Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: fBuuO32zzZaaNktXNgRZ2U14sUeunTqJS1tLdMmcUn0=
Subject key identifier: 01:02:F4:C0:28:EE:E0:09:91:D8:66:76:1E:8E:50:F2:8A:2E:76:6C
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0198D54EA5F18FCFDE363D7402FB8C07DDE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0CD5
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: hMmcA2EEdBoeBcVG3rKcSpYmd3YilLBfRiLjjlFsD7M=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a5:f1:8f:cf:de:36:3d:74:02:fb:8c:07:dd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=0102f4c028eee00991d866761e8e50f28a2e766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:88:09:69:10:8b:64:3b:b1:7e:8f:c3:f8:
ba:e7:74:86:0b:d5:2c:5c:1f:b7:83:3a:e5:07:a9:
05:70:63:43:57:ca:54:41:95:ed:d2:fa:ca:6c:70:
50:b7:e6:c5:18:3f:cf:2b:1f:72:3b:63:b0:7d:f0:
85:9a:94:df:69:58:62:71:9c:f2:02:83:be:4d:bc:
eb:a2:44:be:2d:96:91:c6:f1:24:6e:3c:26:a5:9c:
d2:39:11:eb:04:27:d2:62:d3:d4:20:10:b8:60:91:
1c:b2:5c:dc:c5:37:27:81:6b:91:19:f6:85:db:26:
bd:12:eb:01:8f:54:f0:0f:f6:e6:57:1f:b4:a8:81:
d1:5f:1a:10:b7:d2:2a:39:bc:e1:5b:b7:9f:b3:71:
39:b9:8b:12:1b:73:06:77:00:dc:ad:c1:58:0b:91:
90:2a:af:8e:8a:fe:dc:ad:f7:d3:12:63:e8:30:be:
c5:c2:1c:79:5c:4e:4d:5b:71:1b:60:d4:67:1e:45:
8d:c9:5f:c3:c1:0f:9d:39:7e:52:db:60:01:11:09:
79:33:4a:fe:82:49:54:23:18:1d:a3:47:7f:e1:69:
3e:86:2f:0f:0a:b1:96:8c:b9:9b:f1:b8:79:2e:18:
7d:e8:ae:70:23:55:ef:7d:09:6d:b6:98:4b:7e:99:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:02:F4:C0:28:EE:E0:09:91:D8:66:76:1E:8E:50:F2:8A:2E:76:6C
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:6e:ec:ca:b9:b6:99:97:36:9a:ba:36:9d:77:b0:9a:a0:0e:
97:bb:a9:c3:f5:1c:45:b2:34:57:b0:62:d1:2d:8e:d6:41:c4:
8a:97:5f:c7:22:09:ea:69:d3:94:25:12:8c:6e:32:38:b9:9a:
18:dd:84:cd:c0:6d:e4:48:40:d7:3d:8f:9d:5a:c3:f8:75:11:
19:af:cc:54:c5:75:ba:9f:7b:9d:c0:53:d5:e6:80:33:5f:ee:
8b:2f:a5:35:64:9d:8b:81:d9:38:e8:58:b9:2f:e7:b0:06:dc:
3f:f4:3a:3b:24:37:8e:60:69:cc:ad:a3:f2:33:9b:55:01:61:
0d:8f:47:41:d0:9c:e4:8d:16:05:03:58:74:27:8b:41:7b:0e:
a4:d5:21:21:a7:59:43:5c:59:4c:86:f8:77:ed:4e:77:eb:04:
c1:f0:0a:dd:8b:12:90:6d:f9:b5:82:67:42:ef:58:34:95:13:
23:cd:1d:6d:df:0d:c8:d1:67:6f:9b:4b:c2:07:3a:d9:7e:e8:
35:cd:31:c4:25:bd:80:a2:bf:ee:19:80:07:a2:c4:1a:34:d1:
06:b1:c6:ea:3e:9b:b2:4c:23:c8:59:26:f2:1b:8a:43:b5:cc:
2d:1d:13:04:35:3d:40:13:04:d4:97:0b:ce:86:c5:14:2e:f6:
91:90:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:23 2025 by rpki-client