Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: EG5h8+Rf/0YWG4VrruM0c4k9ObX/U1NceFgeo5RaZBA=
Subject key identifier: 8E:49:E3:3B:59:D1:E3:63:C7:7D:D7:A6:15:83:41:15:DB:C8:C1:39
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019A006C5D2420FA58CAC10470B66FEB2763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 13A6
Signing time: Mon 20 Oct 2025 07:01:32 +0000
Manifest this update: Mon 20 Oct 2025 07:01:32 +0000
Manifest next update: Tue 21 Oct 2025 07:01:32 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: 0S4XmA3oF6PbMyFetImJEoS1OiZSu6EB3hm0neMRSDs=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:5d:24:20:fa:58:ca:c1:04:70:b6:6f:eb:27:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Oct 20 07:01:32 2025 GMT
Not After : Oct 21 07:01:32 2025 GMT
Subject: CN=8e49e33b59d1e363c77dd7a615834115dbc8c139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:77:a8:6b:45:39:aa:66:90:e6:b7:86:c3:9f:
fe:ce:81:12:b0:c0:45:35:3f:f1:0d:61:af:cc:e2:
33:77:af:b2:35:37:f1:ed:ed:6e:e9:16:9e:d9:56:
48:b3:61:15:b5:53:f5:3e:39:28:47:9f:b7:99:5b:
c6:f6:63:e6:27:bb:f4:53:05:a9:85:61:a2:8e:23:
11:9a:f6:4e:1e:96:78:57:75:d9:05:55:99:4e:27:
e8:41:50:7f:34:c4:11:45:1a:27:4e:4c:61:0d:db:
b9:58:08:f6:07:09:ee:75:79:42:d2:0d:0b:df:e0:
23:10:bb:c3:d9:44:d2:0f:0b:7f:be:02:85:c2:51:
ab:dc:8e:19:cc:60:ad:26:36:c8:50:12:4d:08:26:
35:12:cc:f3:87:0e:86:79:f5:21:99:e3:b7:77:56:
f7:15:19:4a:bb:c5:70:3e:aa:b3:c5:53:45:89:55:
81:fa:71:2d:1f:36:ac:df:4d:d2:31:81:54:b0:ec:
3f:b2:89:3b:36:0b:14:b5:75:95:fd:75:2a:2f:21:
5c:74:aa:02:f6:61:ce:09:6d:40:00:db:dd:dd:44:
32:f5:97:a3:9e:ab:0f:df:ba:99:7f:87:fc:e0:36:
89:6c:51:e2:61:71:1f:32:01:9c:fd:c6:06:bf:57:
a5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:E3:3B:59:D1:E3:63:C7:7D:D7:A6:15:83:41:15:DB:C8:C1:39
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4e:2e:1d:cd:01:84:de:bb:e7:13:fb:09:26:21:2b:7b:d4:
1e:f2:93:96:49:58:de:4f:85:e3:ef:c0:02:84:00:fa:62:9b:
06:2b:b8:b3:84:6a:74:d8:06:d0:2a:55:e9:0f:76:1b:7a:dd:
ac:2c:40:9f:e8:68:6c:30:5e:5a:56:da:23:ac:f0:5a:3d:ff:
d5:9b:a3:ab:78:ef:67:af:bf:7c:76:4b:e9:14:01:28:44:39:
e1:dd:bf:5f:8f:8f:a1:ef:29:cd:c6:be:1a:cb:28:55:89:f9:
6d:40:95:41:ed:a6:08:16:85:90:77:7e:f8:dd:45:a6:66:ea:
49:7d:d3:e3:5a:91:6c:69:e2:65:8f:07:de:16:f1:fc:81:22:
0b:c4:62:c7:bc:5c:e4:8b:70:8d:f6:ba:e0:36:37:25:74:82:
86:6e:fe:0e:2e:83:31:aa:80:ed:29:60:cb:5b:07:85:dd:46:
87:b5:24:ff:d9:df:2f:f5:bb:27:35:b9:6a:b4:44:4d:b2:e2:
92:bb:ed:87:5d:f4:33:e6:2f:6f:3b:1d:8f:7d:8a:59:bb:3e:
03:43:47:07:da:49:c8:92:a0:b0:7c:2b:ca:1e:ce:50:cb:26:
1a:c5:bc:30:11:d3:d0:39:b4:53:f4:e9:05:5f:37:53:31:22:
5d:0e:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:00 2025 by rpki-client