Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: DkIENV4yw2L8sVwjXehuys6iCurV2bTQHoAJdqMtfhY=
Subject key identifier: 1A:B0:F2:52:D4:B6:14:D8:CA:56:24:2E:E2:85:12:CF:92:48:45:00
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 0197B70E51A263A56BA465273F23531E2C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 77
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: AhV+D6HggUycknVySIztIG+8HKpZQDGXJ/Ls+IAfK5Q=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:51:a2:63:a5:6b:a4:65:27:3f:23:53:1e:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=1ab0f252d4b614d8ca56242ee28512cf92484500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:ca:26:93:44:c6:72:1f:33:29:44:e3:fa:
6d:d7:1e:df:2c:e3:8a:45:fc:f0:fe:32:42:e7:96:
6a:81:8a:cb:20:99:4a:f8:f8:06:f9:b6:66:ba:18:
b4:df:e3:d3:b0:bd:20:89:83:39:f7:0b:09:59:ea:
7c:ff:e1:9a:36:39:c2:ee:c3:53:e5:aa:f6:17:5e:
ea:41:47:fb:d1:72:43:20:48:67:93:50:0b:cc:15:
3b:69:c9:82:5c:8c:d2:7c:d8:d3:06:f4:9a:4c:51:
d1:89:8f:13:64:19:46:c6:cb:68:b3:e4:78:e2:a7:
52:3b:ba:c3:91:08:29:ae:fb:85:d0:16:62:c8:66:
26:04:af:f4:d1:2e:ef:e8:9e:17:fc:6c:56:cb:79:
ac:01:12:7b:00:6e:ee:c2:5e:c6:c7:6d:0e:c6:e9:
71:d8:7c:7a:72:96:06:3a:fd:30:0d:67:8d:82:2f:
23:23:e9:65:ef:08:a3:ee:22:3e:7a:96:0c:2b:dc:
3e:63:eb:fd:18:18:9b:be:79:6a:03:8c:3b:6d:dd:
1b:a0:49:7f:f3:77:a8:4e:9f:68:81:bc:56:dc:b2:
2f:fd:de:fe:ea:82:38:c9:db:7f:93:6e:cd:bf:9b:
15:db:eb:7e:17:7a:ca:c7:73:c5:b9:f9:5a:b3:63:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:F2:52:D4:B6:14:D8:CA:56:24:2E:E2:85:12:CF:92:48:45:00
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:a7:86:fa:55:1b:66:1f:fe:64:b9:c7:4c:e6:e3:8a:e7:
9d:0d:ea:63:15:9a:b1:04:eb:ef:ba:23:05:99:dc:af:1a:65:
7e:d6:99:81:69:fb:10:b0:5a:ee:82:b1:b9:4d:c5:68:5b:dd:
e9:ce:c1:30:81:80:45:d5:a0:c7:1e:06:bd:66:d8:16:68:d0:
ba:cd:69:99:13:92:c9:e1:0d:a6:4f:02:f8:92:cd:d3:01:89:
fc:18:65:0d:1e:3d:fc:53:c4:ab:7f:b9:08:e4:45:7d:aa:f3:
11:47:6b:ba:03:46:97:07:5a:e9:62:3c:13:6a:96:2f:f3:f6:
60:aa:97:88:bd:d3:9c:bb:0d:33:86:9a:b7:88:da:4e:c7:65:
e3:c2:cc:37:44:a2:d5:4c:2c:c1:25:65:65:a1:0b:80:7a:f1:
97:fa:31:0c:60:da:86:67:94:93:20:d9:b1:1b:cc:b3:46:fd:
bb:c9:fa:26:9d:ac:c9:5d:61:ad:db:a2:5a:eb:02:34:14:0f:
0d:2d:ff:d1:55:09:84:97:98:83:37:d5:07:3e:5d:59:1d:34:
3b:6f:2b:d2:51:71:f4:11:27:cd:51:6d:84:a8:c4:42:d4:1f:
bb:ab:2c:36:ab:6b:de:b1:39:45:c3:fc:ce:47:4e:7a:aa:92:
b4:6e:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client