Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
File: o9oBlglsEcIx5JuzCJZwuU2_XoA.mft (raw, json)
Hash identifier: x5j8Yj3eAU8BZfBdsl3DqBrO8jgUsjHewLfoxypoI5g=
Subject key identifier: 38:87:FF:21:56:C4:9A:8F:2A:67:6F:1D:65:4D:26:A5:EA:C0:86:B8
Authority key identifier: A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
Certificate issuer: /CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Certificate serial: 0197B7452BA5C16EC9588406C62312DF563B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
Manifest number: 11F9
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 6qcJyLkGHGKYEWJcRiN4L6Z8qn8.roa (hash: 5OQd3tPQBKWKRhlqwep2BEZpe6x6xAIuVkUwGHnZJ7w=)
2: o9oBlglsEcIx5JuzCJZwuU2_XoA.crl (hash: 476ZfCTtBYWeMDHxzEUjXNbMRw9ADKdBgnU2U4/7U+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2b:a5:c1:6e:c9:58:84:06:c6:23:12:df:56:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3da0196096c11c231e49bb3089670b94dbf5e80
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=3887ff2156c49a8f2a676f1d654d26a5eac086b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:40:f1:00:da:ee:49:bc:da:2c:cb:2f:78:
ec:e7:f2:50:ff:05:5f:1d:15:9a:d3:2c:03:50:0b:
33:af:db:0a:52:84:1d:c4:d0:1e:81:21:9f:a5:6f:
57:a6:8c:c4:56:6d:91:1b:99:95:3c:14:a3:3c:75:
f4:5f:d1:9e:e8:b7:68:15:fd:76:3a:cb:f4:4a:7b:
56:6c:67:6c:e5:8f:e2:64:95:5e:f5:cf:a4:fd:f7:
09:a6:9c:28:1f:30:ae:9a:82:1b:b4:a2:e4:04:61:
27:ac:28:4b:39:c0:4a:d4:0d:92:57:21:f7:75:24:
df:4e:aa:9e:84:7e:b7:6d:1b:6c:55:e1:28:2e:71:
4d:4e:95:6e:f5:7c:a4:f3:aa:df:2a:a4:09:af:08:
de:6e:cc:02:dc:be:e1:00:d9:6b:b5:0d:76:7e:ef:
d0:d0:ab:5e:7a:bc:45:94:42:c7:1e:b6:02:44:5a:
47:f7:11:74:f8:bd:20:93:81:14:71:c5:b5:97:80:
13:a0:7a:dd:b2:fb:af:46:8e:19:0e:cd:3c:3b:64:
4e:4a:1a:28:8b:5f:b5:50:b1:c8:50:19:ea:a4:db:
cd:9b:34:f2:7c:27:b9:fe:97:64:d0:34:ca:5f:cb:
65:f7:ca:29:92:35:18:54:21:1c:31:5a:fd:cf:73:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:FF:21:56:C4:9A:8F:2A:67:6F:1D:65:4D:26:A5:EA:C0:86:B8
X509v3 Authority Key Identifier:
keyid:A3:DA:01:96:09:6C:11:C2:31:E4:9B:B3:08:96:70:B9:4D:BF:5E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9oBlglsEcIx5JuzCJZwuU2_XoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7d9854-969e-4e34-a1df-a302f6a74b08/1/o9oBlglsEcIx5JuzCJZwuU2_XoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:85:00:1a:39:68:81:08:73:b9:48:60:03:04:18:78:98:ff:
79:9f:31:d8:0e:3b:75:0f:e7:bb:4a:02:75:dc:19:a7:c1:a1:
d3:57:09:49:46:41:7e:28:21:82:c8:37:52:99:61:0c:2c:51:
e5:6c:ae:b0:6e:8d:76:ce:17:a5:2d:d3:64:f9:31:d0:f8:5c:
e5:b4:40:96:89:d1:00:84:3a:38:7a:54:c3:fa:f6:5c:e6:a6:
2b:82:59:8b:0f:2b:c8:91:07:79:54:35:8c:9a:e8:d1:b7:e7:
9d:9d:ee:58:ad:e8:13:58:f2:36:b9:d9:22:3f:0e:01:d5:bf:
03:a8:9c:bf:16:0e:e3:95:47:4d:15:90:ef:d0:83:77:61:09:
a9:c2:fb:84:3b:fb:4c:ec:5c:a8:8d:f6:5a:8f:ba:95:18:87:
17:f4:d2:e0:81:da:88:9d:46:8b:c4:77:96:83:7c:4c:9e:4a:
16:d9:77:54:4c:96:be:79:2f:47:3c:ff:96:6b:54:61:ea:c2:
9b:3f:b7:dd:c3:ef:45:13:c3:43:f1:1f:68:0c:59:25:7a:db:
4d:1d:b4:e7:80:2e:4f:25:72:ad:31:0a:7b:b1:10:c1:29:20:
f4:19:32:96:65:2f:77:ad:da:dd:23:88:f8:a7:8b:4d:e9:15:
1e:65:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:23:03 2025 by rpki-client