Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: lLpNKUtPN5CZB9YzN5c34RTfDewsGJjss0ceFWO3tTU=
Subject key identifier: A2:4D:31:96:7A:F7:0C:E2:AE:73:47:2B:87:92:C8:E7:34:F1:01:5D
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0198D47350122D752D3064A5EEC448A7DF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 135A
Signing time: Sat 23 Aug 2025 01:03:03 +0000
Manifest this update: Sat 23 Aug 2025 01:03:03 +0000
Manifest next update: Sun 24 Aug 2025 01:03:03 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: le04P3OUBUUIsg8UtPk/GIzl3VKCC4gPCxopI0rGSsQ=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:50:12:2d:75:2d:30:64:a5:ee:c4:48:a7:df:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Aug 23 01:03:03 2025 GMT
Not After : Aug 24 01:03:03 2025 GMT
Subject: CN=a24d31967af70ce2ae73472b8792c8e734f1015d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bf:73:9b:41:fe:3d:74:96:e4:fb:75:96:93:
87:05:c5:0d:bf:50:cf:94:a2:74:b4:9f:98:50:bc:
69:3d:22:18:e0:9a:6c:f2:76:44:2e:7c:4c:8a:a1:
1d:99:ca:60:83:47:3f:6e:de:c8:53:87:2b:62:70:
20:9f:95:f2:07:b3:de:9c:be:97:00:f4:e2:69:21:
f9:dc:7f:8a:db:4a:16:a1:9a:44:ca:b4:b8:5e:09:
c3:17:1f:10:5b:23:b2:aa:25:ea:d5:0c:98:3b:bd:
83:37:53:b9:07:64:f8:46:34:36:fe:b3:e7:97:b9:
e0:da:5b:b4:5a:13:e0:fd:3c:23:e5:bf:4e:21:2d:
b1:73:1d:1c:ff:84:d7:ba:f7:da:ca:35:eb:6c:d4:
48:05:d4:ae:db:f8:c8:12:91:82:0b:79:3a:f0:52:
86:c5:26:77:db:f9:2d:ee:fd:50:b8:21:be:c7:c5:
47:df:a7:40:c4:f0:04:9d:ae:71:22:70:43:4e:a6:
b0:49:6d:01:38:84:dd:78:53:52:0a:e0:63:6e:5c:
ed:1b:86:9f:dd:96:29:3c:15:df:f5:da:57:61:c0:
64:07:97:42:aa:74:72:c6:7f:f9:d2:ac:7f:fa:52:
4e:76:c3:bf:3b:d2:a8:46:0c:7a:94:cc:92:45:e2:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:31:96:7A:F7:0C:E2:AE:73:47:2B:87:92:C8:E7:34:F1:01:5D
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2c:cf:88:d3:7f:a2:12:1c:f8:93:84:51:d7:c5:f6:70:8c:
d2:81:50:0a:e7:8d:c0:12:56:80:77:57:f1:5d:c3:ee:c3:f9:
7f:50:f2:11:de:e4:f5:10:73:32:8a:3e:8d:34:82:f6:f7:33:
c0:9b:05:b9:6f:99:26:d8:37:2e:21:4e:e7:88:98:89:89:a4:
e7:86:eb:8e:d2:e6:d8:3c:50:3f:2c:f2:55:f3:c1:17:44:4f:
b9:01:ea:6b:34:16:fc:ec:74:3e:fe:e9:9c:a7:41:8b:cf:8a:
cd:34:9b:56:55:59:22:f8:5d:a8:74:bb:7e:51:aa:16:3c:8e:
7a:7e:5b:9f:ca:00:13:35:05:5b:b0:2a:a7:c6:15:85:24:e1:
12:d3:74:96:97:a7:44:31:06:8a:d1:33:3b:3a:ce:c0:5b:41:
5b:c6:92:15:f9:ad:84:f0:97:c6:1c:d2:86:01:30:7a:b1:9a:
77:ca:89:1b:0f:e5:de:f2:79:59:8e:0e:e8:cd:d0:60:af:cb:
86:4b:11:02:48:ab:2f:2b:f3:d9:88:b4:36:9f:18:70:7f:1a:
c0:e5:66:b2:0b:9d:3b:da:9d:70:59:46:df:c3:b1:19:56:8f:
03:09:07:61:3a:c2:b6:a4:19:c4:0e:f7:f6:29:3c:95:da:06:
91:af:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:38 2025 by rpki-client