Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
File: O62c1QNPgVWPg9I47KQGMyvXuoU.mft (raw, json)
Hash identifier: zDhv52ldQVy4tBSQv4vaFUyH9LXONFrAaCvjyMWdjF4=
Subject key identifier: 82:B6:3D:2B:14:34:20:F0:F8:25:5F:C3:C8:F2:5B:6F:DA:8C:9A:91
Authority key identifier: 3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
Certificate issuer: /CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Certificate serial: 019960FD6D541AB0B693E92FE7420D9FEDC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
Manifest number: 08D3
Signing time: Fri 19 Sep 2025 08:00:45 +0000
Manifest this update: Fri 19 Sep 2025 08:00:45 +0000
Manifest next update: Sat 20 Sep 2025 08:00:45 +0000
Files and hashes: 1: 9v4uAwYJrvb2Yfzwn7vUGRJFfrA.roa (hash: Q7fvWDsdQ9HQh+wgSlc858kuPmBuOrnOtrTzOH5aOA4=)
2: I7dpcVjAHE5hGJn0EYmp-wUevik.roa (hash: eOwI5yLF5oxr8SKT6hK3RCMgVUO2F6SCJ9PKWEwThMs=)
3: O62c1QNPgVWPg9I47KQGMyvXuoU.crl (hash: c9gYQZfxTonWIumlg8AEAn5UUtxmmTmRnFkuVvFxzfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:60:fd:6d:54:1a:b0:b6:93:e9:2f:e7:42:0d:9f:ed:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bad9cd5034f81558f83d238eca406332bd7ba85
Validity
Not Before: Sep 19 08:00:45 2025 GMT
Not After : Sep 20 08:00:45 2025 GMT
Subject: CN=82b63d2b143420f0f8255fc3c8f25b6fda8c9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:5a:d4:21:44:a9:89:c2:af:2c:68:7f:7a:
e7:21:ae:96:cf:86:0f:08:fc:90:c8:0e:fd:70:13:
b2:53:3c:98:34:ad:6c:a4:42:b5:6a:5c:6f:c9:78:
3e:a7:f7:05:00:1e:27:2e:60:ec:cf:22:ab:03:5e:
8e:9c:d0:4d:7d:91:bb:2b:bd:d7:d2:3c:a7:72:2f:
58:bc:42:28:8b:ae:47:4b:1c:16:4d:1d:cd:1c:4d:
26:08:e6:b4:56:9f:3b:e9:d3:a6:b5:8a:2f:27:47:
d7:3a:c8:05:67:c2:63:83:ce:cb:9d:2a:c6:cc:82:
aa:c3:91:b3:c4:d7:e7:a1:78:a2:f3:53:eb:28:4e:
55:36:bd:b7:60:f7:14:1a:6c:67:20:70:1f:75:6d:
9d:b0:3e:a1:2d:00:67:f2:7a:60:83:70:99:12:98:
2f:11:8a:25:56:ef:77:9e:d4:d7:33:87:e4:eb:c9:
2f:dc:71:cf:cc:8c:95:7a:26:f1:45:4c:da:d4:77:
30:b5:37:d4:f4:35:7a:b1:2e:58:4b:72:e1:a1:12:
a5:05:28:fc:73:19:90:9e:09:6e:08:63:48:ca:c6:
2a:8f:0c:c4:31:f0:92:4d:b9:90:44:6d:a3:9c:d5:
dc:f7:6b:c1:fa:91:d9:cd:aa:20:cf:0c:b3:13:5f:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:3D:2B:14:34:20:F0:F8:25:5F:C3:C8:F2:5B:6F:DA:8C:9A:91
X509v3 Authority Key Identifier:
keyid:3B:AD:9C:D5:03:4F:81:55:8F:83:D2:38:EC:A4:06:33:2B:D7:BA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O62c1QNPgVWPg9I47KQGMyvXuoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/416bc7-ce87-42b6-8c68-4ba5f206f65a/1/O62c1QNPgVWPg9I47KQGMyvXuoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:eb:92:93:96:58:f0:2a:70:8e:35:56:24:39:f5:11:ef:7f:
37:d4:a4:69:b1:00:7a:72:f6:6e:c0:84:6c:4c:21:5b:d2:2e:
8a:68:34:20:5f:81:00:26:f9:42:ea:d8:e5:ad:2b:79:f6:b9:
d1:91:ab:c7:cb:f3:d8:8e:d4:c2:8b:d3:73:9e:f6:dd:5e:a9:
64:be:dc:d6:45:ab:80:d7:31:9a:b4:c6:23:cf:0d:01:12:05:
92:3d:97:b1:a5:75:42:75:d2:fb:8d:5f:a7:12:2d:83:c5:0e:
ee:8b:06:35:25:66:35:2d:44:43:90:ba:2a:93:7a:ac:73:5e:
d2:d9:97:36:47:77:37:6c:8e:d9:81:38:5f:fb:ee:6c:ed:22:
92:87:93:ab:8c:28:dc:10:27:a3:af:3b:64:02:76:ac:93:f2:
a3:fb:ce:50:f7:ed:f2:12:e2:7f:f1:64:e6:b9:8c:39:af:2e:
cf:c0:01:ab:ee:14:59:1b:49:d3:7f:fe:bf:83:77:c4:ba:c6:
af:57:a2:32:f1:3f:4c:5b:35:38:48:25:ae:e3:5a:29:6b:a2:
4f:d7:86:fe:7e:bb:ad:ef:1d:87:80:16:51:df:eb:18:e1:17:
8e:9c:8a:90:85:0f:4f:25:14:8b:1f:72:ad:e8:72:6e:3d:8c:
16:d2:7b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 11:11:33 2025 by rpki-client