Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: 6swbJxZBxDsBys3/EqPUZ4a+o9kOI7SZ2Ibld/KZf8Y=
Subject key identifier: DE:40:A9:EE:8F:5B:C2:82:AF:5C:5F:2A:45:77:11:A7:74:90:D3:84
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 0198D54DF2A269267C6D01A01CE1F4BBC51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0BA2
Signing time: Sat 23 Aug 2025 05:01:51 +0000
Manifest this update: Sat 23 Aug 2025 05:01:51 +0000
Manifest next update: Sun 24 Aug 2025 05:01:51 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: k8pnbogE8FKnruku/pJHWgaDHmGxpNeI0zxlZ7yhBq0=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f2:a2:69:26:7c:6d:01:a0:1c:e1:f4:bb:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Aug 23 05:01:51 2025 GMT
Not After : Aug 24 05:01:51 2025 GMT
Subject: CN=de40a9ee8f5bc282af5c5f2a457711a77490d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:82:8d:42:13:07:f9:02:5a:a6:98:73:3c:
3f:1a:c8:e9:08:2b:9c:63:0b:51:80:ea:f2:3a:27:
4b:3d:17:a3:d6:92:fe:e9:09:f8:34:6e:26:55:39:
7f:90:cf:2c:14:14:e1:ad:5d:5c:6b:fe:07:20:3f:
ea:72:ef:a7:85:d8:b0:1d:4f:c3:7f:cf:61:c5:28:
6e:15:10:f8:50:59:a4:1a:ef:80:24:7a:c5:95:be:
95:dc:dc:9d:25:55:82:c6:96:e6:c8:65:37:ee:80:
01:93:a3:cc:86:bb:0b:b1:e0:be:ae:62:20:5b:5a:
fa:45:64:0c:3a:be:1a:7d:d7:04:3f:48:78:55:56:
e2:a3:b1:d9:77:75:9e:d2:9c:e5:3d:ee:4f:8d:79:
b0:a5:b9:f2:5c:00:17:7d:72:d2:5c:4d:43:f8:80:
b6:fa:dc:ca:7f:c8:ee:bf:50:95:ee:16:81:30:bc:
49:d2:65:8f:64:e3:7e:d5:79:ce:9e:85:d5:ec:3a:
74:97:33:90:7f:0e:87:9c:bc:39:b2:d9:5b:a1:ae:
5f:99:fb:c8:3f:ba:d5:59:f5:58:f4:20:f7:6a:bf:
2d:5a:b5:40:f3:26:03:81:b3:67:77:2b:a3:c2:bb:
6e:f9:49:19:31:9f:2f:b1:06:35:e7:2b:60:07:d6:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:A9:EE:8F:5B:C2:82:AF:5C:5F:2A:45:77:11:A7:74:90:D3:84
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7c:f6:77:b5:9b:2f:f2:3a:36:68:9e:72:3f:8b:dd:6f:10:
18:ff:30:80:fb:55:0c:4e:bd:6c:54:8f:62:b6:f4:91:7c:45:
ad:b6:dd:fe:72:79:34:21:94:24:6e:df:83:3e:0f:ac:09:8f:
6f:af:64:6b:1d:d2:00:27:ff:33:a7:8b:d2:fd:bc:b3:25:e7:
d6:8e:27:55:3a:87:51:d1:9c:db:12:68:c8:91:7a:22:ad:9d:
86:0e:ac:5f:d6:c0:d7:03:9a:fa:60:02:06:7b:72:b2:2c:fe:
22:ee:de:60:84:f5:f6:28:f4:eb:0d:22:5b:99:e2:4b:e0:6a:
d4:2a:24:3c:2b:0d:5a:03:13:5f:32:47:b8:94:53:5b:ea:f3:
5e:c2:b8:46:d1:0e:8c:62:27:5d:7e:48:ad:6f:61:1f:a0:c5:
0b:e4:d1:4c:ec:f0:4f:a8:6f:c3:3e:2c:31:1c:a6:24:69:cf:
87:b5:13:a0:bd:eb:43:5a:03:da:41:c5:df:2d:d3:ec:21:c7:
2d:1a:e4:ab:e2:eb:25:80:74:b1:23:44:73:76:86:ae:35:c2:
94:a3:95:0a:31:26:02:31:41:ea:aa:6b:2f:f1:cf:26:84:eb:
c0:89:bf:f3:68:ca:7e:2f:10:42:66:39:12:60:05:cd:4c:ba:
f3:06:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:36 2025 by rpki-client