Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
File: ojguLlS2Dx9o-FyYTaGmljHFLKg.mft (raw, json)
Hash identifier: t+Y0DrhU6MlicK3fFW9Gx1/JjtREEJnyoAIY2emmvyU=
Subject key identifier: 9F:A9:DE:3A:CF:16:C4:53:B3:E1:10:76:01:47:ED:7A:36:C7:FF:EE
Authority key identifier: A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
Certificate issuer: /CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Certificate serial: 019921B1546868A011D7504CDCE4F8B089FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
Manifest number: 0321
Signing time: Sun 07 Sep 2025 01:01:33 +0000
Manifest this update: Sun 07 Sep 2025 01:01:33 +0000
Manifest next update: Mon 08 Sep 2025 01:01:33 +0000
Files and hashes: 1: ojguLlS2Dx9o-FyYTaGmljHFLKg.crl (hash: GtGaN6909ZAhxOAXcmzqFjXIZZFIyQJDWMS1Gs2owec=)
2: tgYGsGAPJ3naxRJ-JjQBKL1Vj7c.roa (hash: cPWgxwQyZuH/gL73No34Pn5M4vHlmORZov0bMnwx4CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:54:68:68:a0:11:d7:50:4c:dc:e4:f8:b0:89:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2382e2e54b60f1f68f85c984da1a69631c52ca8
Validity
Not Before: Sep 7 01:01:33 2025 GMT
Not After : Sep 8 01:01:33 2025 GMT
Subject: CN=9fa9de3acf16c453b3e110760147ed7a36c7ffee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f2:33:cf:25:3f:0a:f7:d0:3a:92:ba:69:d7:
d7:36:62:a8:e5:87:10:88:e8:b6:cd:59:86:55:f1:
ad:26:06:f8:a5:99:67:f5:7c:d2:e9:73:c3:55:0a:
a6:7c:38:fe:ab:fa:db:1e:17:b9:d7:d0:4c:b0:c6:
1d:1c:59:8f:aa:d3:e6:cc:ec:ec:82:5e:7a:0b:3b:
0d:1d:d2:ab:a9:01:7b:12:e3:8b:d9:09:c5:23:36:
4c:bb:45:64:d9:0e:13:94:11:e9:b3:4e:57:e4:83:
25:08:c9:e7:52:6d:55:1f:a7:95:ec:ab:58:c1:02:
da:50:03:ac:fd:b7:96:8c:6c:bd:97:96:f2:3f:b2:
e7:51:56:79:b1:83:19:1e:85:68:54:05:ad:60:0d:
d9:23:0d:2a:77:09:a5:ce:5a:5b:34:bf:27:9e:4b:
81:31:b8:f8:a7:8a:d9:4c:10:67:11:3d:9b:4b:e1:
ce:7f:6e:7b:24:e4:d0:dc:af:1f:55:99:e3:9a:1b:
45:0d:54:ad:37:5d:40:ec:48:c6:e1:4b:03:29:3a:
08:ab:fd:94:08:67:11:81:a5:13:f9:38:53:bd:ca:
8a:89:52:fa:64:90:f2:dc:b1:43:84:23:13:65:0d:
76:73:6a:9e:4c:15:2a:be:43:61:45:98:7d:87:54:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A9:DE:3A:CF:16:C4:53:B3:E1:10:76:01:47:ED:7A:36:C7:FF:EE
X509v3 Authority Key Identifier:
keyid:A2:38:2E:2E:54:B6:0F:1F:68:F8:5C:98:4D:A1:A6:96:31:C5:2C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojguLlS2Dx9o-FyYTaGmljHFLKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/74aa3a-473d-4fb5-9038-81d1304faf76/1/ojguLlS2Dx9o-FyYTaGmljHFLKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:09:62:09:b4:b6:2d:38:1c:89:00:35:d1:fe:e1:c2:d5:92:
cb:a1:52:28:c6:59:84:ed:6a:81:b5:f8:74:1a:ba:5d:6f:42:
72:c5:6a:1c:90:a5:89:b9:95:17:83:99:69:64:1b:6f:a4:a4:
f9:28:3f:0c:e1:e9:79:ae:d4:ff:1e:3b:31:6f:32:97:ad:6e:
66:b2:3c:b1:0e:11:c5:7a:8d:b7:ea:b7:c0:76:ae:6b:37:9b:
71:21:1a:c0:ae:a8:b7:91:95:08:77:9d:26:c5:b1:04:2a:3d:
ec:a0:c4:86:40:72:28:cf:93:c1:6a:f0:4a:f4:e9:89:54:a8:
5a:8c:cc:cd:db:8f:f8:e0:2c:94:ef:44:31:77:57:c7:aa:dc:
67:84:50:2f:45:fb:c7:11:a5:32:99:64:3f:63:c1:c3:d4:aa:
3e:2c:8c:fa:6d:6e:27:17:cf:93:e6:8c:44:3f:5f:36:69:84:
43:23:f9:ee:27:4f:62:4b:96:43:ef:48:91:fb:dd:54:2b:50:
7b:47:e6:99:6e:87:56:58:bf:df:07:3e:5f:c4:bb:74:2c:0f:
77:d8:09:2b:72:6e:9a:80:0d:0c:4b:4c:a0:1a:15:bc:b9:f4:
77:af:e3:7e:b5:98:fa:6d:17:ec:d9:43:dc:b7:7b:5f:e9:fb:
78:17:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:59 2025 by rpki-client