Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: LJt78mKlFrcJkxPAWisr8yNKZ/qyvRBdkJnVyCDjF60=
Subject key identifier: DE:00:46:C4:63:B9:ED:9C:29:4B:4E:99:7C:F7:25:C2:66:DC:76:DB
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0199270E1231E9BDEC222968A7A4AD00A8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 0847
Signing time: Mon 08 Sep 2025 02:00:57 +0000
Manifest this update: Mon 08 Sep 2025 02:00:57 +0000
Manifest next update: Tue 09 Sep 2025 02:00:57 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: CqNwcRRMasvAc3+zC3OiScbdes4N9LkBRFct4AtKO0o=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:12:31:e9:bd:ec:22:29:68:a7:a4:ad:00:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Sep 8 02:00:57 2025 GMT
Not After : Sep 9 02:00:57 2025 GMT
Subject: CN=de0046c463b9ed9c294b4e997cf725c266dc76db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:db:f5:7f:d3:4c:2e:4b:60:11:af:56:78:
af:35:6b:a5:c5:3b:86:4b:7f:f1:de:30:34:1d:32:
90:2d:ae:c9:3a:a4:be:05:76:43:f1:c5:2e:fe:3d:
4a:48:5f:94:cf:03:a6:d6:f1:63:8e:d0:d2:7d:fc:
21:f0:36:c4:d8:97:b8:f0:95:b5:83:1a:f8:3e:9d:
3a:6a:23:2c:3b:2c:f3:0d:c4:49:3c:ab:ee:a2:b8:
88:41:91:2c:a1:8f:f5:dc:69:11:78:db:4d:ee:30:
70:51:7f:72:6e:5c:41:19:b9:0e:a6:51:46:6b:97:
a4:91:6a:4b:0e:c0:52:13:4a:61:54:d1:a8:9c:4c:
37:21:6c:4c:eb:0a:00:ff:97:c7:c3:92:ff:ae:b1:
96:33:bb:47:2f:df:27:37:aa:97:eb:8c:a4:4f:d5:
b9:cc:7e:d3:75:d8:cf:9c:a4:47:d6:6d:99:76:b7:
5a:b3:b0:9e:94:d3:8f:62:5b:75:ff:8e:ae:08:e3:
58:57:ea:ee:8c:cc:40:f9:83:e8:ec:e2:95:03:08:
32:02:e6:1d:3c:f2:fb:15:7f:76:c6:b2:8a:08:90:
52:dc:95:c5:ab:eb:8e:d4:82:d2:3f:65:7f:8e:46:
ce:bf:6f:3a:c8:25:4f:79:26:4e:e1:6c:22:21:36:
fb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:46:C4:63:B9:ED:9C:29:4B:4E:99:7C:F7:25:C2:66:DC:76:DB
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c1:db:24:9c:ce:71:f6:f6:8a:08:ea:1a:19:a4:b2:b4:d0:
11:8e:ad:32:bf:b8:4a:f8:b4:da:2f:2b:c3:b0:cc:41:1a:4d:
89:ce:e8:37:b7:17:45:fe:c8:3f:f6:62:94:f6:63:9c:2e:94:
0c:54:70:4b:90:44:61:b7:be:df:ce:bc:d4:e5:6e:4b:9c:b2:
4b:26:c9:5e:9a:3b:f6:3f:37:44:7f:36:01:4b:84:25:7c:bd:
f8:09:cc:94:3e:9e:61:48:d3:7a:b1:73:77:87:e0:d6:e0:7c:
95:1f:6c:45:9b:32:80:42:59:e3:b4:a7:66:77:dc:b2:d8:d7:
50:3a:f5:95:d7:ca:3b:9b:31:14:cc:1c:5e:71:15:96:2d:91:
f5:d8:17:ad:d8:bd:69:a7:7c:23:9c:1e:68:b4:02:f2:b0:26:
89:17:f8:a4:06:e2:50:24:b9:6c:8d:8f:f6:4d:9b:50:04:b7:
5a:3b:92:0c:43:fa:94:3f:88:29:ee:9d:f3:e1:79:fd:8c:d8:
17:a2:60:e1:b8:5c:9f:f7:90:1b:e1:e2:b8:8f:e8:fe:6b:0f:
6f:b7:16:bf:84:d1:c7:10:74:4d:68:13:fc:f0:fe:90:00:80:
31:e2:72:b5:ad:84:f6:fd:d8:cf:dc:4b:52:79:d8:3d:b0:0a:
56:e9:e1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:01:53 2025 by rpki-client