Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: LCH8brj13F/zt9BmZikH1rSd4u3ilQLREyfvoo+bBPU=
Subject key identifier: 6D:6A:A7:98:3B:63:C4:39:CE:32:E7:0C:87:5A:A5:F2:B8:59:10:92
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01993612E862B42C81602E1EC8845EB532B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0DC0
Signing time: Thu 11 Sep 2025 00:00:32 +0000
Manifest this update: Thu 11 Sep 2025 00:00:32 +0000
Manifest next update: Fri 12 Sep 2025 00:00:32 +0000
Files and hashes: 1: O4gR5xOTs4Ka7RxFw5S-suo9Yt4.roa (hash: cOb09Q56rNsrHJDt4uCS16lJBMq8eR81lrUaHpUt4e0=)
2: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: pOfO9MO3uD97grBDU2HNxEjFORVOj4W8ZA2TXOJfE9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:12:e8:62:b4:2c:81:60:2e:1e:c8:84:5e:b5:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Sep 11 00:00:32 2025 GMT
Not After : Sep 12 00:00:32 2025 GMT
Subject: CN=6d6aa7983b63c439ce32e70c875aa5f2b8591092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:30:66:5d:a8:ae:fa:96:e9:c2:de:f9:39:
df:5c:5e:33:01:ac:76:ff:78:17:d1:90:fb:0f:9c:
aa:54:15:1e:70:68:d2:30:8d:05:ea:97:c1:0e:10:
25:0a:ec:2f:1d:a1:f6:0e:5b:cd:05:70:d3:7d:9f:
d6:f6:6e:fc:d5:dd:d6:12:bc:cc:c2:1d:23:75:17:
16:de:6d:4c:9a:df:a8:f1:eb:44:8e:b9:d8:7f:99:
a3:8d:d9:54:ea:a5:21:7a:4b:54:eb:d8:51:65:94:
88:8d:23:74:82:e5:92:7e:be:9d:12:c1:a6:64:86:
c6:7f:bb:50:fb:2c:d8:e5:d8:6e:be:4b:f1:8e:6e:
e3:60:eb:3d:bd:ae:36:fa:df:e3:bd:60:af:52:fb:
42:f8:d2:4a:ac:0c:21:63:da:b2:c3:3c:40:b6:1f:
ff:a6:65:cc:66:89:3d:31:f2:ea:c7:11:ae:9d:7d:
1d:b3:de:ed:74:19:fb:6e:9d:4b:46:94:fd:39:89:
11:52:90:ae:4d:00:89:15:36:53:b6:c1:82:e1:14:
f4:fa:2a:90:a3:47:1e:87:ac:ab:fb:d9:02:55:db:
b0:98:f9:94:42:4e:bc:64:51:53:fe:1b:ba:59:d7:
c6:93:1b:89:15:83:0a:6b:10:ff:8a:a2:9f:0d:11:
26:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:A7:98:3B:63:C4:39:CE:32:E7:0C:87:5A:A5:F2:B8:59:10:92
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6d:14:ff:32:fc:a5:b7:a2:74:f7:00:f1:87:05:b4:88:bb:
0d:ff:b5:1d:46:1a:9d:6d:e8:be:f4:86:32:d7:6d:77:6a:ae:
4d:07:1f:eb:bc:66:55:ed:88:20:5f:38:e6:d2:ff:c8:30:cc:
f4:78:70:ef:f6:e9:46:ee:d6:e6:93:e0:79:08:7b:36:2c:ab:
28:d1:16:c1:8b:05:f3:b3:e4:09:12:c1:6f:00:5f:c6:03:d2:
87:4d:3b:02:1a:14:7e:83:f6:98:d2:89:4b:24:63:c6:9d:e9:
56:dd:94:1d:94:d9:6a:3e:77:ec:bd:6e:92:5f:d3:95:66:b6:
ce:3b:49:62:28:e4:83:7e:5a:6b:3d:8a:95:55:8a:8e:a9:36:
51:74:a6:91:ed:a6:40:63:d5:9a:d3:77:27:41:a6:69:23:4f:
7b:e4:fe:36:a3:ee:64:82:49:f0:85:a9:55:26:ba:c1:59:9e:
ad:f4:73:b5:63:fc:16:a2:ad:0a:6c:c8:aa:2f:82:42:98:bc:
62:08:87:60:da:2d:08:8e:58:01:a1:d8:68:f0:4e:25:a0:be:
2a:f4:07:f5:f0:4a:d5:3b:ab:f1:9a:e5:fa:1d:40:10:61:70:
f9:6f:91:d4:a9:62:5b:0d:1a:60:8b:94:63:e3:32:44:93:bb:
b4:18:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:19:23 2025 by rpki-client