Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
File: C0ojfRF9934LiqUS9vJfsgf5orE.mft (raw, json)
Hash identifier: 9doKabUdhYnl5HO7LrbSkeUyP+RkNEVqcmKXzaNXBGI=
Subject key identifier: 4E:B9:5B:76:A5:BC:C8:D3:B0:AA:44:B0:35:99:E1:8F:BA:CD:5E:DA
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 01991688F317F0010FDE030F0B69FDF5A977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
Manifest number: 1206
Signing time: Thu 04 Sep 2025 21:01:37 +0000
Manifest this update: Thu 04 Sep 2025 21:01:37 +0000
Manifest next update: Fri 05 Sep 2025 21:01:37 +0000
Files and hashes: 1: C0ojfRF9934LiqUS9vJfsgf5orE.crl (hash: tceP/hq4pAFspMrc82FMtuMQu7fLTRB3tTS9nrUOJ74=)
2: ubaYGhsK3un9FzpeOuJImEsVY0k.roa (hash: GKSurghCGTsvWWfo6kF8DtoCXANGJM6Q52lyK44WE3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:f3:17:f0:01:0f:de:03:0f:0b:69:fd:f5:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Sep 4 21:01:37 2025 GMT
Not After : Sep 5 21:01:37 2025 GMT
Subject: CN=4eb95b76a5bcc8d3b0aa44b03599e18fbacd5eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:6a:88:06:6b:eb:2d:d6:d3:dd:a1:7e:56:
b0:0b:c7:34:1d:9c:61:e6:8e:83:bf:96:c8:34:54:
05:a6:60:b4:86:ef:89:db:5e:08:40:bd:ba:2f:56:
1f:88:6d:f8:da:f5:3b:b9:ec:e9:de:0b:c8:eb:fe:
ce:8b:b0:42:a2:df:cd:23:52:59:ae:68:9c:b7:43:
c4:e0:02:88:32:22:a6:a7:9a:40:e3:d6:e5:0b:05:
0b:8c:cc:22:91:06:6e:17:d6:d0:b7:0a:d8:be:d9:
ae:a7:27:6f:b3:aa:34:35:c9:fa:34:de:66:f7:17:
9c:5e:54:fc:f8:d3:30:f4:95:15:6a:7a:93:28:86:
e5:7b:c8:8c:c5:f9:ae:ad:96:98:47:d1:c5:3f:2b:
f0:2d:0d:1b:c3:c3:d1:41:a9:66:c0:76:57:e9:ac:
e9:b8:07:23:1d:dc:e8:e5:9d:26:9f:5f:55:18:cf:
29:f6:78:39:d4:d0:2c:cd:f9:af:07:21:4a:27:3a:
86:81:46:97:3d:64:58:fd:a7:12:8b:e5:cf:33:df:
8a:4d:2f:cd:00:ee:5d:a5:9b:d3:d0:11:05:49:ac:
92:a6:17:0e:07:ec:78:99:b5:3f:79:1f:33:87:c4:
86:96:07:15:75:6d:36:73:1b:0c:7f:2b:e2:d6:75:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:5B:76:A5:BC:C8:D3:B0:AA:44:B0:35:99:E1:8F:BA:CD:5E:DA
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:18:d1:e4:6f:f4:ab:e0:e8:ac:16:00:80:47:f0:a1:2f:c9:
54:47:6d:74:59:b5:fa:7e:eb:23:69:11:0c:0f:56:00:e7:a2:
0a:20:64:20:27:64:cc:af:56:47:de:cc:74:61:67:72:1a:7e:
83:a1:66:3f:d7:e0:6a:05:cf:a8:3c:01:d0:40:99:36:87:99:
fc:7a:5d:e6:5e:09:47:55:60:be:73:c4:0a:3e:fc:d8:c4:bf:
b6:e3:33:7e:48:83:f3:6c:9a:9b:15:de:c7:68:35:5e:92:27:
35:09:4b:79:22:e9:4e:69:de:db:cc:c1:61:07:c5:63:02:a7:
2c:59:3a:76:40:4c:86:e3:60:56:4f:7d:1e:3d:16:e4:d2:66:
9a:f7:d2:c3:af:64:89:54:d8:63:18:d1:a0:5e:be:0f:78:d9:
48:ae:8e:6a:18:40:d5:d3:27:e5:37:23:e2:bd:1c:58:f5:0a:
1a:bb:fa:f9:7b:23:3a:49:80:54:7e:79:b4:6c:15:be:60:64:
8d:75:ca:bc:6c:41:67:88:b5:3b:b7:20:b0:9d:70:00:f6:f9:
a4:93:9b:82:a3:07:86:98:c1:32:fa:fd:d1:26:8d:74:3e:b5:
25:57:9f:a3:72:12:4e:d5:7e:7a:2c:4b:be:62:c3:c3:39:df:
29:e5:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:06 2025 by rpki-client