
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: clnikK1YidCH+n1w/bwI2mgf4bcRomHIZxH4jUJakk4=
Subject key identifier: 87:51:3C:FD:69:10:07:75:C5:A7:FD:2F:AD:D8:2F:73:3E:FB:23:8D
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 01974C32041D12A418C38AFD51C5E84CC023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 128C
Signing time: Sat 07 Jun 2025 21:00:35 +0000
Manifest this update: Sat 07 Jun 2025 21:00:35 +0000
Manifest next update: Sun 08 Jun 2025 21:00:35 +0000
Files and hashes: 1: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: KMdAtyxy5G6I5KK+VnQdedOL4JkzU5KLzEr0fkBIt2U=)
2: ef1IFXBRyUc_UhmQBLKR_kqjP-k.roa (hash: ReaiOea67yb8AgzXCMfyIi9G3e09LCQ9vM+znmfetZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:04:1d:12:a4:18:c3:8a:fd:51:c5:e8:4c:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jun 7 21:00:35 2025 GMT
Not After : Jun 8 21:00:35 2025 GMT
Subject: CN=87513cfd69100775c5a7fd2fadd82f733efb238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ed:04:2b:21:fa:7c:4e:21:c2:ac:41:6f:82:
87:52:60:0a:ef:0b:f7:f4:78:0b:2a:de:d6:0e:8d:
32:8a:00:c4:20:9f:c9:36:49:6e:60:25:a2:f7:eb:
09:07:47:6e:b2:fe:62:6e:62:ef:9a:e0:34:db:e1:
53:65:4c:c1:ee:76:0c:5d:20:fa:2b:3f:f3:00:e6:
3f:bc:f3:1b:b8:35:a0:e3:1d:76:32:4b:19:49:45:
26:60:fc:68:25:50:53:69:26:1c:45:68:fa:f5:e1:
37:e5:b9:c8:d8:29:34:46:01:c0:1b:69:df:b6:b7:
d5:bf:57:4a:82:92:8b:79:83:8f:e7:18:81:db:72:
74:1d:b7:a5:24:4b:83:ec:97:15:1b:8c:1b:b2:6a:
c2:7b:c9:03:45:42:cf:15:d8:ca:ed:e1:1e:64:5e:
92:30:d9:52:89:aa:36:36:83:9c:9d:1a:63:a0:a1:
21:10:d8:d7:9c:14:52:16:b5:fd:e4:97:34:4c:4b:
e3:e5:6a:c0:a5:8e:f7:e6:9d:bc:ca:18:f0:42:b9:
57:bf:14:c3:30:48:35:c9:71:34:90:5e:aa:e4:cb:
d1:4c:07:66:29:48:50:fe:21:d6:43:34:bc:f8:a8:
ad:ef:a6:23:d2:89:ae:4a:c5:fc:94:94:4b:28:eb:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:51:3C:FD:69:10:07:75:C5:A7:FD:2F:AD:D8:2F:73:3E:FB:23:8D
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:10:88:78:67:cd:ac:69:b7:0a:45:b1:dc:53:5d:b7:22:41:
27:12:68:fb:da:84:ac:18:27:4f:44:d0:f3:d1:ad:c1:80:2b:
9e:df:fc:d0:b0:af:55:1d:1d:60:3c:2e:2d:74:6f:81:f4:fb:
0a:b5:1c:dd:3a:e5:e5:c7:d3:73:57:c5:58:8c:24:f6:e0:99:
57:cf:31:c1:68:c2:ac:26:a8:59:42:35:3b:0e:e0:8c:a9:b8:
48:30:ac:a5:11:9e:a1:24:a7:09:75:ea:89:d1:60:ca:26:f0:
42:fe:aa:13:9f:c8:9a:c7:ac:28:ea:06:3e:d2:ee:12:19:1c:
67:f9:94:ee:d7:e4:ce:a6:e9:a9:08:da:98:96:a4:f1:fb:bc:
03:41:09:0f:d8:b3:40:f1:e1:68:31:32:cd:c0:46:92:d5:fb:
62:96:15:68:a4:03:54:9f:28:54:4c:fc:bb:c4:f0:cb:1c:bd:
f6:b7:a4:a1:86:5a:51:ce:b5:d6:e5:27:ab:ea:74:a5:bd:36:
fa:bf:3e:76:37:60:ad:ed:1f:0f:d5:85:6e:e1:e7:a0:96:f7:
44:eb:14:07:cb:c1:96:4b:27:4a:b0:0c:01:d9:ef:17:4c:6c:
c5:0e:d2:27:7c:d8:3b:cc:c6:76:0c:c1:03:a5:34:c0:0e:83:
75:de:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:50 2025 by rpki-client