Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: aqdambr2J54hhJffzYeuQ2droFS8ZvR8VIVTHlCOJv0=
Subject key identifier: 5C:75:0B:F7:46:5C:C9:7E:63:EA:CD:D8:8F:29:2F:A9:26:A1:15:E5
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0199315ADFF3394F76A88D9F1FC2FA7FFC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0D10
Signing time: Wed 10 Sep 2025 02:01:03 +0000
Manifest this update: Wed 10 Sep 2025 02:01:03 +0000
Manifest next update: Thu 11 Sep 2025 02:01:03 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: T6rdmhtnrqIxpJegMvIkVRpGFAI35G1DGaIiQfGcSVA=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:df:f3:39:4f:76:a8:8d:9f:1f:c2:fa:7f:fc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Sep 10 02:01:03 2025 GMT
Not After : Sep 11 02:01:03 2025 GMT
Subject: CN=5c750bf7465cc97e63eacdd88f292fa926a115e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:b8:c7:5c:ae:c2:4e:a7:f9:47:26:8a:3c:
03:05:94:24:de:b0:0e:a2:af:0d:53:60:8f:2a:2a:
c6:21:5d:95:17:25:6d:b3:5c:b8:f7:7d:7d:c3:41:
5e:00:1c:d1:c7:1d:4d:1e:1d:cd:51:01:7f:75:46:
b5:ff:d0:70:58:54:69:1f:17:53:cb:af:ad:65:9f:
99:3d:ec:b1:d6:1c:ec:21:76:db:32:f4:f3:61:bc:
25:99:ee:c7:f4:30:fc:78:19:a9:b9:d4:75:57:c1:
dd:0b:62:50:45:e0:5e:7d:7a:49:01:89:b3:15:84:
2f:ed:b6:1f:a2:e0:8d:87:94:35:7e:fe:a6:c6:bf:
2b:c6:16:31:da:e1:71:47:7e:8e:a9:55:7a:dc:9a:
83:79:92:bf:d3:75:df:a3:87:a7:50:b1:bd:48:75:
c4:22:5e:5d:dc:e7:14:f9:56:10:3b:7d:06:a2:5d:
ac:84:5e:d5:7b:5d:f9:5b:61:7a:2f:0a:74:0f:79:
d4:e1:3d:00:f4:54:c3:c6:37:d0:28:28:e6:6e:67:
ba:05:d5:dd:6b:ab:bb:c5:1f:43:58:8f:97:64:a3:
38:4f:42:91:0b:34:76:36:a6:dd:aa:aa:03:ab:c1:
18:ca:cc:69:19:dd:f2:a8:ad:2e:c9:b3:79:6f:6a:
29:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:75:0B:F7:46:5C:C9:7E:63:EA:CD:D8:8F:29:2F:A9:26:A1:15:E5
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f8:91:da:45:d5:d0:54:b4:ba:d9:29:f6:12:a7:29:45:f1:
4c:26:bf:84:ac:27:e4:4b:34:d2:a0:97:58:54:2a:66:74:8b:
c6:43:5a:9d:8d:02:db:d1:88:b7:2f:0d:de:b2:ee:9a:4c:f3:
80:0a:c0:49:73:57:d1:75:81:4b:25:06:b6:75:fa:8e:c6:24:
4b:0f:8f:7e:36:91:22:f2:76:e9:57:ed:67:e2:e2:51:60:7c:
56:a3:f1:29:e6:f6:a1:42:23:1d:ea:05:20:a9:b6:01:03:47:
3a:cc:48:04:84:cb:fb:1f:a1:2a:6c:48:19:ef:69:12:f0:c2:
11:e1:83:21:5b:dc:94:83:c1:92:c6:e4:ca:7f:4f:8b:72:14:
ad:18:bf:ed:d4:da:83:87:17:df:4a:28:ad:9e:d8:b6:80:f0:
83:9e:cc:f3:ab:27:63:d8:f0:31:e0:d2:40:65:a8:d3:01:e4:
2d:a3:ce:c9:bf:06:f7:a5:eb:b7:87:bd:66:63:8c:f0:9a:8f:
c1:c5:c3:0e:b1:96:40:91:95:e0:1e:12:5a:81:96:5c:dd:15:
a6:f3:66:4e:59:fb:f4:23:cb:58:bf:9f:f6:02:3c:86:e4:cd:
be:3e:f8:99:e2:63:ee:fa:dd:34:04:35:62:ee:93:e7:f1:ac:
57:cd:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:26:54 2025 by rpki-client