Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: KE6zljhbbIxbePw0/gNRjhOU9f8qFMSyM4o0RM9M+DU=
Subject key identifier: A2:3A:96:B5:FE:DE:B7:9F:F9:15:54:77:85:97:57:67:5C:CA:66:3B
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 0198D54E15D37F303C70EC0D07403E97DC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 118B
Signing time: Sat 23 Aug 2025 05:02:01 +0000
Manifest this update: Sat 23 Aug 2025 05:02:01 +0000
Manifest next update: Sun 24 Aug 2025 05:02:01 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: hKQ8CG/gHaINpnmH1DrXqxs2v9PJRFja5CeoU4xPmKY=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:15:d3:7f:30:3c:70:ec:0d:07:40:3e:97:dc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Aug 23 05:02:01 2025 GMT
Not After : Aug 24 05:02:01 2025 GMT
Subject: CN=a23a96b5fedeb79ff9155477859757675cca663b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:5b:52:99:fa:1b:0f:61:10:ca:1e:4c:fd:
af:55:95:2d:0d:3b:6f:68:2b:9a:1f:82:cb:05:da:
59:91:2c:a8:08:b9:3d:e0:a5:63:b8:36:dd:f1:a9:
68:38:10:cc:74:93:3c:29:24:1e:ea:21:f7:08:37:
da:9c:56:a7:46:71:ef:d9:f9:11:da:f6:16:f0:84:
35:56:b9:39:61:29:fd:f0:ec:52:92:65:90:fd:6b:
d4:2e:0c:b2:50:62:5c:b8:d1:7e:eb:43:a9:b2:f4:
13:cc:ea:d9:47:11:6f:e3:ea:be:58:ec:b2:40:5a:
b6:ef:06:40:de:00:c0:eb:84:3d:40:af:9e:67:74:
94:5c:9f:3d:1a:44:2d:a3:a5:a3:61:0a:68:d0:db:
f6:45:26:03:27:ec:c2:48:4c:60:19:cf:f2:d4:2f:
38:a7:3a:dc:68:a5:bc:27:3a:64:d9:a8:14:46:88:
8c:00:b0:f5:cc:0c:b7:63:d7:2e:91:24:4c:8c:37:
bc:be:97:21:3b:b8:03:36:6d:d4:eb:19:d0:f3:01:
fe:d5:c3:a4:0e:9c:da:1f:50:74:e3:34:13:4e:08:
7e:c5:ba:24:a2:48:a5:d7:3b:2b:ac:7c:fd:20:da:
93:45:b0:d8:6a:4b:0d:67:27:c9:d1:2c:05:52:8b:
3e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:96:B5:FE:DE:B7:9F:F9:15:54:77:85:97:57:67:5C:CA:66:3B
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:71:4f:ae:01:7b:7d:54:88:2e:58:81:4f:24:9b:37:ea:7f:
cc:c4:b0:26:0a:ca:c8:b9:7b:0b:01:8a:2d:80:8f:e8:10:8d:
05:61:4d:ab:2b:06:2d:d6:bb:19:29:4e:1b:ae:d1:b1:75:b5:
af:26:e5:23:57:bd:fe:7c:88:bb:bc:0e:14:38:7a:0c:85:4b:
1d:5c:01:74:f8:f6:8c:f0:5b:17:1c:13:5d:c9:95:8f:97:be:
1d:7c:41:3a:ac:58:43:29:ca:90:01:6f:93:98:d1:24:60:98:
33:eb:8d:4f:e7:c0:79:de:7b:c1:a4:4f:0c:b4:3a:fc:54:8d:
3f:1a:71:11:1a:8f:05:8d:c2:00:c6:9c:ce:e0:61:53:bb:08:
a4:e5:d0:86:17:34:04:9d:1a:4c:7a:ee:0c:cb:08:d3:ed:3a:
c7:d5:7e:bf:8b:7d:96:ea:aa:68:7e:e0:f6:49:fa:27:5b:96:
5c:92:4b:85:46:f6:f6:f6:e7:ef:ff:98:43:f9:a4:7f:b6:fb:
ae:b4:0d:c8:bb:bb:3f:68:78:48:fc:ec:2c:97:a1:17:4b:21:
1f:12:fb:8f:f5:4b:41:b0:86:07:ad:9c:e8:37:4b:43:cf:f4:
13:b6:33:ca:46:78:37:91:3e:38:55:50:69:45:10:74:06:bf:
84:b3:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:40 2025 by rpki-client