Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier: wtzFCk32eeKF/zFDweyn+tszqJWmKGhL0AtCLZk4pJQ=
Subject key identifier: 64:79:51:CF:2A:30:9D:8D:5A:76:5A:11:EF:BE:11:FF:04:7D:04:91
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 019896DC823D141798F21F584DB163E10E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 02:01:30 +0000
Manifest this update: Mon 11 Aug 2025 02:01:30 +0000
Manifest next update: Tue 12 Aug 2025 02:01:30 +0000
Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: b8K3pGw457hR5+JsirHrEGM/CTWfJnAYycnatXRVW6o=)
2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:82:3d:14:17:98:f2:1f:58:4d:b1:63:e1:0e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Aug 11 02:01:30 2025 GMT
Not After : Aug 12 02:01:30 2025 GMT
Subject: CN=647951cf2a309d8d5a765a11efbe11ff047d0491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:95:01:ad:d0:79:f1:fb:40:d7:98:da:63:
db:57:2f:e2:07:2e:6e:35:1e:dc:db:d5:40:09:c8:
bb:e2:61:fa:48:27:8c:df:27:bc:40:a1:cd:f8:80:
81:64:18:fb:cf:74:f3:b6:de:fb:cb:4a:72:82:21:
0d:80:23:34:31:dc:ff:bc:fa:0b:e4:19:4f:b3:94:
d6:ac:59:ff:b8:cd:6e:d5:d4:7a:d4:49:dd:c8:10:
63:41:82:35:53:4d:aa:b9:fb:69:cb:3b:ec:99:e4:
a8:5f:0c:ca:4f:92:09:08:72:71:0b:d7:9f:d4:3d:
d1:8b:21:d7:f7:fb:72:26:08:ac:ae:ea:94:45:36:
8c:6c:f4:36:ee:d4:f5:41:54:24:b4:45:15:c7:dd:
7f:db:16:b2:3f:9e:7c:63:ad:2d:07:6c:4f:e4:03:
13:52:b2:19:b2:4c:0c:52:90:4c:04:32:32:4d:b5:
26:e6:51:09:dd:f9:07:46:c9:5d:54:bf:e1:5a:6a:
20:7b:fa:b4:75:82:4e:b2:e4:91:5e:e7:6d:15:de:
5a:63:fa:8a:c2:4f:f9:9f:cf:3a:d0:57:e1:e7:6e:
41:f9:ea:01:ff:d1:a9:9f:1d:0e:84:8c:0a:fa:52:
d4:29:4f:cb:40:a2:6f:26:71:23:51:af:ea:d4:e9:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:79:51:CF:2A:30:9D:8D:5A:76:5A:11:EF:BE:11:FF:04:7D:04:91
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:24:59:b6:f0:82:0c:fa:26:21:a2:87:1d:59:16:c4:ac:81:
b3:ab:cc:d6:bf:52:fc:dc:f8:0b:7b:f1:c1:f7:6f:cc:b6:87:
dd:b6:93:12:16:ec:ac:cc:ab:5e:34:98:ab:48:89:30:21:d8:
04:a1:80:a6:03:f1:a4:2f:6e:2f:09:19:f4:b6:4b:e2:4b:0d:
2e:82:e8:59:4e:00:06:6f:8b:6a:97:40:20:1b:55:f5:a7:54:
95:4d:09:18:67:b5:c9:90:de:0b:1a:aa:bb:8d:4c:32:91:64:
90:18:23:13:6d:ee:e9:76:87:f6:b4:48:7b:a4:a5:3b:2b:51:
43:ea:dc:9f:2f:9c:40:17:04:b1:46:f3:85:2f:bd:1e:6f:15:
96:7f:f0:e3:04:3e:92:84:f3:ac:13:e0:3d:09:2b:f0:a2:70:
07:1c:4a:72:ee:05:93:48:50:0c:f1:af:29:17:24:42:11:77:
6b:66:55:22:24:fc:c7:a0:5f:e7:58:50:69:be:73:23:5f:eb:
48:a3:7a:aa:d2:64:b2:31:21:6a:ba:4d:55:dc:1e:eb:07:b9:
f2:db:ce:91:da:40:f5:48:ae:51:42:71:94:5d:40:1b:0b:2c:
c6:d4:59:8e:2f:69:05:40:c4:99:cf:7b:2a:f7:2a:fa:48:7a:
2f:15:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:43 2025 by rpki-client