da:89:3a:b7:5f:44:
34:20:d0:40:87:4f:88:dd:c3:8a:b3:d4:b9:da:df:
a4:70:97:18:02:b8:02:ce:1c:3d:a5:93:76:9b:db:
7e:7b:68:d3:3b:3e:e7:3c:42:7d:73:bd:11:2a:9f:
ce:45:84:df:31:fa:c4:a4:4f:1b:da:16:3c:d5:56:
dd:8d:0c:6f:84:a5:2a:f6:4a:e1:5c:58:a2:7c:f9:
e8:6f:9e:f2:6f:07:37:5d:70:b6:47:ee:26:89:32:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7E:8A:4D:37:34:B2:6E:51:FC:85:F6:A0:73:9B:C4:F7:B2:DE:05
X509v3 Authority Key Identifier:
keyid:FC:E4:5F:D6:FD:3D:93:26:84:C0:C5:BC:27:F4:FA:61:5A:10:90:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ORf1v09kyaEwMW8J_T6YVoQkOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/bf5a64-8aaf-44a8-bace-36850df4e997/1/_ORf1v09kyaEwMW8J_T6YVoQkOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b7:d6:12:f4:61:f5:71:75:1b:c5:fb:68:6e:a1:e8:27:21:
fb:dc:a0:58:b9:02:04:93:fb:4f:52:aa:fd:38:25:9f:3f:d5:
04:71:bf:f0:0b:cd:f3:7c:b0:3f:6c:67:01:56:5e:f4:59:77:
22:b9:9b:90:b1:ae:ac:e7:4e:0b:0f:5b:e8:8b:a8:c2:e9:5d:
03:89:64:96:2b:ce:d8:43:23:04:2d:02:bb:e5:f4:8e:5b:6a:
71:2e:52:72:6e:7f:f8:2f:79:2b:63:28:82:a5:fd:7e:30:58:
cc:2d:2e:76:4f:7f:e4:3e:1b:2c:2c:d1:05:91:d7:11:ee:6e:
16:f6:6d:1c:8f:5e:d3:6d:44:86:08:af:66:85:0e:21:8f:31:
1c:00:db:e6:7e:95:89:07:38:42:05:01:7e:96:56:72:97:c4:
aa:18:5d:5a:73:c2:da:a7:39:e7:38:1d:cc:de:82:97:8c:fb:
56:ff:44:3d:5a:ca:6e:d3:9d:bf:da:86:03:51:fd:ce:e6:ca:
89:56:38:00:1d:b4:cf:c4:a7:5a:38:d4:ca:d1:11:e8:dd:22:
32:23:93:1d:d9:24:c3:6b:66:f7:cc:8f:38:8a:34:23:cd:67:
18:cc:03:65:72:13:57:33:dc:fa:d6:05:db:8d:a8:f4:6e:ee:
25:a2:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:42:34 2025 by rpki-client