Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
File: o3sePvrqidz80cjpfA6beAxhRl0.mft (raw, json)
Hash identifier: WkbuzqqNSsoFYZ6IBV67Sp1BybuYT23qLrgiuwXdvQs=
Subject key identifier: 9F:A4:70:2B:B5:C4:26:17:AE:CD:6C:42:84:15:07:FD:C5:9A:D3:68
Authority key identifier: A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
Certificate issuer: /CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Certificate serial: 019923A0BB03C3B5E61A6F34E93994676C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
Manifest number: 0CF9
Signing time: Sun 07 Sep 2025 10:02:40 +0000
Manifest this update: Sun 07 Sep 2025 10:02:40 +0000
Manifest next update: Mon 08 Sep 2025 10:02:40 +0000
Files and hashes: 1: o3sePvrqidz80cjpfA6beAxhRl0.crl (hash: WF/GD9tNmTtbe85gB6bGLlGvUmaVobL7cOZPvPoYA6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bb:03:c3:b5:e6:1a:6f:34:e9:39:94:67:6c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37b1e3efaea89dcfcd1c8e97c0e9b780c61465d
Validity
Not Before: Sep 7 10:02:40 2025 GMT
Not After : Sep 8 10:02:40 2025 GMT
Subject: CN=9fa4702bb5c42617aecd6c42841507fdc59ad368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:48:90:df:e0:ee:d6:8d:a2:5a:bc:1c:a1:
2f:ba:eb:e3:42:15:82:26:23:65:04:d0:22:f3:20:
1a:df:ca:71:6a:a9:13:bf:39:f9:a5:dc:3f:a0:ba:
5a:1a:de:4e:6a:51:19:a8:dc:5b:3c:02:cb:7b:72:
45:0d:6a:a6:f6:16:32:98:46:18:ce:20:29:ef:8b:
26:9d:ae:00:8a:f6:9e:0e:00:f3:18:9e:5d:3e:6a:
c3:43:1d:71:51:c7:2c:98:f2:17:ec:42:92:e9:4d:
6b:5f:9d:6d:67:6f:c4:58:d8:78:95:13:18:86:ae:
37:5b:c1:b8:6d:54:68:ab:50:c6:95:b8:1c:9e:ee:
96:9a:af:9a:df:f8:2b:38:9c:c1:11:cc:63:ea:8b:
b5:36:4b:1e:2e:dc:dd:a6:ed:b0:a7:f9:2a:d3:12:
60:53:2e:e3:1a:8e:84:9e:47:05:d0:dd:54:42:cb:
de:c1:ec:ca:4d:61:ae:6b:2d:f4:a2:99:83:1d:1b:
e7:85:75:97:92:e6:fb:9d:e1:60:e8:7b:a7:a4:b8:
14:e8:96:4a:69:23:2f:28:53:37:25:d0:dc:a7:89:
d8:6b:a3:f9:78:c9:c6:20:df:61:58:41:a2:45:44:
f0:d2:46:b8:1c:af:e4:2f:f6:26:47:bb:5c:d5:ab:
49:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A4:70:2B:B5:C4:26:17:AE:CD:6C:42:84:15:07:FD:C5:9A:D3:68
X509v3 Authority Key Identifier:
keyid:A3:7B:1E:3E:FA:EA:89:DC:FC:D1:C8:E9:7C:0E:9B:78:0C:61:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3sePvrqidz80cjpfA6beAxhRl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/35bb21-2239-4f77-a7fa-55de65a2ea3b/1/o3sePvrqidz80cjpfA6beAxhRl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f9:df:b0:5c:c1:b0:79:02:0c:27:6b:cc:e8:e1:cc:1a:03:
95:75:9c:36:32:cc:8c:9a:c6:18:cb:1f:86:a8:58:ee:f1:b3:
68:19:b6:21:d6:a9:47:29:74:f8:61:32:e0:8e:ba:2b:ee:07:
a7:13:b5:63:da:56:28:d4:31:ea:22:44:22:10:d9:39:47:f4:
ac:56:26:3c:22:e4:33:f3:87:05:88:e5:d7:1f:e0:29:1f:4e:
19:a3:27:d2:14:1e:4c:f6:47:1f:7d:37:36:92:0d:36:dd:e2:
dd:5a:39:fa:7a:42:02:9b:50:d9:85:5a:d7:d1:aa:ac:7c:ef:
cd:fd:92:77:60:fa:b5:96:44:d1:cc:6b:25:d7:b4:79:11:b9:
18:5f:30:bf:a0:2d:e6:83:4c:59:02:e5:3e:03:93:1d:ce:e3:
49:d4:1e:70:b6:b6:ba:d9:0b:ff:9d:ff:56:cc:38:2a:69:99:
87:68:14:19:7c:ed:8e:6e:e0:34:32:6c:90:4f:47:29:88:89:
73:9c:21:e8:82:4d:a5:c6:29:02:67:65:bc:82:98:9a:1a:55:
04:b4:5d:3e:ea:ce:3b:2c:9a:b7:e1:0e:12:69:af:6b:b0:8b:
3c:22:f7:02:ec:37:0f:ac:0a:83:b4:78:57:61:a2:53:7e:c5:
de:b7:9b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:42 2025 by rpki-client