Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json)
Hash identifier: r37nm1xSTlQ8sf88XmVMGdSsrvtDyM6Tspj9H/BJGtY=
Subject key identifier: BB:FA:62:3A:02:A6:D2:86:24:50:39:B5:96:31:B1:10:7F:E6:05:BB
Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Certificate serial: 01988F904A13CDAF554FFBD8E04675353C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 16:00:54 +0000
Manifest this update: Sat 09 Aug 2025 16:00:54 +0000
Manifest next update: Sun 10 Aug 2025 16:00:54 +0000
Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=)
2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: ujImXFSMWitvEV7Uq23MpqzkS4JCUrGMmleN4uaXJpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:4a:13:cd:af:55:4f:fb:d8:e0:46:75:35:3c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238
Validity
Not Before: Aug 9 16:00:54 2025 GMT
Not After : Aug 10 16:00:54 2025 GMT
Subject: CN=bbfa623a02a6d286245039b59631b1107fe605bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1b:e6:f7:c7:f4:24:43:f3:e2:c0:9e:29:37:
16:e8:43:d0:1e:93:5e:fa:f5:08:b5:f8:86:24:fe:
de:00:3b:ca:9e:40:01:80:1e:14:46:25:9e:96:9d:
31:25:bd:c6:9d:2e:4f:ee:05:53:e0:b3:9e:9f:f5:
93:e6:8b:5b:ec:4a:8d:f3:f3:c4:ab:46:9a:bc:23:
59:e5:1a:07:a6:ca:10:26:4d:4c:29:4c:22:02:21:
dd:d1:c9:ae:6f:c6:d2:5c:d3:41:d5:d7:79:85:8a:
c0:dd:8b:82:70:ff:53:6d:68:12:e6:89:df:e6:fb:
b1:ca:3e:c5:2f:f0:3b:ea:d3:f6:83:2e:bd:b6:44:
95:68:ee:69:54:6e:9b:f8:9e:dd:ca:e8:f1:08:80:
83:8b:39:ea:fc:2f:e3:19:b6:01:eb:d7:24:f8:28:
21:e5:8c:5b:88:5a:27:8f:82:e3:7d:47:e0:a1:e9:
ec:4e:81:c9:59:c8:a0:76:06:9e:79:71:d3:06:d0:
ea:86:88:99:a0:6b:dc:f1:b5:21:3f:f8:ea:56:e4:
bb:70:c9:01:77:48:56:bc:aa:a0:db:8c:e5:9c:ae:
21:ae:e0:60:7e:0b:99:ca:5c:4b:7e:fb:ae:a6:fe:
2c:df:96:91:8b:c3:66:5a:3f:44:66:5d:ac:fa:35:
d9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:62:3A:02:A6:D2:86:24:50:39:B5:96:31:B1:10:7F:E6:05:BB
X509v3 Authority Key Identifier:
keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:08:79:63:c5:1e:5a:bf:9b:7a:5d:96:cb:0a:d0:ec:86:
06:c4:98:a4:8e:2e:ff:3b:c2:dc:72:d0:28:cc:41:2e:66:24:
c0:0e:45:8c:ea:8a:6f:d7:fb:b4:c9:ce:97:f8:bb:3d:6e:ae:
f9:11:c8:6b:3f:0c:c4:e1:c9:ed:4b:48:2a:e1:7f:fd:87:75:
d7:47:75:13:86:5f:8c:26:b7:bb:ef:86:a5:21:5e:30:e4:31:
e2:65:cb:3e:e3:a1:4d:a6:7b:0e:15:10:01:dd:5b:1c:36:c0:
1e:36:51:b9:24:1a:47:62:a9:09:00:39:40:95:ac:02:20:ba:
46:a1:a1:88:d1:c5:c1:48:b2:ec:56:af:8f:fb:9a:c2:8c:28:
ec:5e:91:e6:a0:68:2c:d7:4a:3f:eb:a7:da:3b:9c:39:14:9e:
72:c8:bb:18:3c:03:2e:2c:ba:c4:a2:5a:ec:49:3f:c7:0a:ae:
ec:d9:80:ea:b0:e0:4e:8c:f3:ec:d6:05:de:6c:2d:42:fd:7f:
fe:7b:6f:d4:86:70:8c:d2:9c:21:15:f5:19:e6:51:5e:86:60:
b2:ed:82:c7:84:8a:c7:4c:91:9b:c7:1e:b6:83:38:24:63:0e:
c5:4f:ea:63:17:79:0c:bb:dc:6d:9d:6f:11:aa:28:c9:aa:24:
5f:d3:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:17 2025 by rpki-client