Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: Y6kaJqU3rrfcwhIJLPGMDtiPY+DLw/R9CrFXEvCSw3s=
Subject key identifier: 86:04:B2:81:36:61:29:E9:52:6E:69:28:80:35:15:8A:77:58:7C:29
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 0199FE46D22BAC68BFA12206E2DD9F7FAC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 01A5
Signing time: Sun 19 Oct 2025 21:01:18 +0000
Manifest this update: Sun 19 Oct 2025 21:01:18 +0000
Manifest next update: Mon 20 Oct 2025 21:01:18 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: Z2Xzh4OfIEokicX2S/8Q3cUHjDHmEFStBpDwGW0PzKg=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:d2:2b:ac:68:bf:a1:22:06:e2:dd:9f:7f:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Oct 19 21:01:18 2025 GMT
Not After : Oct 20 21:01:18 2025 GMT
Subject: CN=8604b281366129e9526e69288035158a77587c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:fc:84:3f:8a:00:c5:3e:ce:d9:8e:83:11:
d2:6b:30:61:9f:a4:88:c8:b0:e8:2f:50:b0:4a:cb:
8f:5c:f2:59:d1:27:98:e7:f4:b3:f5:61:c6:f0:cb:
03:88:c2:4e:fb:f4:5c:48:a6:50:3d:5c:0d:cb:b2:
af:4e:d1:ce:8a:19:b8:bb:09:b9:48:61:25:0f:be:
04:84:4b:ec:c4:9c:37:17:e7:a1:2e:72:c3:61:59:
4a:a6:b6:3f:57:23:f3:55:75:10:b0:da:18:ce:52:
e0:be:8e:ac:79:1d:42:bb:15:69:25:f6:1d:e7:e5:
fb:5e:fc:32:a7:6b:b9:d9:69:17:c9:a7:2c:27:08:
cb:c0:08:19:2a:32:04:0b:b2:31:db:2e:56:ec:e8:
0b:1c:cf:ca:94:32:42:b0:a7:74:03:e2:49:00:8e:
14:a5:fb:4e:6b:ee:b3:39:a2:64:51:14:1b:ca:5b:
67:75:76:93:6b:b9:a8:c8:ac:00:58:be:77:d4:2a:
94:bd:40:78:52:3a:85:0b:95:cb:28:80:98:91:71:
28:76:68:9e:bf:69:12:fe:f4:24:7f:b1:30:f5:f0:
de:98:0b:cf:04:10:dc:1f:b7:60:37:56:f4:f8:9f:
4f:a1:d6:ef:3e:c0:96:10:a4:9b:68:02:aa:30:c3:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:B2:81:36:61:29:E9:52:6E:69:28:80:35:15:8A:77:58:7C:29
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c1:af:5b:65:0d:46:c9:f6:c3:99:6d:39:7d:e2:4c:2d:06:
c6:98:bd:f3:36:bf:67:31:2d:03:ea:3a:dc:57:a2:e3:e7:ee:
b2:98:97:53:3a:d6:6f:65:9e:e4:b2:1f:7a:32:26:5f:e3:2a:
9b:db:7d:c7:bf:fa:a5:64:ef:af:07:63:9f:45:83:23:a3:fc:
88:f7:10:21:5b:02:b3:66:33:a7:59:93:81:1d:fb:d7:c0:e8:
e2:cb:35:e7:e0:db:d2:99:4b:f1:1a:55:ad:97:1b:be:ab:95:
5d:b8:04:c7:0b:9d:49:18:bf:83:52:12:8c:5f:65:f1:96:e8:
37:50:1e:be:8b:00:0f:05:ec:9a:c1:13:c8:c8:35:d0:0c:ed:
af:6c:cd:19:7a:5b:0c:83:96:ed:26:f4:3e:a5:09:11:3e:11:
5b:66:37:c3:fd:a3:4a:79:d8:85:6e:d0:5d:ef:b1:c8:27:72:
fb:70:7d:6f:6a:93:00:5c:4e:4c:a2:37:d4:bf:bc:52:7c:c6:
02:75:17:15:22:13:fc:4d:70:77:5d:29:7e:28:92:a9:ac:51:
8c:99:e8:ac:dd:9c:8a:7c:f4:50:8f:af:53:70:33:b5:9e:99:
58:da:b3:b2:77:6b:e5:81:fb:2a:2e:bd:6b:7d:82:82:ba:a0:
c7:7d:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:55:14 2025 by rpki-client