Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json)
Hash identifier: +In6rbIO56F37lbpbbXgEpW3Y8p85LpNQS2LYj4L41o=
Subject key identifier: A6:DB:71:46:E5:9A:6B:C3:DF:6A:EE:99:15:36:D7:1A:CB:C2:CC:CF
Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Certificate serial: 01993312C7D11C913A05E58EF589D165B877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 10:01:32 +0000
Manifest this update: Wed 10 Sep 2025 10:01:32 +0000
Manifest next update: Thu 11 Sep 2025 10:01:32 +0000
Files and hashes: 1: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: Vmk7kgEYrcO94b1rREW5QmbtrRlEV94USBoPjKHrXLM=)
2: FtnpIr2pujhwajP_siKFZdhKHhk.roa (hash: q2tZyUsnrVDVgYlVos7MxOQuJnOA8CAJo2C/in3BKag=)
3: jWG_xCoNumHJR1ckcWpK44WoOk8.roa (hash: 2ze73vnjpD52EBLckwp24AjpMJKf++ZecNj4kYZSGM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:12:c7:d1:1c:91:3a:05:e5:8e:f5:89:d1:65:b8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef
Validity
Not Before: Sep 10 10:01:32 2025 GMT
Not After : Sep 11 10:01:32 2025 GMT
Subject: CN=a6db7146e59a6bc3df6aee991536d71acbc2cccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2d:70:6e:70:d6:69:44:da:9f:5b:00:b2:0c:
23:43:f6:7d:3e:73:b3:30:c7:31:76:8c:f7:80:c1:
49:d7:95:61:98:74:eb:04:1e:1e:6d:fd:7e:7f:1e:
a5:ad:5e:0a:a7:8c:74:52:6e:0b:1b:14:64:33:1e:
3d:f7:e4:e5:f6:1c:01:5a:77:cf:e2:35:41:de:70:
07:47:d9:ff:5b:36:72:9f:54:f9:a7:3e:e5:50:16:
e0:09:9e:a1:cc:98:8a:41:28:c4:83:43:87:8a:dd:
fa:64:11:e0:98:98:11:86:85:c3:64:e1:05:c2:ed:
0b:32:fc:8b:a7:72:cb:f6:4a:8a:31:ed:12:36:4e:
a2:52:54:32:99:1b:63:d6:ec:86:82:2f:6c:1e:9e:
fd:87:88:a0:27:b5:a8:1f:ea:95:25:9a:fc:81:6d:
59:5b:f1:8e:cf:89:66:12:a4:77:46:a0:f9:59:1b:
17:1d:64:81:6b:6b:3a:ce:db:c6:07:14:7f:21:96:
66:7c:a2:b3:7e:78:49:3c:dd:4f:53:ac:a8:85:eb:
b8:33:fe:7c:ec:0f:e8:7d:70:72:a6:7b:ff:53:46:
39:13:86:34:48:bf:14:04:8a:c3:70:c6:fc:86:b7:
be:94:7c:e7:15:a2:e1:f1:a5:2a:98:f8:2c:6c:77:
95:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DB:71:46:E5:9A:6B:C3:DF:6A:EE:99:15:36:D7:1A:CB:C2:CC:CF
X509v3 Authority Key Identifier:
keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6f:e0:6c:9c:f0:ee:de:a5:e6:f8:ce:b2:07:62:56:63:2c:
8d:a5:e6:46:fe:91:2e:2b:01:47:dd:67:be:b0:5e:cc:27:c8:
a2:f9:18:9c:70:dc:86:88:1b:8d:80:23:36:4a:32:45:c3:2b:
35:69:a9:24:33:82:5d:83:8e:e8:50:ed:64:d4:44:5e:d0:74:
92:d0:c7:e6:76:d3:a0:23:2e:8c:9e:d7:e1:82:e8:74:08:a1:
30:a6:7b:cb:b3:a4:8d:d0:a4:33:1d:fb:d0:f2:54:e4:79:18:
a3:06:92:bf:ee:5b:15:c9:95:b6:d3:43:ba:41:ea:32:a2:ac:
48:af:d4:50:3c:2f:35:7d:b9:86:06:d2:f0:4b:fc:58:e8:94:
c7:93:ae:7a:1c:a7:49:26:7f:1d:f2:f7:7c:c9:21:3f:6d:c5:
83:5b:0b:e4:4d:cd:ae:e9:ef:21:72:7c:8c:7f:41:7d:9d:2a:
aa:07:1c:64:5e:78:1d:05:d8:87:dd:48:2e:0d:c2:33:8d:d8:
3b:14:3a:62:94:5d:9e:ca:5d:86:57:c9:2b:41:cc:b5:e1:55:
eb:e9:b5:ed:84:82:c1:bc:19:82:5e:e8:c2:f5:16:f1:0a:76:
d9:d6:70:b0:06:8c:6a:96:9d:93:2c:9a:c6:43:45:f1:52:be:
53:26:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:26:22 2025 by rpki-client