Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
File: CtBt0nvZOjgNpMddGovwdoKP1ko.mft (raw, json)
Hash identifier: PiriZKf3SccJNaIMHzKT4VBVqWwUWcls50jhmLSaCpQ=
Subject key identifier: 35:CA:9D:C5:7B:23:58:66:68:F8:CC:E5:56:CF:66:24:E2:D2:D4:88
Authority key identifier: 0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
Certificate issuer: /CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Certificate serial: 019848C02752C1CC4C38D90C344A3BB97428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
Manifest number: 08F9
Signing time: Sat 26 Jul 2025 22:00:09 +0000
Manifest this update: Sat 26 Jul 2025 22:00:09 +0000
Manifest next update: Sun 27 Jul 2025 22:00:09 +0000
Files and hashes: 1: 24PmMpD-bHbUV8mxF_RlzuSRjLU.roa (hash: ohLVMvfqoqKO1xPsU0QfK7dKJZtv+ZBmQ14II/YiXms=)
2: CtBt0nvZOjgNpMddGovwdoKP1ko.crl (hash: wgKqDqn6XN3k2b9UUjrlPUaVioPZffPtTekp359O0eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:27:52:c1:cc:4c:38:d9:0c:34:4a:3b:b9:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ad06dd27bd93a380da4c75d1a8bf076828fd64a
Validity
Not Before: Jul 26 22:00:09 2025 GMT
Not After : Jul 27 22:00:09 2025 GMT
Subject: CN=35ca9dc57b23586668f8cce556cf6624e2d2d488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:55:31:91:c3:ee:40:a0:19:ba:b3:59:b9:
5c:30:30:43:26:1f:52:bc:de:99:5e:1d:4f:8b:a9:
f7:a0:f7:34:82:74:ad:90:5a:7d:17:6c:ad:44:19:
d4:ec:9c:cb:39:46:e3:c4:93:bd:07:45:c5:e7:93:
04:d0:68:dc:1e:6c:32:82:a0:2f:2d:6e:da:ca:66:
ff:84:d6:52:34:22:7c:e7:b2:77:17:ed:52:61:9f:
df:38:f1:52:8c:4c:11:46:ef:e5:ee:ca:8e:5a:ea:
10:4c:d3:60:62:00:ab:33:5b:69:76:e6:b9:ee:f1:
e1:6e:b5:c4:20:46:8f:ed:2b:b2:63:c7:72:29:a3:
f9:85:6f:30:ac:0c:d3:1a:44:36:37:9b:34:5a:bd:
cd:17:98:e4:d3:e7:2d:77:ca:11:71:e5:24:af:69:
63:5d:cf:ab:bb:8d:6d:93:77:03:3a:6b:42:43:e8:
1f:00:6e:4e:18:b0:65:e3:79:a8:f5:74:d7:f8:6e:
4a:2d:ac:67:3b:76:01:27:d4:ef:87:5c:47:4d:ef:
24:04:0e:f8:92:1c:d4:c7:46:11:1f:f8:99:42:5b:
cd:46:d1:da:2e:3d:07:ec:c7:a0:f0:29:1b:d0:84:
56:ac:57:26:40:6f:d6:78:d8:f9:14:25:6d:15:21:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:9D:C5:7B:23:58:66:68:F8:CC:E5:56:CF:66:24:E2:D2:D4:88
X509v3 Authority Key Identifier:
keyid:0A:D0:6D:D2:7B:D9:3A:38:0D:A4:C7:5D:1A:8B:F0:76:82:8F:D6:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CtBt0nvZOjgNpMddGovwdoKP1ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/db75db-25b2-43dc-aa12-ed001a2889ad/1/CtBt0nvZOjgNpMddGovwdoKP1ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:32:62:f7:d2:8b:d9:12:cd:3a:7b:67:53:99:22:87:db:01:
4c:dc:b0:ef:4f:54:41:9a:15:fd:a3:ae:81:ab:37:97:1c:e8:
20:f9:3e:7d:77:a4:55:0b:42:89:5f:9f:e9:36:41:8b:08:b3:
5f:46:fa:01:76:a6:22:bb:f0:3b:30:77:a3:09:7e:73:66:57:
bc:21:37:a3:4d:5d:3f:02:12:80:4d:49:8f:44:2c:c9:da:08:
94:0c:72:50:8c:fe:c6:6b:f4:28:4e:d2:5a:11:38:24:4a:9d:
56:7c:fc:84:63:12:9b:36:2c:31:26:ae:e3:c8:da:05:32:38:
b1:83:ec:0a:af:7d:a9:c2:8c:c5:b1:15:34:e0:74:36:6c:93:
5f:31:a2:43:d5:db:95:ea:c7:18:ed:c6:5a:1c:9c:68:77:8d:
d3:bd:7d:20:6e:c2:28:c7:2e:0e:83:8f:12:86:26:52:29:f5:
47:3d:d6:cb:fb:0f:f3:62:55:d4:55:a6:ac:2a:cf:66:dc:f4:
ae:9f:89:22:7f:ce:e9:1d:0d:4a:94:7e:22:bb:89:58:e5:9e:
c2:36:dd:6e:24:0e:6c:71:91:bf:ac:09:e2:75:35:c9:7f:3f:
0a:71:34:17:83:03:08:8a:78:dc:1a:c8:70:1d:23:c9:fa:c8:
12:ce:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:42:02 2025 by rpki-client