Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: MzFOGM9Zq3IyQY6fykszfgAsMm9dVYXxwqhoPiQ/vME=
Subject key identifier: 21:9F:0C:1B:7C:C0:45:91:17:BE:16:42:EB:AA:11:8C:82:F4:01:9B
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0199228CCEC19432C3A80AB2E713A9AE76D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 0A37
Signing time: Sun 07 Sep 2025 05:01:17 +0000
Manifest this update: Sun 07 Sep 2025 05:01:17 +0000
Manifest next update: Mon 08 Sep 2025 05:01:17 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: ttoydgzVXdNOvYQv/P7YBOs+v6joWVuo6WNesy/DqRw=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ce:c1:94:32:c3:a8:0a:b2:e7:13:a9:ae:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Sep 7 05:01:17 2025 GMT
Not After : Sep 8 05:01:17 2025 GMT
Subject: CN=219f0c1b7cc0459117be1642ebaa118c82f4019b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d9:4b:38:ca:97:2d:9f:01:02:1a:fb:91:e8:
90:5b:99:50:0e:60:48:27:16:98:80:e9:a0:4e:73:
be:22:e1:9a:1d:16:93:ed:22:b5:8b:48:8d:95:e2:
cc:07:f5:70:f8:8e:a7:98:8a:92:21:77:aa:9c:3f:
cf:0d:48:5b:e3:c8:24:72:8f:89:2c:d8:59:51:bb:
6b:3a:95:da:eb:5a:b5:fd:d8:dc:54:2d:91:55:be:
52:7e:4e:d3:e0:08:e5:3a:24:d9:17:1d:d6:2e:ed:
78:06:72:94:52:81:0a:78:54:20:53:d4:47:3a:4b:
e2:60:7a:68:d3:d1:0a:6b:2f:74:8e:80:91:59:74:
e5:16:8d:b3:25:74:80:45:8c:77:83:57:73:2f:72:
80:29:31:05:0e:79:67:84:f6:01:aa:6a:09:d3:b4:
9a:ae:a5:4b:4c:12:c5:c4:6f:59:0f:42:f0:79:7a:
4d:0a:74:18:0f:e5:9b:eb:9b:eb:76:80:16:92:bb:
e5:68:2b:47:f9:f1:1d:b2:28:2c:db:19:00:4f:4e:
ba:36:3b:73:42:21:4a:10:b4:53:1f:34:b7:1e:9a:
06:9e:01:f4:3c:1e:62:ea:cd:aa:82:b4:cd:9a:a8:
94:75:e1:d3:a2:57:83:ce:2a:ee:f3:a8:9c:a7:6a:
fa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9F:0C:1B:7C:C0:45:91:17:BE:16:42:EB:AA:11:8C:82:F4:01:9B
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:b6:c7:54:a7:a1:83:78:c6:0e:87:ab:1a:43:ac:0e:a3:
27:49:40:d7:b5:7a:d0:51:41:4f:b8:19:d1:6e:69:22:db:5c:
38:d2:45:b4:88:fb:bf:29:be:0c:9e:95:13:9e:b8:69:06:dc:
26:7e:c8:dd:8a:54:11:71:b3:44:16:5d:b3:27:a9:22:37:65:
1d:63:e0:26:0e:22:1f:80:67:43:8f:fe:9d:58:bf:4c:4b:86:
5d:b7:ca:43:d7:76:b6:40:03:6c:71:d7:51:1f:5e:36:30:40:
b6:0e:91:63:d1:52:9f:f9:01:28:b0:39:00:ed:62:17:f6:2b:
cd:0f:0d:de:9c:60:2e:f6:b7:2b:ae:f0:55:45:20:8f:fa:15:
52:e2:01:0b:2e:52:dc:ec:52:33:2d:7c:ff:e5:61:51:5b:80:
bc:6d:46:2f:ba:d5:fe:74:eb:6d:c0:8a:b8:96:db:79:8a:fc:
c8:de:9b:31:cf:ce:fc:30:57:87:a0:71:cf:2f:49:26:ed:a4:
3e:1d:13:b5:8b:e8:bc:b4:67:41:ab:8b:fd:95:f0:c7:4a:82:
4d:4a:84:36:ac:10:a6:bc:17:0d:d4:d3:84:ef:06:52:b5:ae:
bf:fc:c6:f2:91:67:7e:e7:c0:5b:2f:23:59:ee:bd:de:85:66:
2e:f9:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:09 2025 by rpki-client