Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: mttnf2U49J4MCxQS+OdC9uSkXztWHzkn4nQUOG0eqeI=
Subject key identifier: E7:64:86:46:05:89:1F:B1:36:9D:24:93:60:0D:F1:E5:87:07:69:5B
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019880C29E5BD0CE8DC13EF2D2B0CF78DE42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 0916
Signing time: Wed 06 Aug 2025 19:01:34 +0000
Manifest this update: Wed 06 Aug 2025 19:01:34 +0000
Manifest next update: Thu 07 Aug 2025 19:01:34 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: 9SPn1N5rfMSB44M1vARpI5jVXv744fTTGKgOrjx0WaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:9e:5b:d0:ce:8d:c1:3e:f2:d2:b0:cf:78:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Aug 6 19:01:34 2025 GMT
Not After : Aug 7 19:01:34 2025 GMT
Subject: CN=e764864605891fb1369d2493600df1e58707695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:e7:8f:51:84:0d:56:c4:24:bf:98:ae:f4:
f0:80:2c:44:22:87:75:a8:7a:0e:e6:e8:b9:2f:9c:
f6:a8:f3:6e:70:b4:72:97:40:0c:64:85:12:e9:4b:
5b:d7:b8:9f:9c:79:75:ae:c3:42:af:a8:4d:ee:1d:
bd:92:26:04:d4:50:99:29:5f:2f:ed:8e:db:da:61:
cc:cc:d1:4b:5b:9c:5b:b2:7f:cb:7a:1c:fc:66:ea:
3d:83:dc:76:f8:c6:bc:7d:74:a7:fd:77:47:9b:98:
2a:65:bd:f8:f1:c2:64:63:5a:c8:a2:b7:a7:4c:4a:
34:8a:9f:17:c8:42:e7:6f:0d:93:de:c1:13:59:bb:
6c:16:60:a1:41:aa:ed:f7:b6:7b:bf:b6:0f:56:41:
94:08:8e:5f:4b:e3:19:d7:d8:d9:bd:56:a2:37:85:
dc:f8:11:41:d3:77:76:9c:92:26:18:2c:61:f6:87:
f7:1f:de:c0:61:e3:96:33:19:66:df:f2:ed:7a:9f:
52:a5:d7:a4:3b:ca:9e:13:64:be:bd:e1:c2:77:84:
5b:54:c2:0d:ce:1c:3f:d0:5c:89:1d:f7:dd:fe:f2:
a4:02:ff:75:87:7a:08:31:dd:d2:da:95:36:9d:4e:
71:7b:74:a0:10:e4:51:a4:98:c6:1e:ae:47:97:a8:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:86:46:05:89:1F:B1:36:9D:24:93:60:0D:F1:E5:87:07:69:5B
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:e7:f9:20:42:90:4a:e2:58:ed:17:93:5b:61:fa:a7:62:
fb:8b:c0:33:2d:ec:6e:e7:58:bc:e8:f1:64:ea:21:58:53:24:
61:66:9a:31:c4:59:be:da:df:ff:9e:61:3f:f2:fe:ef:69:7b:
72:7d:f5:50:82:e5:18:07:3a:9a:58:ce:db:21:e1:ec:e1:d6:
f4:36:25:e9:cd:83:34:4e:b7:30:18:78:5e:57:f6:98:d9:ac:
f9:bd:ad:0e:18:03:bf:7d:f9:b9:b5:c7:e8:49:10:34:f2:49:
6b:58:fa:15:41:c4:05:31:56:dc:a3:bc:4b:85:e8:ca:92:e5:
12:3b:f8:cc:4f:65:88:86:2d:a0:3c:a3:fe:02:a6:33:8b:9d:
94:ac:7a:4b:08:47:98:7f:74:aa:e8:a8:4f:e5:a4:3d:8f:72:
7d:81:91:50:fb:eb:40:52:4f:e0:80:3f:f3:0b:5e:05:d7:de:
32:8b:12:b5:dc:74:a0:6b:da:03:1a:8b:47:18:89:16:0b:86:
10:dd:dc:97:ce:25:dd:e1:79:b2:f8:ad:13:46:dd:8f:9e:f2:
a8:41:e8:25:aa:56:df:cf:64:1c:f5:48:89:b7:af:ee:dc:28:
b1:94:d2:42:c3:9e:54:3a:6b:63:53:be:21:31:a3:c8:02:71:
76:9f:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:23 2025 by rpki-client