Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: qWb0R2GUoGXPw5WY8fDfrt0LHy9+4pn9wjDlgRU+MGc=
Subject key identifier: 01:C3:B9:CF:44:72:77:13:85:94:B2:11:31:6F:B0:74:3C:C0:F4:D6
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 019872CF62F8217F600CBD2D77ED74F6C2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 09DC
Signing time: Mon 04 Aug 2025 02:00:50 +0000
Manifest this update: Mon 04 Aug 2025 02:00:50 +0000
Manifest next update: Tue 05 Aug 2025 02:00:50 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: Vf61x5AjqLtairQOd5f0BdVvrIEJ94q6qSd/JOnBzSU=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:62:f8:21:7f:60:0c:bd:2d:77:ed:74:f6:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Aug 4 02:00:50 2025 GMT
Not After : Aug 5 02:00:50 2025 GMT
Subject: CN=01c3b9cf447277138594b211316fb0743cc0f4d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:cc:04:3f:fa:fb:0f:02:60:2d:6a:13:24:
55:ee:c9:07:5d:89:2f:d8:27:a1:31:ec:29:09:3d:
6e:f7:e2:f2:f7:94:19:6a:20:c6:46:a3:54:4d:e5:
c9:12:74:e2:10:1f:9d:90:fe:f9:4e:aa:85:f8:dd:
31:ed:52:0b:81:2d:9f:ce:47:10:66:b5:c5:a5:37:
23:18:08:c2:9e:f1:ac:4e:d0:b1:01:60:c6:b8:7c:
90:7b:ad:49:a3:3b:9f:c3:e9:ba:40:17:53:df:01:
8b:c5:82:18:ff:90:a5:aa:74:08:10:91:dd:1e:a2:
c5:b4:f1:46:75:e0:73:9a:72:7b:98:c0:fd:d4:a6:
c6:fd:9e:be:8e:69:23:2c:1f:81:ee:5f:ea:8d:37:
83:0b:18:ce:80:4a:3f:00:86:1c:2e:ca:3c:ca:1e:
2c:b3:38:6c:09:84:27:12:4c:4b:92:e6:9b:b6:04:
7d:f1:df:67:b5:0e:aa:72:9f:cd:bd:6d:63:98:4a:
95:b5:6d:b1:8a:bb:ad:0c:65:aa:72:9c:b6:db:e9:
1f:3d:01:42:50:7f:7b:3d:50:91:8f:d1:74:b5:74:
ee:ae:cf:41:a6:23:7c:31:0e:ce:8f:ad:a8:ef:d9:
31:2d:59:61:38:a3:a6:42:73:55:19:87:d4:b7:b1:
07:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:B9:CF:44:72:77:13:85:94:B2:11:31:6F:B0:74:3C:C0:F4:D6
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:e7:eb:c7:f7:98:cf:c0:be:ea:80:e0:fd:80:0a:4f:07:
2c:7b:46:a1:af:28:df:65:79:16:f1:3a:1a:ff:73:24:5e:b7:
5f:66:69:2f:b8:d2:7b:b1:d7:55:7d:84:53:2b:7d:ea:f5:c1:
4e:59:70:20:cb:2d:b5:21:7c:f2:92:a5:b4:6b:55:46:dd:ab:
58:73:cd:0b:db:e7:25:c5:78:2e:fb:0d:f3:97:95:c2:59:af:
e9:8d:0d:b4:4f:2e:6e:72:c0:a7:45:24:21:39:42:e9:cc:22:
b2:48:c7:23:42:cc:41:93:da:d9:a0:79:ee:c7:ee:c3:fe:8f:
72:4d:9d:c0:e2:1b:4e:a9:0e:f2:b0:9e:9c:36:9f:7c:94:4e:
5d:91:43:a7:72:f6:b7:46:56:e9:ad:a0:b1:3f:b8:31:00:ef:
2b:26:2c:88:74:82:da:84:49:00:35:33:e4:2a:cf:72:0c:0b:
5b:ba:b0:82:5f:55:7c:07:a3:85:b1:03:47:70:6f:e8:26:b8:
47:9d:0e:67:c2:0d:17:f5:00:a1:77:cf:99:1e:36:15:6a:b5:
d3:84:e8:b7:c8:c6:27:1a:8a:a8:9a:d3:6b:23:3c:b8:6e:8b:
d5:89:77:a3:55:e2:77:07:c2:e3:9a:5e:fa:3b:d6:8c:38:e6:
3c:79:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:27 2025 by rpki-client