Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: EXw/pzX4E4y+G4how35Fql2gSv5B1KqYrLHy5iWyZRs=
Subject key identifier: A6:CB:4C:9C:32:62:A9:1D:45:74:DE:47:70:28:CB:D1:26:E0:A8:D4
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 01992330F210B6E143EFEC65B30841717B49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 08:00:34 +0000
Manifest this update: Sun 07 Sep 2025 08:00:34 +0000
Manifest next update: Mon 08 Sep 2025 08:00:34 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: UxP7ECaTrjBTUUoKvMR48dyJQOilO8IwZFCzgqcG3Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:f2:10:b6:e1:43:ef:ec:65:b3:08:41:71:7b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Sep 7 08:00:34 2025 GMT
Not After : Sep 8 08:00:34 2025 GMT
Subject: CN=a6cb4c9c3262a91d4574de477028cbd126e0a8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:e7:52:dd:3b:0b:85:d0:cd:81:06:06:90:
b4:2d:66:6a:52:91:e6:a2:a7:24:20:04:e2:f7:7e:
c7:69:30:5d:5a:e3:2f:1d:2b:66:0f:93:49:c2:e4:
f9:db:7d:6c:00:36:b8:19:2d:bb:7f:d9:ef:09:77:
ff:e3:68:0f:b2:cf:6a:15:e5:41:0e:26:d5:00:c3:
9a:6b:d5:e0:95:89:50:bf:82:fe:fb:32:f4:6c:6d:
1d:3e:10:51:fe:e0:15:7d:62:ef:32:dc:70:96:93:
ee:63:66:c7:62:ed:3f:0c:73:aa:e4:63:c2:2c:0a:
1b:64:c4:44:8c:25:11:d5:36:60:6c:be:3e:8f:f3:
76:f7:49:6d:2c:be:10:f3:b3:33:a2:d4:c9:b0:b9:
e7:e7:54:d1:7a:ba:74:39:0f:d6:7d:9f:1d:b1:cd:
fb:c4:2b:eb:84:9b:15:36:42:bd:0e:3a:bf:d3:77:
ab:53:27:de:76:e9:5b:8b:44:b8:9e:21:97:9d:c9:
c2:ce:1d:55:31:67:27:57:ea:56:5c:08:d4:9c:c3:
0e:f5:57:6b:aa:77:22:85:2c:f8:97:33:7b:b4:8d:
72:81:1d:bb:8c:d0:39:2f:73:59:89:1e:4b:34:47:
c2:a5:5e:76:1e:17:56:05:ac:c7:2e:4e:0b:5c:1b:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:CB:4C:9C:32:62:A9:1D:45:74:DE:47:70:28:CB:D1:26:E0:A8:D4
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7c:0c:e3:ec:b2:94:2c:ca:15:6e:93:2c:95:38:3d:bc:ef:
c3:5e:4d:bd:5e:9f:8f:a9:1f:9e:a1:e9:93:51:db:0f:7c:d3:
83:6d:33:f7:69:17:ed:f7:1f:6e:c6:12:cd:8a:a4:35:7d:ad:
bf:5f:c4:62:d3:8c:db:90:4a:79:57:62:82:9d:01:d5:ab:58:
49:67:8e:0c:6b:a6:9a:68:4f:bf:8b:2b:ab:11:75:3f:f2:ea:
8f:af:2a:99:f1:19:4e:c4:ad:a5:3a:73:15:be:3c:fa:ac:10:
cc:46:f2:b0:30:b7:9b:3d:39:dd:9f:09:e2:44:40:95:80:05:
85:a5:20:0b:d2:bf:da:39:1d:e0:d6:00:03:b0:ed:52:2a:89:
43:60:ee:c1:cd:10:10:a2:fc:ca:6d:ce:f6:8e:61:71:a4:45:
8a:b4:54:ad:79:6b:e5:57:5f:97:75:44:c2:a7:79:d5:54:f9:
36:8e:6e:ef:8d:50:9a:d6:06:30:81:d9:e7:d5:56:e2:42:bf:
7c:b7:11:48:d7:74:63:3a:f1:a3:f8:e7:f5:8e:08:1b:f9:27:
f6:1b:83:4d:1e:88:67:4a:aa:1c:c7:3d:71:4b:04:33:f8:51:
8f:5d:fe:73:4f:32:de:60:92:40:89:6f:15:45:18:f8:a0:e2:
a4:de:0b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:44 2025 by rpki-client