Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
File: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft (raw, json)
Hash identifier: /2QhKX6R99CoTwNOSY7QPtzOe/2idnhGHojQCneT6Hw=
Subject key identifier: 00:09:D5:31:36:06:D5:A3:60:32:C1:0F:71:59:B1:07:4D:76:44:C7
Authority key identifier: 68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
Certificate issuer: /CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Certificate serial: 01993123FA2CA6A654E024EFFF9B9E6C66BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
Manifest number: 1676
Signing time: Wed 10 Sep 2025 01:01:05 +0000
Manifest this update: Wed 10 Sep 2025 01:01:05 +0000
Manifest next update: Thu 11 Sep 2025 01:01:05 +0000
Files and hashes: 1: EPNaozHQAjVOYQy-Vt2Z_kxiWS0.roa (hash: WsqXo+AMtH2w9AGoDi4Cn3lAEUdfpStLLlDa9sz3f6I=)
2: aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl (hash: QZWSxN/MaMHrPDubvSrAoPeOHZ4DzHvczHGYZxOn0gQ=)
3: oyDkuFI7Lh8_-ReZkAMKowiORyM.roa (hash: 3yAZCKM7m/E+YP0xth4LuRn5Dda6av4q64pWFUUvg/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:fa:2c:a6:a6:54:e0:24:ef:ff:9b:9e:6c:66:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e3ba87e3a93468cc3b3c3f60fa63d5e853c314
Validity
Not Before: Sep 10 01:01:05 2025 GMT
Not After : Sep 11 01:01:05 2025 GMT
Subject: CN=0009d5313606d5a36032c10f7159b1074d7644c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:a0:38:2b:1d:da:c2:fa:11:f7:b7:39:46:
cb:b3:04:1e:f9:3d:01:29:a4:20:e4:d3:17:d2:aa:
b6:c1:04:a7:b9:c2:18:83:d1:c8:7e:ef:a6:aa:1f:
91:02:b2:c7:e7:63:63:5d:4b:9a:42:f5:5d:5e:00:
5b:da:76:d1:2e:56:00:3c:a9:32:c8:c6:54:98:3d:
00:e5:cb:48:5c:6c:d4:71:9b:9c:dd:c2:d6:ab:f3:
30:e3:93:89:98:f8:5a:39:28:68:fd:f2:d6:48:41:
c7:fe:11:7b:84:17:93:82:33:56:cb:78:2e:fc:f4:
b4:3e:64:dd:72:3c:08:e3:4e:c8:d0:43:a0:87:8e:
c9:dc:82:ec:76:14:b0:39:34:3c:39:51:48:52:d7:
c2:a6:7d:55:80:d7:92:14:ab:ca:df:73:49:9a:b6:
30:9c:3e:e8:27:90:a5:11:45:7e:3b:10:bb:ae:95:
34:2a:15:52:e7:40:0e:b3:97:bc:1f:bf:05:02:93:
4d:a2:46:ea:bd:fe:a9:a8:c9:9a:4e:a1:f5:86:7b:
37:55:cf:8d:05:30:95:11:3b:25:33:83:6d:83:d2:
07:4f:e5:f3:8f:0f:33:a1:29:96:00:79:d7:98:af:
51:e5:65:27:27:b9:26:74:65:a2:d5:10:8b:d3:2e:
e2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:09:D5:31:36:06:D5:A3:60:32:C1:0F:71:59:B1:07:4D:76:44:C7
X509v3 Authority Key Identifier:
keyid:68:E3:BA:87:E3:A9:34:68:CC:3B:3C:3F:60:FA:63:D5:E8:53:C3:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1eff17-65ec-45ea-a75d-96eb07f7825b/1/aOO6h-OpNGjMOzw_YPpj1ehTwxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b7:b4:ac:eb:2d:de:3f:e0:3e:dc:b0:b9:89:aa:ea:9d:fa:
ce:0f:9b:b9:41:cb:12:09:e2:c5:73:fa:fe:e0:a3:a6:bc:4d:
18:94:3e:6b:ac:86:22:c2:7b:14:9a:65:7e:5a:78:3b:c9:35:
51:bd:af:fb:d8:52:f7:08:80:4d:03:41:02:d8:ff:c4:6c:e6:
d5:c1:48:45:ac:ff:ed:3e:6b:82:5f:ca:51:39:a1:f0:a7:ad:
44:cf:67:ff:8a:ad:43:31:6b:fe:d9:ba:70:dd:29:47:7f:5b:
a3:40:4e:ff:2c:43:dd:4e:6c:09:ba:4a:e5:4a:c7:72:77:b9:
5f:01:c9:7d:2e:24:4d:d7:f8:f4:be:a1:a6:da:3e:99:8c:3e:
b7:d6:40:14:12:76:1d:ba:19:a5:d6:b3:38:2a:89:be:6a:1d:
54:c0:cf:3c:b8:6c:2b:9c:07:b0:5a:cc:45:9c:c9:a8:bf:fc:
b3:db:bb:ad:04:96:b0:8d:b3:89:a4:5e:29:99:59:b8:8a:3b:
6e:5e:04:3d:93:a1:37:e6:d3:2d:1f:fa:3a:43:cb:90:f2:41:
92:f8:15:0f:00:c8:51:ce:4a:08:2e:b5:68:6c:e6:5f:8a:48:
d5:c4:29:8c:a8:7a:c8:f8:81:bc:67:dd:b7:04:e8:f0:da:3d:
3a:cd:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:36:52 2025 by rpki-client