Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: Qcn6LLghG1aLWwu/KMWJFaB5ilbzR9Ebd05OFS0wruA=
Subject key identifier: F5:F8:BC:BC:C5:29:6F:BA:4E:C6:04:28:2F:97:79:CE:7D:46:81:78
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0198D4E03CE6638627E0A834EBA4B4C026BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 10D1
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: vn1tarwXL/cQ5GgIk9UXokauHU/Cmm9raVgIzPRI8WU=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3c:e6:63:86:27:e0:a8:34:eb:a4:b4:c0:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=f5f8bcbcc5296fba4ec604282f9779ce7d468178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:40:17:d6:e8:1e:54:6c:8c:d7:1b:61:62:c4:
16:d1:97:b6:0f:58:d7:5f:e6:51:91:9d:ce:48:37:
73:6d:5f:6c:ee:f0:27:11:38:c0:4c:a3:2f:45:9b:
0e:43:ec:1f:b7:6a:b1:7b:1e:a5:83:c0:b7:03:e5:
b9:a1:ed:3e:11:93:2c:4d:bb:3e:0a:ba:61:bb:ce:
f4:e1:85:b8:74:69:8b:41:fa:a2:ec:6b:78:cf:71:
b2:6b:70:e7:ba:ac:52:69:2a:36:b4:1c:cf:12:d9:
cd:fa:ca:fc:7b:c2:61:ee:63:ec:54:90:ee:a9:30:
d5:4e:13:b6:e3:17:b3:b2:cc:f7:cf:d4:11:90:6d:
ba:fb:67:15:b8:fc:21:f3:3c:c7:35:ff:08:37:e5:
07:63:fb:e8:d9:0b:52:23:30:85:a6:89:f5:18:39:
e3:a4:d6:89:52:b5:41:77:c9:23:01:dd:b4:41:7a:
91:02:49:97:e1:3d:b5:8a:63:8b:54:54:9f:cc:4a:
eb:1b:6f:6e:f3:4b:c9:40:12:11:6a:98:9f:c0:21:
37:1c:b2:65:ce:42:74:9d:c5:d1:3d:d8:39:b0:4a:
82:0d:42:60:37:9b:96:70:40:82:3b:4f:47:d2:a2:
11:cb:92:3c:43:e8:63:ea:5d:05:42:17:3f:37:0d:
07:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F8:BC:BC:C5:29:6F:BA:4E:C6:04:28:2F:97:79:CE:7D:46:81:78
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:69:32:1f:a4:23:c6:2e:12:ea:79:31:06:9b:98:4f:35:
52:ed:87:e8:5a:33:f4:0e:20:e5:17:3c:9b:f9:c9:a7:e5:69:
b5:5f:34:43:78:e7:8f:1f:85:72:25:6c:37:e2:2e:81:f0:fb:
c2:dd:36:f6:ce:ce:bf:af:f9:c1:74:9d:f3:ce:2f:e4:d8:10:
35:d1:3b:21:e1:9b:e8:a3:41:48:8d:50:57:a5:c5:05:83:46:
01:7a:91:6d:46:c9:f2:dc:ad:1a:ab:e2:5c:69:3e:52:90:81:
73:cc:1b:91:a9:7e:da:28:5d:97:de:a3:f4:ae:f4:f0:02:15:
15:fd:77:e7:54:54:c8:bd:9d:de:ae:8a:3b:b7:c6:c2:34:0d:
db:f4:45:c9:30:b2:bc:cf:49:95:52:ed:a2:ec:9f:ae:a0:c9:
13:30:ef:69:14:14:0c:17:c5:2b:b6:c6:03:1d:d9:98:82:9d:
5a:22:37:99:2e:ab:f2:e9:ce:34:90:c6:a4:0b:64:ea:eb:7d:
35:b4:54:a5:69:24:e1:e8:3f:87:6f:98:08:bf:58:43:56:74:
78:ce:c8:8d:1a:11:c9:8f:93:da:28:7c:b8:45:a7:ee:7c:ff:
e4:4b:55:a0:8f:e1:33:14:57:12:42:1b:49:42:27:0d:c1:7d:
5b:93:e4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DzmY4Yn4Kg066S0wCa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzZjZWEyYTgwMjIwMzYxMjMxYjZhZmJiYzhjOGNkYWE0
ZmQ1MTcwHhcNMjUwODIzMDMwMjAyWhcNMjUwODI0MDMwMjAyWjAzMTEwLwYDVQQD
EyhmNWY4YmNiY2M1Mjk2ZmJhNGVjNjA0MjgyZjk3NzljZTdkNDY4MTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkAX1ugeVGyM1xthYsQW0Ze2D1jX
X+ZRkZ3OSDdzbV9s7vAnETjATKMvRZsOQ+wft2qxex6lg8C3A+W5oe0+EZMsTbs+
Crphu8704YW4dGmLQfqi7Gt4z3Gya3DnuqxSaSo2tBzPEtnN+sr8e8Jh7mPsVJDu
qTDVThO24xezssz3z9QRkG26+2cVuPwh8zzHNf8IN+UHY/vo2QtSIzCFpon1GDnj
pNaJUrVBd8kjAd20QXqRAkmX4T21imOLVFSfzErrG29u80vJQBIRapifwCE3HLJl
zkJ0ncXRPdg5sEqCDUJgN5uWcECCO09H0qIRy5I8Q+hj6l0FQhc/Nw0H7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX4vLzFKW+6TsYEKC+Xec59RoF4MB8GA1UdIwQY
MBaAFAPGzqKoAiA2EjG2r7vIyM2qT9UXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQt
ZjQ2ZDZhYjNkMzI2LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zOTM5MTEtNDlhMi00YTc2LWJlMTQtZjQ2ZDZhYjNkMzI2
LzEvQThiT29xZ0NJRFlTTWJhdnU4akl6YXBQMVJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJ1pMh+k
I8YuEup5MQabmE81Uu2H6Foz9A4g5Rc8m/nJp+VptV80Q3jnjx+FciVsN+IugfD7
wt029s7Ov6/5wXSd884v5NgQNdE7IeGb6KNBSI1QV6XFBYNGAXqRbUbJ8tytGqvi
XGk+UpCBc8wbkal+2ihdl96j9K708AIVFf1351RUyL2d3q6KO7fGwjQN2/RFyTCy
vM9JlVLtouyfrqDJEzDvaRQUDBfFK7bGAx3ZmIKdWiI3mS6r8unONJDGpAtk6ut9
NbRUpWkk4eg/h2+YCL9YQ1Z0eM7IjRoRyY+T2ih8uEWn7nz/5EtVoI/hMxRXEkIb
SUInDcF9W5Pkbw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:37:44 2025 by rpki-client