Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: dLIRra83yasmebmoHgWuO9Swtn0ipaKn4E9GR07GlNY=
Subject key identifier: 37:D4:C5:ED:67:BA:A5:4F:BC:52:0B:C8:F3:C8:F3:8F:60:4E:B7:C5
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0199221E29550952E26EDAFE43ADEA449A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 130C
Signing time: Sun 07 Sep 2025 03:00:25 +0000
Manifest this update: Sun 07 Sep 2025 03:00:25 +0000
Manifest next update: Mon 08 Sep 2025 03:00:25 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: 7g+c+5ezMzUPVnoVN0DNMOgseYlyiqH6eXFzpDXNmcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:29:55:09:52:e2:6e:da:fe:43:ad:ea:44:9a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Sep 7 03:00:25 2025 GMT
Not After : Sep 8 03:00:25 2025 GMT
Subject: CN=37d4c5ed67baa54fbc520bc8f3c8f38f604eb7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:56:af:d2:8e:c4:c0:c8:c9:29:e7:a9:86:
ff:b0:2a:20:48:cf:2a:2a:7d:26:0d:f7:35:ce:14:
6a:97:7c:bf:e3:41:3f:74:b0:99:22:86:2f:c6:42:
5b:20:7f:4e:50:a3:ea:76:5c:3e:91:00:1d:d0:a4:
ea:df:52:87:7c:1a:0e:37:b3:9e:71:ff:03:9a:22:
65:48:a4:df:24:3c:b0:65:e6:c5:36:05:93:f4:7d:
91:54:a5:88:6c:2b:b2:c9:0d:f2:0f:86:04:9c:32:
b1:68:2a:56:47:39:a2:0c:3b:e0:ee:98:04:be:eb:
fb:73:05:60:06:9f:b7:ff:fd:4c:3b:4a:5a:b0:30:
fa:01:8e:fb:43:c1:ec:5f:8b:34:24:22:a7:fa:09:
ae:ea:8c:fc:68:45:cb:6d:00:65:da:67:92:5e:27:
55:5e:4c:7a:14:a7:93:1b:5b:18:4b:33:88:4c:55:
84:94:93:6e:7a:c0:a2:31:67:68:ba:7c:86:75:78:
45:91:62:e6:97:44:7a:42:e2:5c:6f:ea:06:b1:ae:
14:84:e7:a4:e8:b4:c0:08:89:51:b4:e4:b8:6c:b2:
98:60:80:91:5d:69:e5:88:c0:db:43:6f:09:81:a2:
b9:52:95:00:cf:2f:2e:14:e6:d2:b0:80:5d:6a:a4:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D4:C5:ED:67:BA:A5:4F:BC:52:0B:C8:F3:C8:F3:8F:60:4E:B7:C5
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e9:d5:09:82:b7:aa:62:0f:9b:b2:6c:6e:6c:4b:8a:c9:cc:
a7:86:15:bf:8c:cc:7d:46:ba:52:8f:64:6c:a2:7d:72:10:0c:
d4:8b:fc:07:c2:34:7a:b7:8d:96:a3:5c:82:c3:ea:eb:c1:96:
8f:84:25:72:96:ce:39:65:6d:0a:12:ce:65:87:67:1e:4c:8c:
72:9e:26:64:f5:98:97:67:5c:8a:4f:a3:20:c8:06:10:6f:a1:
1f:b1:e2:76:7e:9f:3f:67:13:65:c9:79:d2:31:60:40:1f:ba:
8c:05:79:7f:e3:74:5b:0e:64:ed:f7:e6:c1:51:c9:39:68:b8:
51:d2:b6:5d:a5:8e:ad:71:bd:17:9a:fb:5a:41:53:f6:25:20:
ca:3c:17:d6:48:11:70:33:95:17:1b:8d:4f:54:a1:a0:8a:76:
e6:6a:45:10:77:36:b3:b5:d3:5d:74:8a:20:db:6f:b2:9a:35:
e3:f6:09:5e:5e:98:79:19:f6:c6:98:c5:ef:1a:1f:91:b3:71:
91:b1:1d:a5:86:ae:54:90:28:5a:76:66:d2:55:04:5e:2c:9f:
71:03:08:f2:5e:60:83:f5:16:ae:6c:54:26:c2:63:63:98:d5:
5e:d1:12:1a:a8:4c:a3:c6:ee:47:91:d1:53:5f:79:8c:06:65:
2a:8e:0a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:28 2025 by rpki-client