Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: ubGf34Ek1yFGCL6IsOo7hL07aqtg6TAYcM/KicJjyCg=
Subject key identifier: 4E:DB:22:8D:71:10:92:FE:DD:FA:1F:62:35:90:52:07:8D:7A:D8:0D
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 0198816768A8D97533A36D2FAEAEF43F0FF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 22:01:34 +0000
Manifest this update: Wed 06 Aug 2025 22:01:34 +0000
Manifest next update: Thu 07 Aug 2025 22:01:34 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: D9eqKx5mAOVnutaplV9NK4Z/uvPmF9a/oOfCjJ0zL/8=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:68:a8:d9:75:33:a3:6d:2f:ae:ae:f4:3f:0f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Aug 6 22:01:34 2025 GMT
Not After : Aug 7 22:01:34 2025 GMT
Subject: CN=4edb228d711092feddfa1f62359052078d7ad80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:39:e6:e6:fe:36:6e:cf:86:60:c2:b3:37:
e9:35:20:e0:e5:ec:bb:83:6a:a5:c2:f1:02:10:aa:
3f:58:1b:29:c3:43:87:38:6c:5d:92:26:48:ad:fa:
a7:cc:3e:66:82:3b:ea:e2:f8:c3:fe:63:7d:8d:7a:
16:a2:2c:71:a4:ce:e1:13:b2:7c:d6:ee:af:40:57:
ed:57:5d:59:8c:17:0f:c4:ae:87:e9:cf:d5:07:eb:
46:f0:2b:7d:cf:7c:e1:ff:ba:8b:d1:55:b0:50:9f:
b6:1d:92:68:d3:66:44:2e:b2:6d:be:6e:d0:0a:bd:
73:47:1c:07:e0:29:e5:2e:50:00:10:ad:6c:7a:90:
55:cc:d5:6e:10:a8:c0:44:16:de:84:dc:8a:19:a3:
85:c0:2f:ab:e4:1f:93:1c:50:4d:fc:24:63:f1:4c:
d5:df:b6:ea:27:ea:6f:89:5d:4a:61:b0:1c:6c:ed:
03:00:25:42:69:c0:e9:1a:09:9f:93:17:4b:63:42:
47:f4:db:78:02:7f:0a:06:22:7a:20:c0:4c:a0:e0:
04:e4:7b:8b:b2:99:48:b0:e1:b7:3c:63:95:ac:0e:
5e:eb:be:f3:bf:75:74:96:77:e1:4d:9e:34:6a:1f:
42:68:f4:7b:b2:f0:33:e5:b2:39:22:60:fd:22:c2:
c6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DB:22:8D:71:10:92:FE:DD:FA:1F:62:35:90:52:07:8D:7A:D8:0D
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:81:25:a0:35:e1:fe:dc:20:ba:cd:2e:1e:8a:a4:ea:95:05:
0f:1c:36:a4:82:e6:ae:0d:5f:de:9f:f2:3e:65:5e:ec:d8:5d:
36:d2:87:ed:80:a2:c1:ba:b7:c1:dc:cc:0f:51:2f:aa:88:26:
e0:34:bd:c9:17:69:bd:a3:84:6b:e8:28:b3:b1:ea:9b:24:9c:
64:8a:4e:a3:bd:67:55:d2:bd:8c:a2:95:3d:d9:90:73:38:28:
cc:f3:00:f3:a8:3b:95:c8:61:24:03:32:35:9a:f5:f1:98:66:
82:c5:b8:74:a6:7f:7d:43:02:93:ae:79:c1:35:b7:e4:ac:18:
aa:bd:b3:0a:e1:e7:b7:ac:2b:25:f7:1a:d8:7a:d8:37:71:97:
17:d6:25:1d:0a:f6:fe:f9:a1:7d:fc:31:23:25:cd:a0:ec:b6:
f1:0d:b4:a3:a8:77:1e:24:58:9f:c0:2e:54:db:1a:db:9d:47:
65:1e:19:3a:41:0c:5d:01:f9:6b:e2:27:d9:4d:75:48:91:7b:
49:10:ce:df:df:87:c4:78:3a:bb:19:fd:d0:e1:ac:21:e3:ac:
23:1e:81:97:17:1f:45:16:07:08:8b:38:31:12:86:62:32:be:
21:0b:76:95:af:bf:47:b2:51:10:0b:af:11:72:76:35:0d:cf:
58:2d:a5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:23 2025 by rpki-client