Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: 1jIl87aWLNtzwWp1TgE+EXFbkWY02P0KuBEgzSFkvqU=
Subject key identifier: 95:93:84:7C:F9:BC:B3:81:28:A8:78:66:73:BF:92:8F:41:42:84:D0
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 019932A3ECE72C956072465139BB7CCDE7C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 0B09
Signing time: Wed 10 Sep 2025 08:00:27 +0000
Manifest this update: Wed 10 Sep 2025 08:00:27 +0000
Manifest next update: Thu 11 Sep 2025 08:00:27 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: ylRKePDXHJpdERudeuvVoddgEGRmBSrWp0Uj0ATLELc=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:a3:ec:e7:2c:95:60:72:46:51:39:bb:7c:cd:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Sep 10 08:00:27 2025 GMT
Not After : Sep 11 08:00:27 2025 GMT
Subject: CN=9593847cf9bcb38128a8786673bf928f414284d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:4d:6f:13:8e:14:4f:a4:15:6a:82:aa:d4:
e3:9a:fd:44:1b:1d:5f:11:0f:f8:f5:8f:a7:fd:51:
7f:93:5c:53:21:58:0e:ca:b6:8d:b6:e0:bb:f6:8f:
30:1b:73:d2:02:7b:f3:23:aa:30:28:4c:c6:91:39:
5e:d3:0e:7e:bd:2e:ef:6e:f2:99:a3:d9:3a:38:03:
4e:08:77:61:8f:21:2d:60:51:7a:d7:0e:de:fb:93:
c3:66:78:3d:02:3f:55:7b:6d:f8:29:57:03:00:9f:
c6:4b:ed:bf:81:d9:75:ae:16:6f:26:43:1f:2f:12:
54:f6:db:05:34:14:d4:1d:79:45:1a:a2:6d:8b:c1:
f8:9a:f3:24:bb:b3:80:3f:c8:bc:fa:31:5c:63:31:
ae:48:b3:eb:d6:44:90:ba:86:2a:06:da:64:42:fa:
d7:b7:cc:f5:d1:1c:e9:65:20:96:f5:4a:f2:0f:36:
8c:c5:41:27:bd:5a:84:6d:13:9e:3e:50:e5:2d:da:
73:c3:2b:10:9b:5a:ab:be:74:7e:01:eb:5d:e3:47:
4c:3e:4e:d9:c9:56:93:7a:5f:75:0a:5d:6e:12:97:
bb:cc:bb:9b:ed:63:36:02:59:f7:53:af:cb:25:58:
db:96:57:0b:96:04:3e:be:34:a7:b4:63:ca:c5:48:
d7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:93:84:7C:F9:BC:B3:81:28:A8:78:66:73:BF:92:8F:41:42:84:D0
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:dd:01:4e:1d:a0:fd:d1:25:20:cf:ad:63:52:93:d4:b1:9b:
f9:c3:83:ff:e3:20:3a:3e:5b:b3:fe:70:4a:8b:72:ec:25:86:
85:d4:ab:24:53:d6:94:a7:3c:e2:4b:12:38:35:89:2b:97:c1:
0d:8b:89:42:43:cb:35:1e:97:80:cf:cf:e8:76:74:67:74:e6:
77:8a:ce:7a:f7:ae:2a:13:c5:b8:49:e9:eb:e7:72:69:c0:29:
f6:fa:da:7e:d9:2c:47:df:9a:41:43:31:2e:32:90:5b:55:1b:
35:1f:1e:92:68:5a:67:6f:0c:1c:1f:04:fd:32:33:02:6f:92:
5e:b5:0a:52:92:d6:ba:a9:a6:83:30:9f:9d:03:67:a4:44:6b:
e2:cb:f0:95:cb:ef:67:9b:cb:9d:5c:3c:99:a9:0c:f7:7a:86:
c3:e4:a5:6b:94:97:24:7a:d5:d0:67:72:4f:9a:28:b3:76:b7:
a7:4f:91:6d:23:44:a4:82:e7:70:a7:29:7c:f7:54:22:23:f2:
83:bd:f8:32:be:3b:eb:4a:06:31:a2:2d:ad:ff:55:55:01:06:
51:d6:a9:dc:aa:02:f8:8f:9c:1c:f7:20:12:ec:3b:98:0a:36:
36:5d:84:19:e5:a6:5a:2e:e7:8d:c4:20:48:ae:c6:6e:e6:48:
b3:a9:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 16:08:12 2025 by rpki-client