Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: FHpIoe34YdTlFNqSZl/kX4Oue/UeWVmZqSaWaenID44=
Subject key identifier: 15:5A:A2:C4:27:A0:95:B4:01:0C:90:83:A0:0E:1B:57:3B:61:68:85
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0199221E9376BFB09213A259BF04936809CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 03:00:53 +0000
Manifest this update: Sun 07 Sep 2025 03:00:53 +0000
Manifest next update: Mon 08 Sep 2025 03:00:53 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: sxfdRfemWA/PNb+F7Ip9J9ZOU8XQeSVDYkSzScAZL8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:93:76:bf:b0:92:13:a2:59:bf:04:93:68:09:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Sep 7 03:00:53 2025 GMT
Not After : Sep 8 03:00:53 2025 GMT
Subject: CN=155aa2c427a095b4010c9083a00e1b573b616885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:28:b1:96:48:2f:b0:98:8f:4e:bb:25:3d:
d7:d0:d4:c1:ea:60:94:0b:81:fd:c4:40:1f:1e:22:
8b:fe:a6:94:ca:5a:8a:73:69:e5:e1:d3:54:ae:41:
1d:80:86:cd:31:f1:a3:de:ff:f7:79:5c:77:a7:83:
48:2d:0b:dd:ca:c3:8e:fe:28:e0:42:9f:5a:41:ed:
5d:37:28:58:44:d0:92:94:7d:92:30:62:c7:6b:19:
06:b7:ee:62:b5:1f:02:be:5c:72:8d:3f:c8:3d:46:
02:c5:e1:34:d3:4c:af:63:d6:0b:9e:da:44:64:0e:
06:e9:fc:b2:63:b3:ac:55:ea:27:d4:3d:67:ad:ec:
43:0c:57:3f:38:a1:6e:da:76:95:7a:b8:c8:a0:fd:
ba:5e:7b:9d:b6:bb:dc:06:a0:dd:82:43:92:dd:d8:
15:5f:fc:ae:3e:7c:09:90:97:7d:32:b8:20:13:03:
9c:ed:b6:7c:3f:84:63:95:42:53:25:d7:eb:fd:09:
5d:b5:cf:77:8b:7d:2d:5a:87:fe:e2:54:2c:df:c7:
e4:bd:f0:90:1c:07:b9:11:e0:15:74:57:be:79:74:
dd:27:81:e0:39:32:1a:b1:2f:23:c2:2f:f3:94:9a:
03:6a:fd:16:48:bb:c8:76:fc:66:6b:eb:b9:cf:54:
9b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:A2:C4:27:A0:95:B4:01:0C:90:83:A0:0E:1B:57:3B:61:68:85
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bd:1f:ea:0c:4e:67:46:0d:1c:0d:2d:99:23:f2:2d:ad:3a:
c7:ae:5b:60:cd:63:4d:e6:3c:1c:87:81:14:0e:98:81:de:4a:
5f:38:f2:5c:45:00:f7:3b:3d:46:60:e3:59:a5:3b:05:6d:6b:
7a:6b:c4:f4:29:1c:9b:4d:ff:90:68:d3:d6:94:c1:6c:31:44:
63:e7:c1:dd:e2:75:69:86:d9:a6:96:9c:cc:c1:b7:26:e4:27:
e4:f4:8f:8a:03:10:ee:e5:3c:27:55:2c:53:37:85:a1:46:b9:
1b:f2:b9:98:8e:f2:00:82:5e:35:e1:83:48:bc:54:38:44:63:
fa:b6:4e:39:29:34:e8:c6:32:ed:36:b4:3e:62:29:8c:b5:a5:
a1:86:e3:83:a9:35:04:fe:44:ab:b5:69:22:b3:b8:bc:a8:98:
f9:77:2e:5e:e6:01:6a:ed:97:9c:55:7a:37:3b:72:77:81:7f:
8b:bb:33:40:48:95:ca:2b:41:5c:0c:34:0f:2a:68:b3:b4:f3:
48:b4:96:22:ef:bb:d2:97:60:fe:58:cb:62:bc:8a:fe:07:6a:
e5:2a:68:7a:1b:66:a2:7b:cf:95:e9:fa:17:0f:63:f1:cb:5d:
6f:03:5c:0c:0e:5e:03:54:40:d5:ae:f5:c4:48:06:2f:c8:c8:
fa:fd:11:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:14 2025 by rpki-client