Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: 8wNfIp/2G8KLh+hHXwm70eAUKjMZkNOsM1JT8Pjw6HQ=
Subject key identifier: EE:A4:02:E0:F4:3D:66:B2:83:73:F0:4C:B1:54:7C:2B:0C:68:49:16
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 0198D66172206EE1B723D0F8494CED83742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 09B7
Signing time: Sat 23 Aug 2025 10:02:47 +0000
Manifest this update: Sat 23 Aug 2025 10:02:47 +0000
Manifest next update: Sun 24 Aug 2025 10:02:47 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: DbUvgU6mSOnHhCZJR6LjH5IF47eU5JCfDDv+y86FjX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:72:20:6e:e1:b7:23:d0:f8:49:4c:ed:83:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Aug 23 10:02:47 2025 GMT
Not After : Aug 24 10:02:47 2025 GMT
Subject: CN=eea402e0f43d66b28373f04cb1547c2b0c684916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7e:2d:b3:da:4d:cf:4d:b2:22:ed:b7:61:b6:
f5:44:19:da:3c:ce:2a:d2:bb:15:7a:a4:84:1d:8a:
36:b3:10:9f:c2:16:fa:84:a5:17:46:4a:ec:5e:4c:
c3:e0:01:f7:b9:b1:0f:9a:2c:44:63:75:a0:d6:66:
ba:d5:d0:db:6e:63:9e:ff:e4:bc:4b:9e:18:c9:44:
57:e2:ab:e3:a9:66:ee:14:a5:1d:4b:39:55:ab:4a:
fd:15:15:a0:b5:81:88:5a:22:e0:81:d9:a7:e3:63:
85:63:06:ef:7d:94:00:50:48:e3:40:e5:db:70:91:
ce:64:3e:c8:65:77:1b:9c:bc:6b:21:e1:d5:17:c0:
57:a9:e2:89:30:70:44:08:05:40:14:3f:bc:d5:6a:
cf:db:5c:0e:74:91:57:46:28:ba:79:5f:87:40:98:
68:65:e2:18:6d:aa:f0:28:60:ee:63:82:c3:61:74:
0c:57:64:a3:cf:55:a8:d3:4d:d5:42:6d:67:fd:53:
1b:e8:1c:eb:d7:60:57:e9:d2:fc:26:f2:7a:07:f3:
dc:b2:14:86:95:0d:5e:ac:87:fd:fc:3d:79:32:04:
a7:1e:d5:8e:bb:93:8f:b9:a6:94:83:44:fe:18:87:
8f:53:1d:8f:bc:7f:01:3c:c0:df:e3:36:05:44:f1:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A4:02:E0:F4:3D:66:B2:83:73:F0:4C:B1:54:7C:2B:0C:68:49:16
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:74:92:df:28:c2:bb:4e:41:87:85:38:0c:14:17:13:4f:
87:d4:0e:3e:8f:76:09:71:4c:ee:b1:8a:2d:4d:ed:70:ba:cb:
e2:04:0e:93:c5:00:59:0a:dd:91:7b:26:d8:a9:e3:33:80:9e:
2c:57:05:8e:26:fd:1b:4a:38:1a:56:c8:2e:3c:b2:e5:1b:a5:
e9:8e:4a:30:83:3a:c4:a1:53:c3:88:f3:01:54:92:38:27:0d:
65:fd:ee:75:a7:af:01:c3:77:5f:32:7c:cc:ea:96:4a:f2:ed:
dc:bd:ce:d1:4f:19:47:0b:70:ad:01:3c:bc:ec:9a:7e:b1:d2:
5c:18:27:b3:76:b9:33:59:fb:ea:74:31:0c:7c:c8:79:87:d7:
63:fa:10:8b:db:e6:c1:59:61:51:36:06:af:56:32:10:fb:36:
cb:02:17:e7:4f:f4:77:fa:a0:cd:39:7d:30:74:29:fa:35:8d:
5d:98:9d:26:75:b8:17:9f:b0:db:36:df:79:ff:b9:16:b4:e6:
94:c6:31:34:44:0d:a3:5c:ac:50:8f:f7:7a:19:09:28:4d:01:
0b:74:e1:1a:b6:40:72:61:90:9c:e4:e1:f2:41:b1:3a:57:df:
b8:f2:e5:58:57:ab:ae:78:70:a8:25:eb:67:f4:f6:bd:d1:62:
6e:6c:ec:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:29 2025 by rpki-client