Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: 7RCLSPrFUQb9kQDtZt/zyIeBT2DyxlFFYLugzOeitvw=
Subject key identifier: EB:5A:7C:20:1A:90:7D:B9:3C:3F:27:97:5F:9C:F6:02:52:38:18:D3
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019893DAA0A8C4457B196DFC9C8F92A5693C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1627
Signing time: Sun 10 Aug 2025 12:00:35 +0000
Manifest this update: Sun 10 Aug 2025 12:00:35 +0000
Manifest next update: Mon 11 Aug 2025 12:00:35 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: gG5UQrUv9A3IOLoby70rQMyvq/kdnlsV3mu4VDeKyJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:da:a0:a8:c4:45:7b:19:6d:fc:9c:8f:92:a5:69:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Aug 10 12:00:35 2025 GMT
Not After : Aug 11 12:00:35 2025 GMT
Subject: CN=eb5a7c201a907db93c3f27975f9cf602523818d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:be:6d:5a:0c:0d:ee:3b:bf:94:f7:25:52:
74:d4:ea:c3:fb:ec:a3:84:cd:a3:a7:61:f7:a7:6f:
1c:36:1c:67:c4:34:66:62:52:b4:7e:2d:76:f1:cb:
59:f8:66:64:6f:a0:d4:e1:c2:0f:80:79:f1:da:e2:
b8:89:00:d0:c8:f6:46:de:20:f2:f7:71:c8:09:3b:
2a:53:dc:0f:74:04:a9:7b:38:95:de:09:94:2f:f8:
8b:c9:e5:e0:7c:98:10:ac:a5:31:51:47:86:c3:41:
8a:23:b8:d3:c0:d0:61:9a:84:85:65:e7:bd:5b:08:
42:3e:7b:36:4c:5a:78:69:4b:28:64:ef:a4:18:16:
25:05:46:98:9f:22:38:25:21:48:28:22:5f:4d:cd:
8b:6f:04:f9:c9:e0:11:9f:76:cf:c2:68:62:61:f2:
ea:87:e9:dd:6c:bd:65:45:ce:ba:13:c2:e1:9b:15:
a4:39:b1:34:02:79:27:c0:9e:b1:62:d0:99:55:1d:
28:29:0b:c1:a6:3b:52:e6:4f:a9:9a:9a:6a:3e:19:
84:22:79:76:83:cb:87:0b:3d:6d:04:de:1f:f8:cb:
2a:65:99:0c:ed:ff:ef:19:cc:1d:cf:6f:26:95:9b:
ad:82:4a:d9:5c:f8:39:c1:c2:4c:5c:e5:8e:b0:44:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5A:7C:20:1A:90:7D:B9:3C:3F:27:97:5F:9C:F6:02:52:38:18:D3
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:73:b8:4a:81:03:09:fd:b8:10:64:03:fb:4a:9f:93:e7:47:
76:dc:af:03:71:77:6b:8b:10:72:67:23:0c:33:dc:aa:da:07:
25:c8:93:a6:9a:f8:99:1f:7b:0c:c8:4f:16:81:17:df:88:c2:
47:49:18:cb:b2:c4:03:2d:58:05:d8:39:08:34:d2:29:7a:0c:
c2:8e:83:3e:60:40:c4:b6:6d:89:8f:20:ea:81:e2:1f:a4:f1:
56:55:ad:c1:c2:a9:2b:49:ef:e5:f2:53:ea:51:45:1b:91:24:
b3:1c:62:cf:14:78:46:cd:04:9f:e5:0a:5e:f9:ef:9f:e7:2a:
3a:3d:2c:56:18:16:a8:90:11:5e:25:e8:45:78:8b:58:07:0d:
8d:f1:9f:e7:fe:3e:c3:ca:67:8a:18:fc:7a:da:01:13:e9:91:
b7:5c:80:34:90:7d:2b:71:db:ec:1e:10:ba:74:24:ca:27:c7:
07:e9:12:c0:b0:74:6c:bc:84:23:81:86:01:53:f3:eb:d6:42:
bf:6d:16:16:f9:59:00:79:ab:15:b1:fd:8b:01:cc:ec:4f:e4:
22:24:d2:9e:b7:34:65:d5:1f:7f:1a:08:3d:e9:57:a9:e6:49:
8f:04:6d:ec:07:44:80:a3:0e:7e:a3:85:52:92:a4:34:58:ca:
c2:94:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:22 2025 by rpki-client