Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
File: cOEuvY__KmsFTe2d49j2XqY1-4M.mft (raw, json)
Hash identifier: leHafVFACNsGeyylHZkM6BbLH7muEB7GrDHcQSfIkzE=
Subject key identifier: 96:74:B4:B9:F1:28:A1:45:26:2A:85:73:A3:8E:FE:DB:30:D6:51:57
Authority key identifier: 70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
Certificate issuer: /CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Certificate serial: 019922C3CFFE2DBC33E3EF74CF548023DE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:01:22 +0000
Manifest this update: Sun 07 Sep 2025 06:01:22 +0000
Manifest next update: Mon 08 Sep 2025 06:01:22 +0000
Files and hashes: 1: _OMR6VqRZhlG55gSbNS5mlP8YvY.roa (hash: bSmsi8Rv/FhiuL3CjsoHR6R1aLfmil9//pa878a40EA=)
2: cOEuvY__KmsFTe2d49j2XqY1-4M.crl (hash: LlH0l0b5mCknqXlGTGBpaRs7mr3MIqVkqqJfgObQDVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:cf:fe:2d:bc:33:e3:ef:74:cf:54:80:23:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e12ebd8fff2a6b054ded9de3d8f65ea635fb83
Validity
Not Before: Sep 7 06:01:22 2025 GMT
Not After : Sep 8 06:01:22 2025 GMT
Subject: CN=9674b4b9f128a145262a8573a38efedb30d65157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:73:96:fc:99:7a:bb:9e:b2:13:12:0b:07:dc:
d8:e3:d6:3f:2d:36:cd:59:84:f8:ca:8e:48:a9:27:
35:a1:64:36:c6:78:94:2a:2a:d9:f0:44:ec:ec:7e:
e1:15:a9:15:95:f2:f9:29:68:f3:30:03:b1:3e:64:
b0:08:c2:c0:52:32:12:6e:eb:15:f5:b4:6a:36:0f:
30:10:bc:17:87:33:db:19:4e:e4:dd:9e:85:19:28:
52:a9:39:01:72:1b:8c:a9:c9:c0:e8:c5:78:8e:90:
50:ca:fc:51:39:74:a5:e0:71:7e:75:8b:e5:f7:96:
05:be:4f:6f:fe:5b:6c:61:70:63:da:9a:38:d1:72:
86:a2:37:b7:49:57:b0:f2:b2:a9:69:5b:03:98:c6:
69:39:d8:d6:06:ee:92:91:33:93:01:77:53:c4:e0:
88:bf:90:b0:35:73:5f:09:77:82:ef:80:fc:2b:5b:
a3:a6:30:ed:40:2e:64:70:f1:a9:59:bc:85:bc:0f:
2d:a5:c9:fc:fd:c4:9b:f5:ae:81:5a:e6:a8:3e:29:
83:16:59:c8:32:27:92:46:1c:7a:a2:7d:37:49:0f:
3a:e6:21:6a:d4:5d:61:d8:4f:cf:75:e6:de:be:7e:
c7:b4:2f:46:fd:ab:26:13:7b:41:de:9f:15:9b:15:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:B4:B9:F1:28:A1:45:26:2A:85:73:A3:8E:FE:DB:30:D6:51:57
X509v3 Authority Key Identifier:
keyid:70:E1:2E:BD:8F:FF:2A:6B:05:4D:ED:9D:E3:D8:F6:5E:A6:35:FB:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOEuvY__KmsFTe2d49j2XqY1-4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/50a526-c90e-4a39-8247-542d3aa7655e/1/cOEuvY__KmsFTe2d49j2XqY1-4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f4:72:c0:ba:f8:a1:4c:83:7c:cd:9b:ec:e6:af:b7:d0:b6:
42:b4:30:0b:33:ce:03:b5:c1:f6:e2:27:f2:84:c7:b5:90:69:
63:90:60:df:44:f0:8e:ca:00:ca:59:71:5a:af:5b:5a:89:1e:
0a:04:89:f8:b2:67:85:f3:d3:b4:ca:3c:01:49:8a:55:32:d6:
b7:79:f2:03:d5:02:28:88:e0:b9:a9:44:54:e8:34:e7:a4:03:
eb:01:8c:df:0d:0d:c9:6a:61:d3:b2:1f:bd:bf:9c:f5:19:70:
8c:e5:01:3c:31:e5:3d:39:0d:c9:70:3c:c8:1f:b8:bf:48:69:
7f:ea:43:a0:c3:bb:9e:e8:4c:8a:aa:30:83:f2:1b:1c:3c:ae:
20:f6:44:22:19:25:8a:3d:ec:f4:c8:58:64:82:3c:f0:5e:87:
fa:f6:cf:6f:97:4d:4e:81:79:93:fc:7e:df:53:90:ae:52:5e:
81:50:f5:7a:2e:86:6e:15:47:15:e0:88:1d:ae:bb:86:dd:1d:
d4:f6:85:11:b3:a8:e1:77:58:65:9c:61:0f:ea:5d:57:2e:6a:
54:77:88:c5:98:f0:d9:b8:0c:b1:65:94:43:63:38:72:6f:a7:
12:22:ce:4a:68:c0:6b:41:c7:b3:a9:82:22:89:49:7d:25:06:
e3:36:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:07 2025 by rpki-client