Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: JTwVj8W2kPJZ4gsI66VKrth7qhUg1XSFpWFpY55CJyo=
Subject key identifier: BC:F1:BA:D5:60:6E:50:95:2E:8B:FE:28:59:F9:E8:B2:9F:C7:57:9C
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 019873E215007C4C554F8CF9414FEA2BC758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1328
Signing time: Mon 04 Aug 2025 07:00:52 +0000
Manifest this update: Mon 04 Aug 2025 07:00:52 +0000
Manifest next update: Tue 05 Aug 2025 07:00:52 +0000
Files and hashes: 1: 1tUtdPntOZo4oZY0gj-5-iL3XLM.roa (hash: qzUzuRDUtz2FZx8A/P+rSyUpdTrCQoQOZBqqm3OS2Vc=)
2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: 4aGfb73FauHxSM1vB9altv6kCwb485kYJwYF7JBZsYA=)
3: r0fYtM8vJLJuud_1zoCTV08hICU.roa (hash: N3MrpQwzFuxLwGpoLCDJQ7HCyHzM8rSnUBKZzdYMHOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:15:00:7c:4c:55:4f:8c:f9:41:4f:ea:2b:c7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Aug 4 07:00:52 2025 GMT
Not After : Aug 5 07:00:52 2025 GMT
Subject: CN=bcf1bad5606e50952e8bfe2859f9e8b29fc7579c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3e:aa:c8:32:af:a0:24:4a:5a:ae:31:59:00:
ba:21:14:b1:0d:4b:f7:d9:80:39:c8:18:54:b2:0d:
fc:9f:99:37:ad:6d:15:b8:b0:88:1d:8b:e2:e0:36:
dc:f7:96:ad:f9:af:7e:33:e6:f5:1a:83:78:87:0d:
ac:f3:71:9c:a2:fb:e2:21:6d:73:40:3b:b9:07:31:
0b:50:0e:6e:67:c9:8f:b0:3c:91:88:d4:1c:b7:98:
57:a3:1d:be:11:be:4b:24:a9:a1:8c:2b:10:61:ea:
93:50:1a:9e:ce:86:27:c4:41:65:8d:75:5e:b0:e5:
8e:1d:ec:86:e4:c4:7c:56:fa:e3:27:f0:da:ab:48:
e1:12:5d:b9:3c:fa:ee:67:5f:be:1d:db:60:66:e4:
54:47:93:e0:7d:4a:15:4b:5b:86:e3:f8:82:8c:e2:
b4:02:90:8c:86:4d:7b:f7:79:62:1a:db:03:b0:98:
ca:67:a1:14:16:c6:e7:47:cf:3d:6f:65:f7:96:ff:
e6:29:b8:88:37:59:60:62:14:7a:3c:e9:0f:e7:28:
03:e3:90:29:01:5a:0e:50:35:73:ab:8c:d0:20:d4:
97:b9:19:1f:a3:88:91:eb:b9:49:79:aa:a7:4f:8e:
26:cb:7a:03:17:ad:95:4b:14:eb:26:e7:7d:e0:22:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F1:BA:D5:60:6E:50:95:2E:8B:FE:28:59:F9:E8:B2:9F:C7:57:9C
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f3:2b:ba:b3:70:0a:37:db:8d:dd:06:03:ea:5a:37:a2:1c:
52:f6:f0:75:db:60:8c:5d:c4:46:5d:25:54:66:77:ab:45:18:
aa:a0:2b:02:a4:77:71:9c:ed:af:36:1d:53:58:3b:6a:0b:f3:
17:38:18:0f:27:83:02:b8:f7:45:64:c8:1e:d3:e0:e8:87:e4:
07:2b:be:b5:50:15:84:88:08:1a:fc:1d:52:b0:d9:32:4a:e9:
11:43:f1:2e:18:fe:e5:14:e4:11:52:ee:ab:93:a1:24:7c:2a:
98:fe:0e:dd:2d:63:55:ea:06:f3:76:30:fe:2d:21:5e:53:55:
98:fb:68:d1:9e:89:5b:13:f8:77:49:d4:0e:0a:51:64:51:0a:
6f:7e:f5:9b:86:c8:22:64:a9:8d:bc:43:e5:b2:87:60:03:fc:
b9:94:19:5f:8c:85:dc:84:7d:a8:52:a9:5b:fd:79:b8:9c:7c:
0f:24:30:05:38:c7:dc:fa:86:9d:ce:c7:4d:ea:0e:0e:3d:5d:
7f:58:cf:07:0f:0d:f9:3e:2c:b8:6d:79:93:60:ca:58:3e:16:
01:a4:b1:4f:e6:61:ab:6b:bf:06:3b:0f:17:74:3c:f7:d6:5b:
fb:d7:32:ce:b0:53:09:82:d5:28:bb:cc:6a:7d:82:c7:f7:4d:
12:92:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:06 2025 by rpki-client