Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: BE+wmPvapqa5BFzKC/3dQ2zpV4WmUmDuiLyFJPetXN8=
Subject key identifier: 45:08:A9:9B:8D:36:78:2A:F8:A7:0A:22:1B:17:4D:6B:37:A9:A5:F1
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 0198D65FD65180E9115ABE6278B231F4D9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: KCHRlos8RNuKDAE8oCJ0cqo4fJ0wY+qjssV3bjNn1jc=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d6:51:80:e9:11:5a:be:62:78:b2:31:f4:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=4508a99b8d36782af8a70a221b174d6b37a9a5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:26:64:52:b9:d3:79:50:24:4d:64:54:9f:
58:34:20:2e:fe:b4:48:97:9d:f6:79:86:b7:4b:27:
96:20:0a:d7:da:6b:4b:01:de:3e:be:35:28:d5:35:
e7:3e:08:58:71:c6:f1:1e:68:40:62:1c:d9:1d:03:
73:a2:d7:16:66:ed:29:f7:4d:43:71:0d:d7:f4:c3:
79:20:1d:8a:c6:4f:95:d6:5e:4c:ea:c9:50:b5:69:
b3:83:71:31:d7:ea:70:51:e7:63:c4:3b:67:ff:5a:
31:24:1e:eb:e5:17:d1:7e:8f:38:ba:f6:bc:91:1c:
f8:24:a6:52:b6:16:0d:9d:00:8c:ab:57:69:2e:02:
49:ac:f7:95:75:66:8a:7c:dd:9c:0a:58:20:27:9b:
fc:86:ba:5b:c3:b7:7b:75:7b:51:a5:3f:36:26:77:
21:3f:ac:b7:7b:ba:52:86:af:80:25:64:95:df:c4:
1f:e1:9f:88:0a:99:cc:e7:64:25:be:fb:58:b3:91:
22:7a:fa:7d:9f:7e:3c:2e:e7:2a:27:b8:f7:ec:33:
bb:a0:91:b2:35:56:29:fa:d6:ed:fc:2a:ee:4b:ab:
ca:b6:88:34:04:bc:b4:a0:97:a6:ce:5f:eb:de:71:
44:4a:ea:1e:ec:93:be:69:3f:c2:7d:74:6f:4e:72:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:08:A9:9B:8D:36:78:2A:F8:A7:0A:22:1B:17:4D:6B:37:A9:A5:F1
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2f:fd:7c:9f:2b:92:f4:87:a5:87:73:e1:b1:0f:2b:97:f7:
5a:de:f8:df:2f:a1:ac:4c:16:b5:1a:3a:07:1b:1f:3f:00:27:
c3:bd:c1:88:e3:34:3b:cd:92:70:09:d3:7c:fa:61:5d:b0:45:
41:c0:78:59:ec:6d:91:70:56:f6:73:4d:ca:24:70:9f:5c:06:
61:38:1e:0f:62:ca:23:ad:90:a9:b9:34:e4:75:82:dd:e0:73:
5c:82:7d:a5:95:07:79:03:63:0a:53:a9:5e:a1:73:70:95:70:
82:c9:ed:df:0c:bd:64:8e:af:0e:8e:e3:2c:6d:df:0f:72:3a:
e2:6f:56:2a:72:2c:7e:0e:9c:73:7d:a8:7a:4f:59:67:4c:1e:
1e:cc:0d:e4:9f:76:96:22:69:3b:7b:bc:bc:78:ab:7d:ab:59:
01:d7:d8:79:48:29:b1:31:7a:10:d5:f2:ae:f8:4e:c8:53:c6:
8b:4b:fa:4d:64:55:2e:a7:99:44:a4:ae:74:00:59:6e:d1:d4:
c5:ea:3d:cd:aa:57:6d:2c:9b:44:5e:cd:9f:11:b3:b5:14:6d:
1f:c0:08:82:3e:98:69:64:f7:57:0a:94:23:70:c0:26:7c:e0:
5c:0f:e4:76:be:ae:a9:a8:d4:52:99:2a:cd:22:d5:43:73:e5:
59:22:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:41 2025 by rpki-client