Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: zaYvmP11/dq3I4KpyxgFRTuMLq0Oq/fy7Mb1wL1rpNI=
Subject key identifier: 34:B3:1E:66:60:78:45:F5:7E:FE:51:6E:B7:E4:7F:32:DA:F8:08:DA
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 01992E23B727F52944F2D0BB0C9180DD2DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 04A4
Signing time: Tue 09 Sep 2025 11:01:56 +0000
Manifest this update: Tue 09 Sep 2025 11:01:56 +0000
Manifest next update: Wed 10 Sep 2025 11:01:56 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: eoqx1wY5ACbP4eyqZ15DF7hIPCTHpp/SAN3fGiUkigo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:b7:27:f5:29:44:f2:d0:bb:0c:91:80:dd:2d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Sep 9 11:01:56 2025 GMT
Not After : Sep 10 11:01:56 2025 GMT
Subject: CN=34b31e66607845f57efe516eb7e47f32daf808da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:d7:a9:5b:2a:cf:76:94:f1:df:2d:2e:2a:
f9:31:ff:72:61:22:19:36:d4:e7:f7:f5:03:97:3b:
cb:7d:4f:b7:51:b9:64:c1:e4:44:fd:d4:52:ca:f5:
6e:66:cf:ad:5a:c2:e5:15:b0:79:2d:2a:bc:4d:44:
64:04:43:27:09:bd:fe:28:53:80:59:06:95:be:f1:
a3:1d:02:ba:8a:fe:42:32:d4:64:93:b7:a5:47:80:
c1:63:0a:97:ba:90:f3:bd:6b:f9:21:64:0c:4a:1c:
36:11:c5:17:f5:ff:58:48:9b:da:f4:d4:dd:a2:0c:
e9:a2:fb:6d:a0:34:70:65:2f:52:dc:15:57:67:cc:
ab:29:bf:91:56:c1:fd:f5:93:a3:7f:7a:c7:36:57:
39:60:e5:de:87:3e:23:d6:0d:bc:b1:37:77:3f:37:
ec:c7:9f:48:a2:fc:23:df:be:a0:f4:d4:fa:1c:18:
25:f2:9d:15:28:69:89:ca:ec:5a:1a:7f:00:97:48:
7b:19:53:df:62:bb:bd:a7:38:85:c1:3c:a9:bf:f3:
ee:39:d8:35:5d:ad:d8:c6:20:a7:0d:d3:8b:75:bf:
5b:e6:6f:18:cc:6a:a4:ca:91:20:e9:b7:7b:52:b0:
d3:f8:65:93:ea:6b:b9:3e:dd:68:97:0e:7e:ba:56:
2f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B3:1E:66:60:78:45:F5:7E:FE:51:6E:B7:E4:7F:32:DA:F8:08:DA
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a6:f8:10:23:d9:dd:a1:36:00:15:eb:97:15:03:21:b1:fc:
9c:75:17:5d:6f:9a:01:0a:bb:ba:4f:58:e1:9a:0a:a1:e2:e6:
a4:46:7e:ca:d9:60:94:ca:cc:8a:a7:55:d4:52:20:c4:88:ba:
90:b6:f2:93:21:8d:04:6f:c9:e8:81:c8:80:f7:35:d7:0f:56:
b0:a1:27:44:99:9b:42:7c:fe:f0:4a:86:a6:ab:d5:3a:f8:92:
78:07:09:cc:5c:1a:97:d8:88:90:09:74:e2:23:87:39:a0:97:
15:23:c1:20:ef:94:ba:00:5b:bf:d1:d9:3b:cb:b6:ff:6d:41:
15:61:ba:64:e0:94:d3:21:12:83:91:c8:b3:84:4f:ab:00:78:
ac:b1:d9:3e:5b:f7:f8:78:f8:03:f9:a4:af:0d:4c:df:b9:6a:
cc:9d:9a:3f:98:33:e3:8f:f3:6d:66:ab:72:65:f5:d4:5d:39:
c4:fb:1c:f8:a0:0e:cb:2f:44:4b:f0:e2:a2:bb:b9:38:4d:fd:
97:53:5f:a4:d2:e1:fa:47:bb:ae:7b:3a:7d:34:e4:ba:ad:35:
06:3b:1c:91:07:d9:19:c9:44:6e:1d:21:05:f0:6b:d2:94:70:
07:ed:ba:13:e6:0e:b6:c8:c3:e2:da:9e:d6:be:e4:bb:8a:0a:
cd:fc:c1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:17:31 2025 by rpki-client