Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: c8te08Hmgu2XXUKMBve3uc6deHlYY1s9BU0qrJpFiL0=
Subject key identifier: 43:DA:F7:B4:0F:53:6B:28:32:96:25:DC:58:FA:7D:EF:CF:BA:0E:08
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 0198D583B13D7D3EC0EB68A2D6C8C9E5BB30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 072E
Signing time: Sat 23 Aug 2025 06:00:34 +0000
Manifest this update: Sat 23 Aug 2025 06:00:34 +0000
Manifest next update: Sun 24 Aug 2025 06:00:34 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: xEdClmH2ONfl0R4Betjt27f7qOUbaGaD2Bd0tqzTumM=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b1:3d:7d:3e:c0:eb:68:a2:d6:c8:c9:e5:bb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Aug 23 06:00:34 2025 GMT
Not After : Aug 24 06:00:34 2025 GMT
Subject: CN=43daf7b40f536b28329625dc58fa7defcfba0e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:12:42:6f:92:e2:a7:7c:e2:be:ef:6a:d1:ae:
1c:10:95:db:c7:7f:9e:5d:e2:b0:2b:4a:db:4e:20:
68:f8:80:8f:63:c2:ad:48:da:82:c5:97:75:a1:62:
af:82:01:4a:c6:2d:c0:b9:79:ed:72:bb:be:e5:43:
c6:d2:77:b2:7c:dc:51:3d:a8:76:01:81:54:d7:3c:
dc:65:b6:44:24:81:ce:10:24:33:be:65:a8:df:09:
81:9f:93:df:57:e6:1a:f4:15:86:f4:c1:9a:bc:45:
5f:c9:28:9f:5a:79:49:5c:bd:2d:4e:b3:5b:54:38:
48:a3:68:39:33:bf:bf:51:cc:f3:3f:49:b6:b5:2f:
ff:15:b7:91:70:e0:5b:b0:96:5c:47:43:32:ff:cd:
d4:71:fc:ad:18:c1:a4:a0:ad:ba:48:e8:02:82:f8:
ec:a5:d9:b5:b5:67:89:92:9c:3a:93:57:e4:d9:cb:
9b:e8:f7:c2:0f:00:0e:b8:b9:60:81:c9:bd:5c:70:
cb:8f:c6:c4:f8:48:3b:72:bc:7e:b9:54:40:20:96:
1b:aa:af:fb:c7:5b:61:8b:6c:e0:a6:f8:b4:1a:f0:
8d:0a:21:9f:61:20:63:54:e6:d0:e4:15:5c:e5:33:
0c:ea:2f:2d:e5:60:cd:1c:ce:8d:02:39:9d:38:69:
8d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:F7:B4:0F:53:6B:28:32:96:25:DC:58:FA:7D:EF:CF:BA:0E:08
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:65:bc:0f:64:1d:ef:fd:81:cf:91:7d:0a:46:ec:a1:2e:87:
ce:39:7d:8c:81:89:d8:71:38:ee:d7:b6:b5:dd:91:05:8b:cb:
f8:62:da:a4:e1:f8:85:75:27:3d:d3:ba:75:3c:4d:cf:a2:8d:
4b:b8:27:34:f9:e5:98:03:ef:8c:5c:36:0e:42:6e:dc:01:09:
d3:ed:dd:56:01:7f:86:fb:19:cb:3c:db:52:b8:9d:98:68:3f:
98:12:6c:b9:3f:85:7c:e7:5c:b2:c4:bb:9c:63:88:e8:cb:fd:
46:37:2f:32:01:93:c5:7b:2c:19:ba:a6:30:db:b2:ec:ee:b5:
b1:9f:b9:75:a2:36:77:30:77:8e:7c:28:6b:ab:12:63:e0:fb:
fe:2c:fe:bb:f1:84:18:f3:d1:67:c0:9e:84:49:80:d3:3d:22:
7c:6f:48:25:3a:18:b7:a5:a6:42:f0:33:04:05:8c:0a:f2:98:
e0:97:e9:96:bd:4a:4b:55:cd:80:91:5e:8c:56:b8:e6:0e:42:
8c:10:d3:0c:df:f1:6a:0e:b3:26:57:68:0e:a0:11:f9:82:62:
c0:94:05:86:d9:1e:d6:d4:9c:29:3f:34:ed:ca:af:aa:a1:7d:
9a:55:01:9d:6d:8a:5c:2a:ab:37:bf:a6:99:0f:ef:e3:bf:6f:
87:08:5f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:00 2025 by rpki-client