Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: 3RiG+SCH+ACinV1UD89nXYKNHuB3iADgVNh33/kPUVU=
Subject key identifier: 93:81:ED:0D:26:0F:C9:C7:0D:3A:13:D7:5D:ED:9A:45:8F:76:80:8E
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01987486BCE69122EF2E41331C21430A3D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 12D9
Signing time: Mon 04 Aug 2025 10:00:43 +0000
Manifest this update: Mon 04 Aug 2025 10:00:43 +0000
Manifest next update: Tue 05 Aug 2025 10:00:43 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: azvNFOmB8itTQ+zvf0Xjyr7xr23gH5fucoicn8QswSg=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:bc:e6:91:22:ef:2e:41:33:1c:21:43:0a:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Aug 4 10:00:43 2025 GMT
Not After : Aug 5 10:00:43 2025 GMT
Subject: CN=9381ed0d260fc9c70d3a13d75ded9a458f76808e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:f2:37:5c:b2:1b:ae:49:f4:94:cb:11:f4:
a1:43:e8:c6:6a:13:69:b9:b1:08:b6:0f:93:6e:de:
84:ea:00:fe:e3:6a:7e:56:29:30:bb:ab:36:64:50:
df:ff:e2:64:ad:65:cc:75:a3:0a:95:3a:32:8b:fc:
04:90:7d:eb:31:4c:ed:ef:03:80:15:0c:0e:e9:95:
61:67:15:0d:f4:c9:08:61:d7:1c:b3:e2:35:b7:db:
09:a2:df:5f:84:ba:87:5c:44:ad:63:fe:01:69:59:
42:2a:e8:e2:59:28:02:60:ab:f4:f4:ed:4b:8b:d2:
d8:5b:f5:a6:be:97:bf:a1:3b:30:03:8e:c4:d5:f6:
86:e1:95:dc:cd:69:c1:78:2b:ad:06:7f:9f:2a:92:
89:25:1c:d1:34:5c:eb:ec:55:c2:2e:9a:fe:fa:0b:
ea:0c:76:1e:e2:7e:7e:22:c6:4a:bb:e5:eb:e4:9a:
65:8e:ee:5a:71:40:d6:5e:9a:18:39:70:7e:55:86:
70:4b:d9:4d:54:7c:73:dc:56:3d:84:c3:8e:c2:64:
2e:d8:93:ac:e1:1e:c8:a9:59:0e:6a:47:bc:35:76:
f0:4e:a6:dc:62:11:6f:31:48:1a:12:17:89:c0:9f:
a3:e3:ec:45:9b:37:60:0b:e3:93:36:bd:04:64:ea:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:ED:0D:26:0F:C9:C7:0D:3A:13:D7:5D:ED:9A:45:8F:76:80:8E
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ed:3c:9e:cc:b8:a6:cc:79:29:27:55:18:84:c5:cc:86:2a:
a4:29:fb:82:cb:ff:2d:ab:7e:8d:84:80:39:7a:bd:83:b1:59:
99:a8:63:de:57:b4:27:ba:56:f8:fd:50:60:27:39:32:3d:9b:
e8:74:87:6f:ab:69:7b:71:8f:e9:4e:90:9e:61:a1:05:f6:5c:
49:19:4e:f3:57:38:89:9e:c4:0e:26:a5:8c:0e:55:d5:62:07:
68:92:c8:3c:bb:d3:7e:1d:6d:13:18:e4:21:02:18:14:5c:b5:
8c:90:16:86:e6:83:c3:bd:ca:e3:bb:d2:3e:72:a5:03:96:da:
ae:29:96:17:e8:6a:9c:68:a5:d6:59:eb:ca:7d:f8:dd:80:dd:
62:a0:9d:32:89:07:1c:ad:97:ba:22:f2:ad:9c:74:bf:90:aa:
9d:de:38:41:a8:24:f3:54:ab:cd:6a:cf:ef:15:34:96:44:4e:
07:ac:de:b1:28:2f:34:c7:80:cf:76:1e:d3:82:f4:e3:7a:20:
44:eb:fd:45:2f:06:ca:b8:32:d4:de:68:d0:54:e3:6c:55:4d:
5b:8f:9a:de:72:d4:26:63:6f:c4:ac:2c:e6:cc:52:7a:90:7d:
65:ac:63:b7:b4:46:e8:9f:d9:d3:14:3e:4e:1b:93:0e:38:d9:
f4:8f:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:05:39 2025 by rpki-client