Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
File: O6BcspZx0wpXo-hET0H-A0z3UjE.mft (raw, json)
Hash identifier: gsyw1orUCzZUeFaxUcILQ8YWhrVyzKcsMWzPqxFFRdo=
Subject key identifier: D0:86:99:08:E8:A7:EB:BD:E5:B3:FC:3D:C7:03:80:67:6E:DE:98:1D
Authority key identifier: 3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
Certificate issuer: /CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Certificate serial: 019922C31ABE9D50869DFC14F193FF6CAAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
Manifest number: 0536
Signing time: Sun 07 Sep 2025 06:00:35 +0000
Manifest this update: Sun 07 Sep 2025 06:00:35 +0000
Manifest next update: Mon 08 Sep 2025 06:00:35 +0000
Files and hashes: 1: O6BcspZx0wpXo-hET0H-A0z3UjE.crl (hash: jgqld4/bUmdvk4zUbb0ilpiNq7zFbp8j02oUZYjh0nM=)
2: Rz-Vh9z4e03dlNgqerpia1XRL-k.roa (hash: 264nJ8QiwzT6QaHmYoFKRNYp0Sy9/H1JZeP4RPKrOd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:1a:be:9d:50:86:9d:fc:14:f1:93:ff:6c:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba05cb29671d30a57a3e8444f41fe034cf75231
Validity
Not Before: Sep 7 06:00:35 2025 GMT
Not After : Sep 8 06:00:35 2025 GMT
Subject: CN=d0869908e8a7ebbde5b3fc3dc70380676ede981d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:d8:c9:5a:4e:31:00:44:93:1d:e3:7d:97:
13:06:b0:c7:0b:8b:e6:1a:2b:98:0b:7f:5b:ed:21:
ca:2b:32:55:75:b0:cf:87:ed:6e:d6:c7:b8:fd:d4:
d3:bb:3b:a8:0a:c2:f5:d4:75:10:c6:e2:9b:27:5d:
0f:c8:51:6a:ae:49:0b:84:a5:36:6f:74:be:34:5a:
67:57:80:08:73:e0:7f:8f:5d:c5:21:9e:06:18:0b:
ee:1d:d7:3c:a1:95:5d:9e:54:db:3c:6c:0a:d9:f6:
2d:19:a6:9a:d6:b7:5f:f3:c3:79:1d:2b:cb:b1:7e:
3d:c4:99:97:f6:18:02:b8:6b:11:a4:32:12:42:61:
fc:86:9c:11:38:22:32:59:16:85:f0:64:cf:3c:ea:
ad:82:bb:90:34:44:f4:68:58:85:f3:d8:5f:7c:f5:
ee:60:32:b6:8b:d1:0e:10:d5:c9:c0:ae:b5:af:f2:
f5:82:c5:5f:ae:24:94:fe:9b:c2:b6:f2:d1:98:51:
5a:94:07:27:cb:1c:1c:84:bd:ba:a7:57:3a:44:7b:
81:be:15:f4:79:f3:9b:12:f9:0f:75:ee:7b:9a:33:
e2:5e:9a:9c:4a:56:e7:16:04:e8:fc:78:be:97:88:
e2:25:5a:33:12:01:4a:40:7b:60:d0:95:ce:33:33:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:86:99:08:E8:A7:EB:BD:E5:B3:FC:3D:C7:03:80:67:6E:DE:98:1D
X509v3 Authority Key Identifier:
keyid:3B:A0:5C:B2:96:71:D3:0A:57:A3:E8:44:4F:41:FE:03:4C:F7:52:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6BcspZx0wpXo-hET0H-A0z3UjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/09ec83-85e2-4e9c-a79c-4c959f6077a0/1/O6BcspZx0wpXo-hET0H-A0z3UjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:71:35:79:32:8a:d4:33:af:76:ce:80:47:8a:bd:6b:1d:fb:
14:5f:d4:ff:ac:cd:7b:f8:00:d2:d7:14:88:f8:58:88:a3:ed:
b6:55:6e:14:a4:c6:05:39:5c:58:0b:29:5b:7c:b1:7d:c2:1b:
47:06:b6:a3:1b:37:18:f4:e6:93:7e:50:5e:b5:21:a8:48:bf:
96:e1:a2:d6:8c:cf:ce:f3:bd:40:07:f0:8d:4c:91:82:c7:4f:
e9:16:16:e1:b4:1e:d2:fd:66:fc:84:05:98:93:ed:3a:27:b0:
46:fb:ce:f4:55:0f:fc:ee:fc:3a:46:16:3e:9d:45:2f:1b:ac:
9f:e1:40:13:3d:77:32:d7:7a:26:20:45:2a:14:96:ff:9b:89:
0c:be:be:67:61:d8:5e:1a:0d:85:f5:4b:47:12:e2:af:c4:27:
9b:a9:86:1c:75:a6:48:37:b2:ed:e9:af:a0:38:d5:c2:06:f8:
48:a8:5e:03:d1:6e:29:3c:5e:d3:1d:b3:6c:2e:7c:bc:87:e1:
62:e4:b4:64:67:f8:d6:8e:89:21:98:4b:ab:b6:43:ab:bb:9a:
57:d0:31:cb:33:c4:83:02:3f:d2:0f:d8:3c:f6:c5:fe:42:ba:
f2:c7:96:c7:5f:f5:ab:b9:69:83:f7:3f:85:c7:58:4c:2b:08:
4a:92:11:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:40 2025 by rpki-client