Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: 8ScN2oGgxxC/HWdTqSJzz4auAsIQTP0nSg/9B/5H+4Y=
Subject key identifier: BC:17:92:CD:F2:8D:CB:2F:B5:2F:BE:C2:DE:84:3F:ED:02:C8:B6:88
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 0198D58361ECD0B90AC2825875277BE57BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: xehuRssxMiZei/nuCgYtCA9T2sL1d7B8D29mBzh8PGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:61:ec:d0:b9:0a:c2:82:58:75:27:7b:e5:7b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=bc1792cdf28dcb2fb52fbec2de843fed02c8b688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:b4:7c:ba:d4:72:ee:3b:a1:2a:37:dd:a9:
d7:48:14:8b:29:b4:52:a4:3f:8f:dc:45:a2:44:8c:
96:bc:f9:96:8c:65:d3:6a:48:17:86:b4:55:44:9f:
07:6a:b6:56:b6:4c:92:46:95:b6:3e:4f:c7:0b:60:
e2:ce:16:f4:a5:2f:5b:90:64:fe:93:e0:9e:7e:03:
9e:91:3d:c2:01:2f:4b:5d:30:7e:38:97:bc:18:ed:
7f:92:d3:ee:ee:e9:57:19:6b:77:ce:86:26:fa:3a:
d5:5a:22:d0:d5:8b:64:81:c4:20:f3:be:31:11:56:
03:d4:94:36:46:aa:13:d5:bf:59:3d:5f:2b:ef:b4:
3e:b7:6e:0f:eb:7d:61:dd:89:64:87:e9:4f:44:5d:
c1:90:c2:d2:ee:6f:05:03:97:40:67:35:7f:f4:3a:
2a:6b:c3:9b:75:c8:bf:50:9f:3f:0a:18:25:35:90:
06:bb:3d:d6:3f:68:5c:7b:65:ee:a2:c8:75:b3:23:
b7:9a:a7:e4:bb:62:c2:04:41:16:28:b7:94:98:69:
e8:80:da:ff:fb:b7:78:5e:87:6a:61:a5:8c:9d:eb:
8c:5a:25:6a:0b:18:e4:5a:1b:fd:75:5b:59:01:5e:
2b:b5:f0:2b:a6:03:a0:47:80:1e:2a:47:5e:fe:af:
4f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:92:CD:F2:8D:CB:2F:B5:2F:BE:C2:DE:84:3F:ED:02:C8:B6:88
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:8c:a3:45:88:4e:63:f2:6b:45:e6:95:39:4d:e9:d8:9a:de:
6e:34:56:07:b5:1a:77:4c:a0:03:4b:8d:11:9f:20:45:5f:b1:
cf:e7:ee:a2:6e:b6:e5:cc:dd:25:d1:94:d7:95:2f:f4:b4:45:
46:82:e8:17:0a:97:ad:cc:2a:7a:a8:8a:a2:fc:66:de:55:25:
4e:88:7f:b1:1c:b0:cf:88:04:99:0e:47:33:18:10:84:13:5b:
2b:0f:a6:1a:d8:e0:e9:2a:ad:f5:23:67:fc:d4:38:5f:ea:44:
98:da:0a:f6:8d:36:aa:ab:5f:2e:81:3c:94:11:aa:62:87:65:
30:46:85:61:45:0e:26:d0:29:03:f7:d4:3c:df:51:c8:6f:de:
a4:91:24:47:d6:cc:2a:51:45:d0:34:d2:6a:bd:93:ed:d5:4a:
c0:ea:e8:9d:e9:a0:65:04:1a:00:a7:13:a5:3d:7e:f3:f8:9d:
33:c9:12:24:b7:b9:dd:7e:84:6f:5d:9b:e9:89:c4:71:a3:8d:
a9:81:b0:99:53:5d:23:65:6c:12:72:77:56:16:b9:e2:70:9f:
31:36:2f:2c:f4:1d:1a:3f:74:3c:95:b3:16:34:61:80:00:4a:
a3:9d:38:e7:2f:7c:01:8c:bd:48:85:9b:7f:31:cb:d7:ab:99:
8d:78:19:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:58 2025 by rpki-client