Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
File: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft (raw, json)
Hash identifier: 4lfJhBXz+mgPeps8CmjBDSP9soZX289yLJ8iM1qFo9I=
Subject key identifier: 84:46:26:D0:59:DF:B8:E4:AC:EA:2B:EF:F4:00:B6:1F:8A:97:35:00
Authority key identifier: A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
Certificate issuer: /CN=a378118db05e4c93e76fa1f1c95679c705beb208
Certificate serial: 01992E22FA905359B9E09ABD4EBD3E34563C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
Manifest number: 167A
Signing time: Tue 09 Sep 2025 11:01:08 +0000
Manifest this update: Tue 09 Sep 2025 11:01:08 +0000
Manifest next update: Wed 10 Sep 2025 11:01:08 +0000
Files and hashes: 1: 44FBBoaP1hY4HlkyJxoeqw82Ez0.roa (hash: Ij/VEJNQIjQvvNrHY8dRfRHlSxSYc7lDRay7etVRtiI=)
2: Vwp4sUHwufYyD-bPptLzOvd6WdQ.roa (hash: YWIoCXXcHFga0/3pa1NcRYE9BSy/d2UDiqjf+NsI2BE=)
3: o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl (hash: 3vmcZMg/yP5I3fmTkI0R8F7kutR3IDpoKGcA2qWdgDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:22:fa:90:53:59:b9:e0:9a:bd:4e:bd:3e:34:56:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a378118db05e4c93e76fa1f1c95679c705beb208
Validity
Not Before: Sep 9 11:01:08 2025 GMT
Not After : Sep 10 11:01:08 2025 GMT
Subject: CN=844626d059dfb8e4acea2beff400b61f8a973500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:ff:d1:cc:2c:06:95:27:02:00:17:8f:cd:
0c:d2:f4:05:1a:ed:cf:ca:22:4d:3b:38:96:c6:9f:
08:47:12:15:84:f5:04:3f:8e:62:f4:77:7f:b5:33:
dc:86:06:e3:ee:3a:31:c7:4e:47:ad:b2:07:af:f6:
c0:7f:1c:2c:c7:e3:ec:de:4b:07:fe:d7:f3:f8:ca:
0e:25:6d:a2:da:c7:c5:5f:b7:8b:20:91:70:b6:c3:
2d:72:81:25:e5:26:c2:09:a9:a4:91:94:8d:50:56:
4a:a3:3f:a7:8c:d6:4f:90:54:cd:78:e7:ba:a2:62:
42:2f:7e:a2:68:ab:2d:9c:8d:20:6e:e0:7d:b9:37:
df:74:bc:52:88:89:ab:93:12:1e:dc:af:49:15:18:
91:60:6f:db:75:3d:d4:32:e2:d0:d8:78:bb:b6:e5:
71:76:e2:17:61:75:48:6a:eb:31:70:9e:7b:92:87:
99:fa:3f:60:c2:7f:df:50:7a:08:ce:95:b5:b4:64:
f3:68:ef:72:b9:0d:08:82:57:13:23:65:20:50:b4:
40:ee:68:38:47:de:f4:cf:04:62:d7:63:4c:27:b1:
4b:a1:60:f3:eb:01:f4:8a:d5:c3:1d:ea:46:9a:60:
48:f0:8e:7b:ec:3e:d1:5c:c5:78:da:29:46:a5:eb:
1e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:26:D0:59:DF:B8:E4:AC:EA:2B:EF:F4:00:B6:1F:8A:97:35:00
X509v3 Authority Key Identifier:
keyid:A3:78:11:8D:B0:5E:4C:93:E7:6F:A1:F1:C9:56:79:C7:05:BE:B2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/0f355a-3a0a-46ec-b07f-866607af2fa5/1/o3gRjbBeTJPnb6HxyVZ5xwW-sgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9a:f9:f3:03:14:56:a4:fe:4b:c8:eb:0e:33:da:79:23:90:
02:26:07:e3:06:ff:a0:0c:f1:36:61:63:13:2c:58:5c:e9:da:
a2:47:9c:d4:db:da:e9:46:ba:17:d8:9f:2c:83:7b:03:99:23:
3a:0f:15:82:f6:8c:e6:45:38:3f:71:f0:92:42:6b:bf:65:d8:
aa:d9:ec:66:88:e6:71:cb:7b:4b:fd:ac:06:b4:81:fb:22:9f:
7e:01:22:fc:03:c4:78:ff:5b:85:b0:f9:fa:bb:fa:4e:e0:84:
a0:6d:0d:6a:73:47:56:ec:d5:be:8c:2c:7e:69:a1:1a:a2:b6:
17:5b:0b:28:1e:95:32:7f:26:31:31:ec:ef:59:86:6d:4d:7e:
b1:87:ee:a7:7b:2f:3f:4f:fa:68:dd:ca:46:b1:6f:8d:17:ae:
51:79:f7:79:ac:c5:3b:78:01:a3:15:83:56:bb:12:45:fc:6d:
ca:1b:dd:70:6c:68:f4:57:c7:94:9a:50:3f:5c:01:81:1e:ac:
19:20:75:08:fa:e9:a3:76:48:3d:d5:c5:c8:d8:3b:fb:b1:9e:
a1:78:23:19:48:f1:92:dd:89:a0:20:ad:95:ea:54:fb:06:9b:
a3:8d:cf:be:9b:2c:2b:e3:79:fe:6c:28:90:14:9b:8b:95:a1:
01:4e:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:26:29 2025 by rpki-client