Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: y5wm4z5MEUpXHB09dcgsHRtF6H32W5X3WpX8kn6Th6w=
Subject key identifier: 18:9F:E5:13:CE:24:C4:C4:59:B3:4C:CC:9E:34:4A:D2:64:D2:3A:DF
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 019922FAC029FF87971839CDC7D4C4AC4C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: 030C
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: OmcKtWDHgU9bO9nBq0bY208MQjYIPFTCLJePgzWJCVQ=)
2: aqZglDYGnEsB53FUZu6hOgHFRNI.roa (hash: PiTo1HXxs70zjyTF54PbMNKhREuF1Fd5QySzyhgibes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:c0:29:ff:87:97:18:39:cd:c7:d4:c4:ac:4c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=189fe513ce24c4c459b34ccc9e344ad264d23adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:36:ca:d6:48:13:f4:ff:a3:09:75:48:e0:
7d:55:b1:ef:39:02:d9:0c:2d:e6:5f:3f:83:ce:57:
c7:fe:ed:bd:bd:25:00:39:e8:94:15:87:a8:4b:ff:
df:15:6c:ad:71:c2:ed:e4:61:f3:a9:0b:05:84:b6:
bd:3d:99:f7:96:2b:c0:b7:1a:fc:7f:f0:a1:0b:cd:
bc:28:68:85:8a:4c:a7:fa:56:af:73:af:ea:78:ce:
7c:b4:ef:28:ae:11:e4:32:23:24:b9:87:e2:09:f4:
74:56:b7:20:e2:44:4f:b3:cf:b0:20:ae:2b:8a:db:
e2:6a:63:04:7d:b4:38:53:6d:91:6e:08:64:7e:3f:
d9:66:21:09:ce:5d:fc:54:d5:99:74:a3:f0:1a:dc:
45:2f:a2:8d:7d:77:48:fb:09:09:2a:a7:42:af:98:
87:a8:59:4a:95:09:99:44:0a:f9:bb:9d:f3:07:fb:
10:a0:5f:74:d5:7f:b6:39:0d:97:54:10:96:f2:63:
67:a0:1e:83:a1:b2:6e:6b:b5:cb:df:e3:3c:47:f5:
b2:49:3d:8e:a8:4f:0c:42:60:b6:6b:e4:83:6f:cd:
ed:fb:48:85:03:7f:77:54:55:1b:80:15:23:b7:cd:
90:c4:e9:79:58:da:f6:9a:e3:b1:bf:6f:e9:86:43:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9F:E5:13:CE:24:C4:C4:59:B3:4C:CC:9E:34:4A:D2:64:D2:3A:DF
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:86:dc:b1:86:01:67:7b:36:c5:1f:4f:b4:1b:d2:36:cd:e4:
a6:86:2a:d2:80:d0:0e:13:2f:6d:7f:4d:e8:37:d3:15:02:b4:
81:89:cb:03:ce:d8:2c:c4:b3:f2:c2:ce:a4:4e:93:1f:47:99:
ef:e2:5f:de:8b:16:61:f4:29:f0:ce:f1:9c:7a:0f:dd:2e:16:
dc:95:57:34:5a:f0:42:05:10:92:db:bc:25:87:ba:34:de:0e:
29:fd:79:34:a1:4d:d6:38:98:31:6e:c4:5d:73:a0:1e:be:e6:
13:10:f5:83:07:10:20:e0:81:93:6c:97:27:bf:61:2f:cb:f3:
da:7a:18:27:d3:f9:d4:d2:54:6e:6d:24:e7:6e:9c:24:11:99:
ea:ed:df:08:78:62:98:ba:a1:ba:5e:4f:bb:42:ef:de:77:03:
e3:1c:ab:af:6f:95:e0:42:57:0a:d0:b1:ce:8c:6a:e9:53:e8:
f2:86:52:dc:0c:f7:fd:4f:34:44:86:b5:42:40:6c:47:d1:ad:
bf:70:2a:ad:ae:82:6f:c5:e1:c0:5f:d7:8a:ff:e3:1a:c6:32:
16:ca:7b:ef:7f:49:fe:38:5a:c2:38:9a:08:78:be:0a:a4:12:
68:3a:90:5f:80:72:e6:27:7d:96:d9:31:84:36:3f:72:2a:98:
34:1d:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:14 2025 by rpki-client