Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: ChVE10VqmD/JoDewwvBgUVyEdeT9m3tssaYJYJfHCtQ=
Subject key identifier: 5C:AB:02:48:37:EF:C2:95:6B:85:D5:5C:4F:B2:27:88:78:B7:91:83
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 0199228C378975020AD322E746B638862575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 0922
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: 3raexFFj3tPstgifa_l8jJHkazQ.roa (hash: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: qVWwzyvS2Hk6BIKDz1OvElJ6Nvp0pSkBi228Gwk81Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:37:89:75:02:0a:d3:22:e7:46:b6:38:86:25:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=5cab024837efc2956b85d55c4fb2278878b79183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:36:f6:6b:cc:47:6b:2a:14:04:4b:ec:26:d6:
a4:8a:84:72:67:80:91:a0:2f:10:03:b6:50:49:89:
7c:63:49:3d:4b:af:6d:34:9e:f7:92:a3:51:f4:d6:
72:c9:2c:57:ba:7c:c9:77:7c:ef:37:01:62:76:6a:
7f:8a:5c:97:8e:35:42:26:56:1d:6f:e6:44:67:4f:
8b:d8:48:8c:65:38:4e:d8:54:ea:aa:19:48:80:4d:
58:a1:20:0b:b4:db:97:12:6e:2e:e6:11:98:7f:d2:
7a:7a:4d:cd:c0:6d:6a:b9:71:bd:a5:da:dd:2c:5b:
fe:92:a1:4b:6c:c1:35:2d:cb:d7:c0:45:3d:6d:37:
fe:c7:a5:5d:e6:87:4b:95:63:86:b3:5c:df:42:bc:
c6:66:84:86:a7:6a:15:76:f2:34:a9:60:a7:93:0e:
74:12:fa:fb:93:42:e9:38:75:a7:72:7d:b9:5c:8d:
11:d4:b9:46:07:5a:2e:91:98:1b:dc:79:6b:50:74:
44:97:11:8d:7e:2e:dd:4c:39:c9:cb:be:44:bb:a9:
dc:97:7d:a9:b7:82:79:7c:46:b0:b5:f3:2a:97:9c:
76:31:12:1a:08:19:75:ee:1e:28:0e:27:0c:66:06:
06:ab:ce:7e:7e:89:24:85:b4:47:dd:09:ae:e1:fb:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AB:02:48:37:EF:C2:95:6B:85:D5:5C:4F:B2:27:88:78:B7:91:83
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:18:18:2c:a8:57:03:cb:a5:dd:46:a0:a4:bf:98:13:75:f5:
85:e0:b3:82:25:0a:4f:22:f0:65:3e:43:2c:7e:3f:c0:d2:ef:
5b:b8:2c:90:7c:f5:55:16:43:30:65:37:12:cb:5e:e2:1f:ad:
d5:af:f8:81:9e:08:a5:44:50:b3:56:03:16:df:df:58:28:9c:
2a:80:54:29:2e:8f:aa:07:79:fd:0d:30:80:a6:9d:76:d4:f6:
8d:ad:8a:84:84:71:b7:4e:bb:23:d0:2c:ae:53:8d:a4:39:47:
4d:2a:9f:8b:9e:1e:b1:8d:4e:79:95:da:bb:77:3e:28:8c:b7:
1b:77:21:6d:e8:f5:23:68:06:2d:d8:1b:0e:cb:19:c0:48:79:
1b:e2:d6:8e:af:be:87:32:71:2a:e3:81:f2:15:a5:31:d2:97:
c9:bf:cf:6e:b1:6c:43:21:58:1e:29:8a:a9:a2:10:a6:81:cd:
db:5c:8b:c4:ba:5e:67:76:8d:a8:c8:03:d6:b9:0b:4f:3f:ee:
5c:b4:1b:84:cf:65:a1:2c:53:2b:cd:be:a1:e5:54:5f:1d:a2:
90:b2:38:54:8f:8e:55:9e:0e:01:b7:19:2e:e5:84:16:f5:e2:
ed:0e:b3:a4:63:a3:9e:80:9b:a3:b7:ea:cc:01:92:90:1f:6a:
0c:68:f6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:27 2025 by rpki-client