Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
File: f0OdlCQm_Gc7J5zJirNf29fql_U.mft (raw, json)
Hash identifier: W65+pMKed4jT98FCw8ePOyMqCbZ+pXVpWEZUle1LCtA=
Subject key identifier: E0:43:2D:F0:89:78:91:77:1C:20:02:C7:9B:69:AA:5B:C0:19:12:E5
Authority key identifier: 7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
Certificate issuer: /CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Certificate serial: 0199228D1A566D91AB312ED1D24208623765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
Manifest number: 1209
Signing time: Sun 07 Sep 2025 05:01:36 +0000
Manifest this update: Sun 07 Sep 2025 05:01:36 +0000
Manifest next update: Mon 08 Sep 2025 05:01:36 +0000
Files and hashes: 1: a7d8hNkNtlXljnH2m0docaTzG3k.roa (hash: q9e8wKrMSBg+y8Ryx5GLGY7FYsS8+BQXj+N/+pi34ag=)
2: f0OdlCQm_Gc7J5zJirNf29fql_U.crl (hash: 1NW46k4yS8LN9/asp9OXc2oP352PNYBapkAByr8LQ1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1a:56:6d:91:ab:31:2e:d1:d2:42:08:62:37:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f439d942426fc673b279cc98ab35fdbd7ea97f5
Validity
Not Before: Sep 7 05:01:36 2025 GMT
Not After : Sep 8 05:01:36 2025 GMT
Subject: CN=e0432df0897891771c2002c79b69aa5bc01912e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:1f:98:55:37:bd:c2:b4:c6:20:8c:39:bb:
6c:47:d4:c8:4d:05:9b:8c:44:3e:84:3c:e7:aa:ea:
cc:94:4f:e6:91:61:20:4d:a1:72:3c:e2:c4:c3:92:
49:53:df:cb:3f:8b:0c:bc:e7:98:60:e4:d8:23:b6:
c2:06:8a:0e:c0:37:7f:9d:5f:fb:ac:c7:48:d4:2c:
2f:2e:7d:1a:16:aa:17:e3:53:ae:b4:2a:0a:16:d5:
1e:c4:d6:b0:3d:4e:ae:ea:e5:c9:42:94:21:a6:b6:
ac:6c:81:e9:26:b3:0f:f2:38:0d:66:21:55:e0:c0:
bd:5a:db:cd:6a:ff:d7:8e:46:c2:23:f8:89:78:de:
91:1e:a0:5f:d7:40:bf:9d:56:25:89:b4:59:41:ac:
c3:a9:b3:81:df:51:81:e4:7f:98:4d:bc:75:0e:cc:
72:55:97:ee:ec:92:00:f3:85:55:48:45:84:09:05:
9a:b4:23:30:cc:87:f4:8d:71:dd:d8:fd:fc:db:0b:
96:a6:f2:01:e2:58:0f:ae:35:f9:78:61:3c:93:35:
95:08:26:bf:3d:df:e3:4a:2f:d5:12:00:85:12:12:
88:55:08:b3:ac:e6:9e:70:8c:bf:37:7c:6e:d1:5b:
d3:d5:7c:e3:3e:d1:cf:9c:61:e6:84:66:82:00:33:
dc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:43:2D:F0:89:78:91:77:1C:20:02:C7:9B:69:AA:5B:C0:19:12:E5
X509v3 Authority Key Identifier:
keyid:7F:43:9D:94:24:26:FC:67:3B:27:9C:C9:8A:B3:5F:DB:D7:EA:97:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0OdlCQm_Gc7J5zJirNf29fql_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/69a09f-5809-4656-b355-146f254ac131/1/f0OdlCQm_Gc7J5zJirNf29fql_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6b:5b:d3:f6:1e:97:66:4a:a9:b1:a2:25:95:4a:36:55:ef:
1a:c9:65:8f:74:7d:e4:08:ac:fa:54:de:11:6b:66:e5:00:5a:
df:93:6a:f4:5b:6b:c5:67:1d:ca:0c:5d:30:1c:34:22:2f:53:
07:34:77:66:37:bc:24:bc:2d:d4:83:66:aa:19:ca:7f:a8:44:
08:00:0f:e8:6f:b8:50:65:7f:30:4d:88:bd:ab:3d:ff:21:ce:
f8:d2:0f:18:2f:4b:a2:4d:9b:07:16:9f:8b:b1:1e:2b:28:7f:
78:1f:77:a8:7a:18:af:c6:87:e3:67:1d:6b:09:bc:f5:fe:cd:
49:19:bc:fc:ad:24:cf:c1:56:c6:78:fd:ff:07:9a:82:27:20:
6e:43:d5:85:95:9b:65:4d:1f:d7:bb:c9:fa:08:25:61:61:2b:
0d:e3:0e:e9:17:da:84:69:5c:fb:e3:57:fc:18:9d:24:94:6e:
e9:48:22:6c:f6:62:4f:23:b1:29:35:51:61:20:eb:5f:a3:84:
03:82:28:11:38:be:c1:9e:9a:6b:89:a6:7b:c1:2f:e4:31:4c:
c1:48:39:80:a3:ec:5b:e2:9a:c9:06:b3:70:6c:72:73:63:2e:
8a:dc:47:82:a0:38:ee:9c:0f:f1:65:69:e0:f4:53:5c:bf:45:
d7:44:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client