Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: JQWs3N5anayBZX76TiAoKYjGGggvMbR4U2Pp3J7AUiI=
Subject key identifier: 24:AA:D0:5D:C2:BB:2B:64:16:10:4E:F6:B1:17:A0:4B:96:5D:DC:84
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 019882E78BA9E5B1592C5A0A5E07C5E32F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 05:01:09 +0000
Manifest this update: Thu 07 Aug 2025 05:01:09 +0000
Manifest next update: Fri 08 Aug 2025 05:01:09 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: y5yb0FpIqyMQmAXehLdFeKivdi/3kquEObm5cd2T3ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:e7:8b:a9:e5:b1:59:2c:5a:0a:5e:07:c5:e3:2f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Aug 7 05:01:09 2025 GMT
Not After : Aug 8 05:01:09 2025 GMT
Subject: CN=24aad05dc2bb2b6416104ef6b117a04b965ddc84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:44:7e:80:3e:2d:54:2e:a9:89:0e:dd:c2:
67:25:54:34:5f:e7:1f:c6:8b:46:8b:9a:ab:1c:ef:
b7:5e:19:13:70:cd:e2:6c:ae:db:a4:73:0c:d8:8e:
4b:6e:88:d6:7e:0b:64:3e:fb:11:07:73:f7:b1:b5:
62:7b:cb:70:6b:15:8d:70:16:aa:eb:95:c6:0a:70:
96:93:0a:55:a5:04:14:45:00:a3:8e:79:b2:b0:f9:
e5:ff:af:4b:35:08:39:f8:17:74:10:28:f4:ca:5d:
13:aa:f9:c1:7b:29:19:47:3e:28:32:0b:e8:d3:f2:
d9:96:ff:26:dd:74:dd:38:c3:ef:df:33:81:56:00:
2f:48:cc:e8:7c:96:33:04:e2:80:f2:74:8b:e5:0c:
f1:57:30:31:55:ed:94:f2:f4:c8:dc:71:70:aa:db:
76:cb:db:f9:a4:1f:ca:61:51:cd:cd:fa:99:58:7b:
76:52:d5:4e:bd:b4:e4:02:28:ca:ee:32:65:c1:99:
e4:cc:47:65:b7:d8:1f:40:24:aa:8e:2d:a4:ff:b8:
a2:43:5d:83:c9:54:e1:fc:d4:c5:7d:b0:66:1c:1d:
d2:82:17:46:6e:eb:e9:81:13:ca:2e:a5:9e:0e:37:
ca:6f:10:ed:54:34:b0:bf:0b:6c:da:03:1c:7a:0a:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AA:D0:5D:C2:BB:2B:64:16:10:4E:F6:B1:17:A0:4B:96:5D:DC:84
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:dd:de:93:a4:7f:d7:1b:b1:20:e4:25:1f:69:e1:5b:90:d9:
57:8a:d5:f7:a4:1b:f5:88:a8:74:64:39:e4:24:23:39:01:b0:
a1:b5:e5:9a:80:d1:77:72:c9:7c:06:c1:77:d4:a6:d2:85:f0:
92:93:62:d9:7c:f6:f7:54:9a:6a:c8:89:5e:2d:b8:ba:c7:af:
91:69:99:ad:bc:c0:51:c4:6e:08:70:91:28:f4:8c:f0:5c:19:
30:1e:00:08:91:e3:b0:64:d0:03:cb:cc:1e:da:67:25:31:e8:
eb:49:77:41:08:d4:64:2d:fe:48:a1:78:0c:81:72:a7:5b:2d:
1c:40:8e:42:29:73:14:82:10:25:77:7d:06:b1:ef:1b:dc:b9:
84:e5:0c:3b:64:73:58:13:9a:84:8e:06:b6:50:a7:14:36:c4:
95:1f:dd:17:ae:cb:77:54:87:4f:a1:60:dd:94:b0:4e:16:aa:
b2:71:fb:29:12:58:6f:f9:17:10:ad:3f:e3:19:4e:c2:60:db:
ed:0b:f2:1b:6e:52:c7:89:af:7d:a0:ee:d3:e4:86:01:8f:1e:
a3:d5:71:c4:a2:dd:1e:9b:bf:fc:3f:b8:1a:21:59:4e:9d:97:
02:ad:41:bc:b3:96:19:c3:b7:c6:47:4d:0b:68:21:90:09:95:
9e:cd:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:01:08 2025 by rpki-client