Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: ldu40bpXRmvSeMeWS9sMAG4C6Yrv2Nx9vUEg2LqlywY=
Subject key identifier: AC:7D:70:36:EF:37:48:52:DF:AE:23:8F:0E:8C:38:EF:87:85:28:F7
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 0198D697EAB0FA91F4FA4BE05FFFB66B8C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 75
Signing time: Sat 23 Aug 2025 11:02:16 +0000
Manifest this update: Sat 23 Aug 2025 11:02:16 +0000
Manifest next update: Sun 24 Aug 2025 11:02:16 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: Qp6op0bn7VVvIps2YZ5KBWumhJuRnDqxAw5yZj4INfc=)
2: O1NX1SHolf4Je2aEzJJZvHyU16A.roa (hash: po5PkDRV33bzHbue9Doph6bDM4MKCS5aDFumD95q9kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:ea:b0:fa:91:f4:fa:4b:e0:5f:ff:b6:6b:8c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Aug 23 11:02:16 2025 GMT
Not After : Aug 24 11:02:16 2025 GMT
Subject: CN=ac7d7036ef374852dfae238f0e8c38ef878528f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:a4:d5:28:77:d1:9e:89:30:dd:90:e9:ee:
88:39:c4:4e:b8:0e:d4:9c:ef:32:8f:fd:b0:79:09:
cc:a0:13:b1:e3:19:80:90:7c:f4:66:c8:7c:a8:65:
ad:a6:28:be:23:53:36:0a:45:0c:64:35:7a:55:63:
36:8c:b4:ab:fe:51:cf:74:5a:e5:5a:24:19:3e:78:
a6:d8:68:b8:39:48:d1:46:ff:c1:61:6a:10:46:04:
e4:a8:9e:d8:3a:f5:26:ce:88:50:85:99:15:3c:a3:
76:9f:d2:b6:1a:3f:ea:29:c1:13:00:f4:9e:34:82:
ba:ee:84:f3:9f:d9:35:f9:df:5d:0c:a3:5f:3b:64:
db:f3:83:65:f4:77:cf:e1:3c:d1:27:f8:bb:02:34:
c6:36:37:d2:d6:e7:00:84:dc:ae:09:7c:80:d7:ff:
45:bb:c1:9f:c6:64:ed:cf:c7:3a:6a:1b:3e:89:8d:
38:f2:3b:67:33:a4:5d:f9:02:22:79:14:3e:1c:a9:
ab:1d:43:3a:1d:56:b5:50:64:4b:f7:23:c8:68:37:
c5:92:2a:0f:16:66:74:0e:95:b4:6c:c6:39:5b:58:
91:de:6f:3f:81:af:09:d1:56:b7:0b:19:83:de:a6:
db:d4:0e:98:a4:6c:e9:e1:8b:01:99:63:c7:2a:e4:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7D:70:36:EF:37:48:52:DF:AE:23:8F:0E:8C:38:EF:87:85:28:F7
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:20:6e:98:32:77:30:90:e9:1a:09:b2:a5:f7:19:45:24:e3:
38:fc:44:6c:5a:26:40:08:c7:e5:5b:74:35:bc:43:bb:e2:1f:
15:5d:7f:6d:41:80:09:a4:3a:9a:d1:8b:68:55:e6:cf:7e:57:
53:48:f0:ac:3e:4b:15:7e:5d:f1:b7:ee:f9:e1:89:dd:79:3c:
3c:dc:cb:77:3a:75:0a:7a:f3:af:06:86:2a:1f:4e:7d:e1:09:
06:2d:58:84:90:fb:71:7a:57:eb:b1:36:a3:5e:e6:29:b6:c5:
1a:0c:f0:f2:f1:34:ea:fa:73:9e:aa:8c:73:bf:6d:98:a9:3a:
08:ef:e4:f9:09:b2:d0:06:47:61:20:e1:86:fc:9e:4f:e8:d0:
99:45:ea:79:de:58:03:39:b4:c6:3f:65:d9:9e:13:9b:7c:11:
33:c1:78:28:04:0a:59:2d:0a:a9:6f:8d:37:75:7a:ae:96:de:
b5:a0:3f:d7:c9:9a:3f:05:b5:27:76:56:03:f1:cc:2c:af:51:
44:3e:8e:25:79:cd:33:49:f5:eb:61:15:a3:5b:22:1e:c8:8f:
a7:e2:5f:3d:cc:75:9f:cb:3a:96:e6:58:69:8e:03:f6:26:3a:
58:f9:6e:04:e1:08:a1:ce:f4:96:cf:3c:d8:7d:42:0c:4f:08:
49:29:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:25 2025 by rpki-client