Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
File: OndQiZTKTSzBidNfM4KiqKtXuEs.mft (raw, json)
Hash identifier: auXRI04vSf8lJxK4KLib0oH7cgHOQcJvYGXcEY/8jEU=
Subject key identifier: 9B:AA:99:87:E1:0E:B8:88:E6:9F:D5:61:C2:54:39:8B:D9:0B:D0:EB
Authority key identifier: 3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
Certificate issuer: /CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Certificate serial: 019922C3AB566144B56E4916E7A2AE220477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
Manifest number: 0756
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: OndQiZTKTSzBidNfM4KiqKtXuEs.crl (hash: UYHN8d59w4XsrCHBPBjCGx0YLU+9ZZOsvIQUEsVoZ4M=)
2: Wwk65fWkkC0KWWHed6RDHU5zdWE.roa (hash: OdE2ZmnpDqD8iDsUuCtPuylwN6Gs7CMSGI3EhFPXcxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ab:56:61:44:b5:6e:49:16:e7:a2:ae:22:04:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a77508994ca4d2cc189d35f3382a2a8ab57b84b
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=9baa9987e10eb888e69fd561c254398bd90bd0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f9:91:97:96:d8:fa:7f:26:13:ba:6a:92:d7:
64:e4:ea:0d:39:2e:b0:7e:e5:59:a9:d0:10:79:a5:
86:bd:6c:5f:0a:68:58:4a:98:7e:68:47:ae:b5:9b:
b7:d2:ba:55:69:8c:58:ff:02:c5:b9:43:78:98:53:
f1:40:3f:67:6f:bf:be:8d:fa:fd:f3:bc:7a:ec:39:
5b:c8:84:ee:ea:bf:a3:fa:7d:07:50:ba:7b:64:4f:
c6:49:e0:88:2a:90:21:dc:32:e8:a2:fa:8e:b1:16:
a5:a9:c0:d6:d7:e5:90:5d:42:3d:1c:2d:26:d7:b6:
2e:34:77:fb:56:10:1e:8b:e1:c5:f9:02:fe:f4:7b:
71:75:f3:cb:6d:28:25:0b:b8:aa:a0:6e:b0:ba:0c:
c7:b9:74:f6:cd:db:3b:98:59:08:2c:3b:07:af:9f:
6a:2f:24:59:67:4c:8e:e7:e2:ec:f4:52:39:d5:2b:
b8:3c:e4:37:a8:df:a6:2e:25:b5:95:ca:4c:11:fb:
a3:9e:20:87:69:44:aa:43:48:23:1e:9b:56:52:4e:
d9:79:f2:e5:3f:91:27:ae:26:d5:b9:08:32:55:99:
0f:d9:35:6a:21:ba:a6:c0:4f:b8:a9:8f:a0:2b:41:
ca:48:af:32:dd:b9:7a:af:6a:4e:e7:17:d0:ba:db:
9b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:99:87:E1:0E:B8:88:E6:9F:D5:61:C2:54:39:8B:D9:0B:D0:EB
X509v3 Authority Key Identifier:
keyid:3A:77:50:89:94:CA:4D:2C:C1:89:D3:5F:33:82:A2:A8:AB:57:B8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OndQiZTKTSzBidNfM4KiqKtXuEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/3b4d8e-06e8-4ea2-927b-a79630b06d93/1/OndQiZTKTSzBidNfM4KiqKtXuEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1c:fa:72:aa:36:99:04:ec:5b:5f:19:12:8d:d6:9b:49:b9:
54:51:98:d6:f6:f4:82:9a:13:9e:0c:02:fe:27:f3:e5:04:5f:
a3:26:d1:3f:f8:39:46:4a:24:83:6f:6b:c7:01:1d:9e:7a:9c:
73:c3:7a:58:c5:99:6f:2f:7e:99:53:6b:42:00:5e:0c:cf:66:
69:27:7c:5c:45:b3:81:78:ee:05:cc:4b:43:f9:f5:b1:4f:6c:
a7:93:0b:b6:7b:a8:4a:cf:39:85:d4:49:61:17:a7:3d:f6:a6:
5a:0e:2d:9f:8e:fd:d4:3c:43:74:8d:b6:88:d2:38:54:b5:cc:
9d:90:e6:fc:19:c6:81:a3:e2:7d:21:52:db:a4:0b:91:4b:77:
8e:e9:35:c1:c4:2f:c9:d0:21:9a:3b:c8:36:df:75:0a:92:52:
25:eb:64:47:10:6a:5c:11:e9:7c:55:fe:4b:54:f9:b4:5a:8a:
8f:64:07:24:23:ac:96:8d:08:10:8d:1e:45:d5:6b:4c:91:51:
22:19:f8:a7:55:d2:ef:85:91:c7:a0:64:e6:4e:19:ab:a9:21:
ef:52:91:ae:bb:2a:78:8c:a9:5a:19:60:1b:66:ae:7d:0b:f0:
25:26:fe:e2:5a:fd:95:15:07:69:95:a5:77:1e:ef:ca:00:79:
54:89:fd:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:23 2025 by rpki-client