Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: O7hWcO6J4DiExKTOXUFYQUcdTjmcL8mWZKVOt5EWCmA=
Subject key identifier: E6:91:45:B6:44:5D:86:A3:26:0B:E5:CA:A5:D3:40:BC:D2:59:A2:A6
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01984A0A6A28B03EC6DBE71BD4CF5CFBEAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 12C3
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: vqiW7CNe/Y192TVTJ0hwD/WyOn954FhMr7o5Jz1g4u8=)
2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6a:28:b0:3e:c6:db:e7:1b:d4:cf:5c:fb:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=e69145b6445d86a3260be5caa5d340bcd259a2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:77:ac:3d:31:c1:3f:56:14:d3:54:6d:e0:
5c:50:f0:f6:cf:d7:a7:33:8b:0f:65:0e:a4:78:ff:
3f:ed:b4:87:5d:9c:0c:3c:1f:18:7e:56:70:41:2a:
3b:01:ef:eb:55:d3:33:56:81:79:65:4a:19:9a:74:
05:22:55:ea:8d:eb:e0:79:11:b7:a0:32:a7:dc:7a:
5f:26:d7:da:25:6c:cf:74:0c:8f:ab:bf:c0:ac:f6:
d9:c2:89:07:94:10:d7:f3:e6:df:c1:46:51:8c:c3:
90:4e:a3:cf:21:93:00:bc:4c:ed:e6:75:74:6f:03:
6a:3f:df:31:de:64:88:76:70:e7:77:19:05:df:96:
1d:73:05:aa:16:0c:a0:c2:c0:a2:38:15:fe:a1:3b:
43:7a:c0:4d:e7:f8:9b:d4:2b:3d:70:e6:fc:36:19:
c7:2b:c5:b1:34:50:80:60:ff:54:f7:5c:61:72:fb:
fd:97:f0:4b:88:02:5c:ee:82:c2:f5:84:b3:62:38:
b1:bb:f6:8f:3a:98:77:46:3f:f3:81:5f:79:17:b5:
8c:59:8e:57:cf:d1:b8:fb:d7:a6:33:ac:26:0c:ea:
26:3f:1c:16:cb:81:45:35:85:b5:3f:0c:41:30:dc:
61:22:88:ca:67:94:50:75:a1:a2:8f:45:6f:29:9a:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:45:B6:44:5D:86:A3:26:0B:E5:CA:A5:D3:40:BC:D2:59:A2:A6
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:11:73:0a:4e:b9:0c:65:04:6e:f4:29:d2:d9:23:4e:a0:36:
a0:d0:63:bc:d3:2c:ab:63:f2:27:5f:01:91:e9:74:61:08:6c:
7e:17:8b:87:1a:18:28:31:2b:34:a5:a0:c1:a4:b2:d3:cd:43:
ff:71:fd:d4:72:7a:c1:fc:15:d0:c2:39:e5:9c:ad:5e:9f:fc:
b3:0a:03:9e:76:85:d4:ed:15:3f:04:a4:80:2e:c0:db:6a:cd:
3c:d6:6c:5d:7e:9d:57:9b:cb:8c:c5:8d:ee:6b:0a:0f:2c:d3:
53:4b:e3:c4:81:5d:96:90:21:39:75:af:8a:91:b6:d7:b6:4e:
dc:2a:96:7a:6b:e4:f6:cc:7b:4b:45:e3:d8:c1:e4:16:18:53:
cc:81:0d:9d:09:98:3d:b1:37:e4:17:fb:73:22:fe:49:90:3f:
1f:26:3e:9b:c6:3e:29:2c:6a:9d:87:51:15:bc:fd:cc:2e:5b:
39:4d:bc:8a:cd:bd:67:e8:94:24:02:4a:f5:90:7b:ba:f6:06:
e6:2c:c3:45:80:2b:7d:4b:14:a3:e9:e3:64:7d:31:97:39:0d:
7b:5e:97:8b:5f:c8:9c:0c:a6:1f:3a:b8:06:ef:ed:fe:f7:7c:
ca:96:81:36:49:dc:ad:0b:92:7f:82:4a:23:95:79:ff:05:05:
cf:c9:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:19:20 2025 by rpki-client