Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
File: oInHIR6wy6D9k84xaziVOM4aywA.mft (raw, json)
Hash identifier: CHS+b4C4mlKAlHunHX/2TvlBhi765nRiN99OHCNU+J8=
Subject key identifier: 9F:FA:CC:93:2A:4D:7B:CC:8E:41:87:3E:99:7E:2E:B7:BA:13:1C:33
Authority key identifier: A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
Certificate issuer: /CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Certificate serial: 0197816976E320B5342BA72D3A23FCFDB12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
Manifest number: 0E09
Signing time: Wed 18 Jun 2025 05:01:01 +0000
Manifest this update: Wed 18 Jun 2025 05:01:01 +0000
Manifest next update: Thu 19 Jun 2025 05:01:01 +0000
Files and hashes: 1: 07n12IDxKPAxIxs90Uxv2kiE_p8.roa (hash: onmuGRswCBPJXmNtk3krWUPKECPDIYJbgKGbyF0Mw3c=)
2: oInHIR6wy6D9k84xaziVOM4aywA.crl (hash: WpsAt8g4aWrEpv1lNRxfLiKCtPPXLrr9BaeHhMQhH20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:69:76:e3:20:b5:34:2b:a7:2d:3a:23:fc:fd:b1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089c7211eb0cba0fd93ce316b389538ce1acb00
Validity
Not Before: Jun 18 05:01:01 2025 GMT
Not After : Jun 19 05:01:01 2025 GMT
Subject: CN=9ffacc932a4d7bcc8e41873e997e2eb7ba131c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:38:3c:a1:85:60:b0:49:4e:ce:16:ba:17:
bc:a6:7d:50:f3:40:00:8d:65:11:97:94:ea:ac:8c:
48:33:9b:19:3a:6e:0d:23:f7:1f:ef:86:9c:8d:1d:
9e:b3:a6:f8:f7:db:e5:a9:66:8a:a3:80:80:cd:aa:
ef:8f:a5:bc:f8:5e:82:0b:31:bb:d5:be:26:8a:92:
93:3a:38:5c:bc:5b:7d:89:8e:38:5e:97:cd:d7:d5:
0d:b7:0b:9e:8d:9a:be:89:16:4a:e3:f1:f6:31:13:
66:63:c4:46:44:c3:1a:d6:34:a4:e1:43:2b:00:8d:
b1:3e:56:7c:af:b2:fe:3d:9f:d9:52:5d:9c:5e:92:
d7:47:83:ed:d0:74:91:6c:39:e9:19:53:5b:8f:62:
c6:0a:4f:67:2e:19:f0:6e:73:f0:4c:c9:6e:e4:87:
c0:0b:b5:63:de:42:d8:2a:2e:3f:96:01:d5:87:cd:
c4:c3:4e:a3:17:4b:c8:5f:03:4e:c2:05:c6:7a:9f:
2e:47:0e:17:64:aa:92:40:00:90:0b:9b:a8:b9:f6:
27:dd:1c:b5:6d:c1:fb:1d:8c:94:b0:66:a1:dd:53:
e3:5c:5e:48:c2:98:3c:66:45:b0:c6:3c:05:1e:16:
dd:f6:96:d4:a3:98:7d:fa:62:c6:de:af:e1:db:7f:
02:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:CC:93:2A:4D:7B:CC:8E:41:87:3E:99:7E:2E:B7:BA:13:1C:33
X509v3 Authority Key Identifier:
keyid:A0:89:C7:21:1E:B0:CB:A0:FD:93:CE:31:6B:38:95:38:CE:1A:CB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInHIR6wy6D9k84xaziVOM4aywA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8e1204-4a03-4c97-a03f-97e080e2a910/1/oInHIR6wy6D9k84xaziVOM4aywA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:3f:35:9c:64:99:db:8a:d1:db:8b:c0:bb:48:58:a3:e6:75:
a4:0e:ed:dd:53:d8:4f:6f:52:02:6e:cc:87:53:ba:ba:e7:17:
24:1b:4d:bb:20:70:05:02:d3:dc:c3:42:7f:f7:4d:38:51:9c:
45:e0:7e:fd:23:db:6c:36:c9:dc:de:5d:bd:9b:de:5b:d3:b8:
62:fe:54:dc:1b:04:8a:9f:32:b0:69:a0:6c:3b:94:4d:ff:cd:
06:98:a6:73:4c:29:b1:98:51:98:0a:9a:43:46:a7:a5:b2:3e:
59:57:3e:84:95:c1:46:13:90:0f:ce:eb:09:74:a5:22:58:be:
f3:f5:1c:1b:cc:97:27:f7:a8:e0:96:0d:44:3e:80:d3:8d:b2:
1b:88:5d:c1:98:49:aa:52:77:2b:cb:22:1d:ba:f6:ea:a6:62:
d0:83:bd:5e:e0:f8:1c:54:0d:7f:cd:e7:82:4e:de:f8:4e:ad:
4c:77:89:39:4c:a2:7a:a3:58:ff:a4:ce:e1:54:63:41:87:8f:
1e:04:7f:f6:1e:63:52:56:29:b2:c7:93:af:21:1b:2f:27:66:
35:f4:f3:17:16:1e:64:0f:59:b5:43:53:c5:da:89:92:bb:e3:
a3:87:ef:16:14:0a:62:6c:32:67:de:66:86:24:8c:ee:ba:0f:
6a:99:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:26:33 2025 by rpki-client