Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: dz+s+OA4h0UArd0yLcmt7vPQ9c9Oitwm5IMtQ6jLDnQ=
Subject key identifier: F2:C9:04:9E:EE:CD:21:C8:B0:17:A8:06:08:3C:23:0E:A8:A8:84:66
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 0198D4DFCA0F519424B23819816761027722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 010B
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: t4ChWcBYNTuk64Zv3qKQkdgvsh8MjpCZJmqe2ojTw9E=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ca:0f:51:94:24:b2:38:19:81:67:61:02:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=f2c9049eeecd21c8b017a806083c230ea8a88466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2f:0e:d5:e8:b7:37:4e:eb:79:72:19:fb:86:
59:74:7c:2f:b0:bb:69:80:97:55:0f:5c:55:7e:6f:
9b:c4:52:92:26:0b:20:6f:27:85:55:57:cd:c6:77:
1c:fe:19:e0:03:93:41:4b:55:5e:e3:cb:2a:92:aa:
f8:cb:45:62:73:0e:a4:37:c7:bf:27:0c:40:26:47:
12:35:b9:59:b1:5e:97:8e:76:3a:c3:54:23:32:0e:
a7:72:cb:d1:0d:e6:81:53:c1:e2:b6:3d:60:11:03:
df:41:6a:a4:ea:ec:43:a7:7d:e0:90:ba:15:a8:53:
48:81:64:2b:98:87:a7:df:ab:60:57:cc:07:31:0d:
7e:07:55:c8:07:a5:cc:08:7b:4a:2b:41:db:1e:51:
49:db:74:22:40:4c:a5:8d:54:af:12:2c:b6:a0:9a:
f2:3e:7d:12:d0:c5:d9:a9:b7:e6:7b:f4:68:f7:48:
22:f9:c1:4f:4c:a5:72:75:3d:48:52:b4:f5:c9:ca:
f3:da:ae:6b:ac:0a:ae:71:45:b6:5c:94:c5:8b:fa:
ca:5c:0a:de:d0:60:f2:66:ea:80:1f:c4:a5:6a:13:
f9:6e:79:9f:40:23:67:c5:7d:b0:b8:1d:9a:f8:a9:
09:ef:d5:39:7e:b8:22:87:3e:57:f3:40:c8:0b:09:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:04:9E:EE:CD:21:C8:B0:17:A8:06:08:3C:23:0E:A8:A8:84:66
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:c2:d2:56:8e:28:75:53:db:54:d2:a6:8a:ee:c0:42:3a:
71:aa:d7:06:55:9d:3e:07:17:85:9e:e3:b4:84:c2:40:8c:3b:
79:f9:60:53:40:1f:7d:c7:51:b7:46:50:48:e8:92:35:1c:71:
02:f5:b3:75:77:89:6a:f9:5b:ae:c2:45:ef:c7:5b:c3:95:39:
49:fe:9c:74:a4:28:be:2c:d9:ad:f2:33:ec:c3:ba:0b:e3:b5:
90:a5:24:cf:50:fc:19:13:fd:2d:3c:67:db:51:da:be:54:e5:
19:2c:39:62:dd:bf:9c:b9:16:07:84:dd:63:82:8d:88:cc:f6:
b7:65:c0:7b:e7:59:b3:a7:27:ae:46:c0:ad:7e:86:fc:c9:ee:
a4:97:07:e7:51:a5:41:93:4b:27:27:91:50:e5:96:ac:af:b8:
d5:da:0f:24:71:62:e7:53:cf:9c:e2:16:f2:60:bc:c6:1c:7f:
c5:d4:f7:e0:78:96:14:4d:a8:63:af:07:ad:bb:93:f8:76:5c:
02:57:34:04:bc:23:e9:ac:3f:e4:59:98:df:60:19:28:dd:3d:
6f:22:1a:70:05:3f:ec:24:7d:bb:fa:f6:af:6e:67:6d:3f:a9:
5c:a8:fe:40:e6:25:75:ae:c8:c4:d9:29:ac:7d:6d:a4:8a:9f:
b7:b8:21:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:02 2025 by rpki-client