Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 6K6guKP/kd9W+Iub5JbtCqgPBY48t31E4AqDuE3GyJ8=
Subject key identifier: 48:D8:3C:86:73:84:94:8D:8D:05:D6:49:2E:C1:7D:81:ED:CF:79:4F
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 019936EEC729F935EF6473A5F112A0DDCFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 0C08
Signing time: Thu 11 Sep 2025 04:00:42 +0000
Manifest this update: Thu 11 Sep 2025 04:00:42 +0000
Manifest next update: Fri 12 Sep 2025 04:00:42 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: /i31qBt7SDXhowb0BhjAdcTX1klFsycYrwMNlS2j6Ao=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:c7:29:f9:35:ef:64:73:a5:f1:12:a0:dd:cf:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Sep 11 04:00:42 2025 GMT
Not After : Sep 12 04:00:42 2025 GMT
Subject: CN=48d83c867384948d8d05d6492ec17d81edcf794f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:42:b4:47:b7:7c:92:e2:d7:f5:07:cf:fc:
09:98:ef:4f:a1:08:52:68:ca:23:c3:92:ed:d6:b5:
fb:22:29:ef:93:09:ed:bd:1d:63:c8:45:21:98:91:
68:67:0f:b6:68:c1:77:5e:de:f4:7d:c9:fd:65:1e:
df:d7:44:15:3e:41:c4:3a:73:7a:f4:31:cd:09:ea:
c7:13:e2:8e:ec:6e:ed:ba:b3:45:0d:09:a1:20:12:
a8:a5:a1:89:1e:08:9a:ac:88:6c:71:4c:3e:8f:5a:
10:5f:2b:1c:f0:f1:a3:cd:87:38:00:15:a4:75:62:
ac:5d:07:ea:3e:db:a0:a8:0c:31:87:b1:db:d7:97:
66:78:3e:71:8d:78:a6:70:aa:84:29:c4:ca:54:f4:
d8:6d:3f:0c:a5:ae:05:db:d4:3c:d7:be:83:0d:c6:
b4:7e:ae:90:bf:9f:80:a2:7d:34:a2:1d:75:24:bd:
79:a9:0f:74:e8:46:ba:85:66:c3:1a:40:1d:a6:38:
19:d4:4b:6e:be:bf:48:89:86:d3:1b:79:fd:82:23:
f1:67:da:66:5f:05:2e:24:c2:5a:43:0d:af:a9:71:
38:26:fd:01:6f:e9:13:36:f4:97:b7:94:d9:71:5a:
3a:fe:a2:e8:f6:a9:dc:16:59:7b:9a:ba:e9:9f:50:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D8:3C:86:73:84:94:8D:8D:05:D6:49:2E:C1:7D:81:ED:CF:79:4F
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:69:10:3c:43:28:2d:61:a5:c2:7c:39:98:e0:dd:03:95:
2c:ca:77:87:b0:cc:02:b7:64:27:0b:8d:9e:2e:4b:c4:ff:e1:
ee:b0:08:c6:77:14:e3:51:1f:db:89:d8:7a:70:57:09:d5:be:
2d:73:42:a5:26:f4:05:0e:14:cb:0d:53:60:e5:3e:95:e5:5c:
f6:9a:c3:a9:2b:35:93:e1:fd:fd:74:28:8f:a3:97:47:53:3b:
27:df:ab:3d:51:a9:80:0e:e0:b0:65:16:da:58:e7:4d:44:79:
96:0b:26:47:75:27:65:dd:99:92:d8:62:b0:bc:09:95:37:8b:
52:d5:70:0f:79:a1:40:b5:2b:53:3a:25:08:f5:0d:d3:fd:05:
7a:ff:31:f6:34:fd:47:c0:39:1c:e2:ce:79:b1:0c:39:dc:d7:
1d:5a:8b:57:be:06:6a:05:ef:f5:4b:31:b4:15:7e:40:3f:f4:
b1:e0:c4:be:91:4a:cb:9a:0a:d2:39:ad:4b:f9:6b:7b:47:c3:
9c:85:1c:14:11:7d:58:a8:46:cd:22:01:6f:bb:dd:42:c0:eb:
96:97:7d:6d:83:e6:28:7c:4c:ff:b9:61:86:b2:dc:60:ea:5c:
0c:7e:e2:60:12:3f:00:6c:16:59:3d:27:b6:09:08:b2:e1:22:
2f:bd:b7:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:53:46 2025 by rpki-client