Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
File: myANDnrTzvciOLUWTEss3eI6ah4.mft (raw, json)
Hash identifier: yo30yQ4ERdMGdSILKgDtlFLGPtInNR1IE8HMkSY07X8=
Subject key identifier: 0B:05:64:6D:58:B2:09:F4:CD:3E:E9:79:05:13:B8:DF:5C:34:6D:8C
Authority key identifier: 9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
Certificate issuer: /CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Certificate serial: 019895C993C5F81362FD2EF38FF6EA5A4134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
Manifest number: 162E
Signing time: Sun 10 Aug 2025 21:01:12 +0000
Manifest this update: Sun 10 Aug 2025 21:01:12 +0000
Manifest next update: Mon 11 Aug 2025 21:01:12 +0000
Files and hashes: 1: 0-dFdMQBS6PQc_H8zCEvitr9Geo.roa (hash: wf7BGdUuzEvUWE1tRs5aPe5d6Kbqkjno2v5St+tRxhA=)
2: k0CTtxTXl1I48Yds1A8KTpGHtHs.roa (hash: rvbxHdqMX6z0CUCjYmQxK28vPcZ3o/9PHD7dLaG7th4=)
3: myANDnrTzvciOLUWTEss3eI6ah4.crl (hash: JQaBXP8TINlDLwODWSrfo0Mj+6hIRvRW9xt4k9YHOY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:93:c5:f8:13:62:fd:2e:f3:8f:f6:ea:5a:41:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b200d0e7ad3cef72238b5164c4b2cdde23a6a1e
Validity
Not Before: Aug 10 21:01:12 2025 GMT
Not After : Aug 11 21:01:12 2025 GMT
Subject: CN=0b05646d58b209f4cd3ee9790513b8df5c346d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:4b:da:80:3e:aa:61:8e:79:52:a4:9e:61:
22:28:36:ae:6d:0f:39:37:82:ae:be:dc:ab:42:21:
ec:70:48:51:ad:b2:08:2e:03:dc:de:77:c2:03:50:
ab:6b:7f:0b:20:b6:77:6b:b3:2f:a8:f4:bd:eb:44:
1e:af:2a:bf:59:53:df:19:3c:bc:3a:b8:f1:d6:08:
14:06:ed:0b:8f:77:1c:22:ec:76:8a:8d:22:6c:c6:
c1:68:87:cf:fc:de:84:cc:39:a9:7e:c2:41:33:9c:
25:11:0e:1f:59:60:cd:02:9a:69:64:fe:7c:05:c5:
7b:c0:bf:51:1b:86:fc:96:7d:19:7b:41:78:c3:00:
67:66:ef:74:7f:76:b6:cb:60:b4:f9:fd:03:33:ba:
86:c6:9b:ad:75:88:c9:fb:7a:26:27:f5:d9:01:28:
0a:09:98:1f:43:4a:da:a1:15:6f:50:0f:2e:af:07:
46:d7:04:05:e3:2e:ad:6a:8c:c0:5e:bd:03:c0:af:
2c:6c:5a:7a:f2:46:76:63:03:8b:2e:03:5a:00:f9:
c6:cc:ce:2d:52:63:38:9f:d0:ea:0f:00:0b:1a:f7:
22:bc:26:0a:1c:3a:5e:42:89:d6:c2:eb:4a:10:10:
2f:23:33:d2:35:00:2b:a6:7d:1e:5a:71:73:1c:d7:
53:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:05:64:6D:58:B2:09:F4:CD:3E:E9:79:05:13:B8:DF:5C:34:6D:8C
X509v3 Authority Key Identifier:
keyid:9B:20:0D:0E:7A:D3:CE:F7:22:38:B5:16:4C:4B:2C:DD:E2:3A:6A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myANDnrTzvciOLUWTEss3eI6ah4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/fcbcc6-739b-4f5c-ae3c-a4f08dbb85a5/1/myANDnrTzvciOLUWTEss3eI6ah4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e8:9d:65:8f:c8:89:f6:3e:58:16:85:11:ba:1f:21:e1:b5:
f6:0c:4b:0a:8e:cb:59:ed:34:6b:c4:1f:4a:46:a1:11:96:d8:
cf:4e:39:ce:11:48:34:c1:d0:9d:96:14:5c:49:a3:33:e6:3b:
c5:32:bc:24:f2:9b:00:ac:56:04:9e:f3:60:1b:64:3a:3c:95:
cd:66:da:74:fe:fe:51:de:bc:ff:58:0a:38:ce:9c:4d:14:52:
eb:d2:58:b8:5a:aa:b4:ee:68:6a:dd:b8:65:f1:c3:e2:f0:f2:
32:c0:ec:87:c7:36:19:25:98:4e:b6:14:0a:73:88:af:37:fe:
50:79:69:3b:1d:03:e0:31:10:34:ec:e6:54:d8:bb:f6:5b:5f:
b0:01:93:59:7a:a3:35:d4:7a:00:74:b0:a5:46:0b:80:54:ca:
b0:fa:45:42:4c:ba:d6:2b:18:eb:f6:10:04:e6:b1:20:a2:62:
13:eb:fc:0c:90:93:1a:a7:dc:5e:7b:2a:9b:87:e8:10:f1:93:
54:c6:09:15:57:ce:39:73:36:e0:de:7d:eb:7e:94:cd:8a:f6:
8c:34:e9:95:fb:59:89:e2:50:ee:48:36:7b:46:65:6a:90:4e:
65:a1:06:36:fd:66:9b:85:61:46:95:2c:6f:c0:4f:85:92:e6:
f6:f7:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:10 2025 by rpki-client