Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: BKwz0N6R0qIEMIhFZQp0zr1ZemxIiJDm3UbRYqlCDM0=
Subject key identifier: 6F:7B:E9:F5:DF:26:01:42:1F:15:DD:03:F6:80:DE:D1:BE:9A:84:F4
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0198D6297F516D52B24D0BFE31B18DD4D881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0928
Signing time: Sat 23 Aug 2025 09:01:40 +0000
Manifest this update: Sat 23 Aug 2025 09:01:40 +0000
Manifest next update: Sun 24 Aug 2025 09:01:40 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: fCgTD9wb1C/jnruwgqE0PGv2aK+ffOjMnekyiwg/MUY=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
5: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
6: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
7: nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa (hash: aN95mG0hj7PK2XyXWR+TAHvEHR+mZTfAc87764WjQ2c=)
8: qOO5dT9W5xkoHAQL601E08xwv24.roa (hash: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=)
9: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (hash: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7f:51:6d:52:b2:4d:0b:fe:31:b1:8d:d4:d8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Aug 23 09:01:40 2025 GMT
Not After : Aug 24 09:01:40 2025 GMT
Subject: CN=6f7be9f5df2601421f15dd03f680ded1be9a84f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:e4:d9:d3:50:f9:a0:95:40:6f:3f:d1:2d:
c7:e3:fd:69:e6:8d:97:0e:2d:7e:73:b4:d3:55:4e:
f0:32:8b:1b:8b:5c:6f:35:10:ff:f7:af:43:d9:84:
32:0c:6f:b4:38:96:f5:5c:da:15:3e:3f:49:8b:96:
3b:b2:8c:ff:97:4c:42:4a:65:80:e7:82:4b:5a:94:
ab:59:47:c1:39:51:b8:d9:f1:7b:63:5f:47:eb:07:
e5:35:61:2e:a2:7e:5f:da:0a:f4:98:d6:83:2a:c3:
1d:98:90:0f:e1:8d:3a:cb:5d:12:41:a8:66:73:5f:
21:e9:e4:4b:be:6b:7e:57:8d:2e:61:ba:c4:ae:67:
33:68:5c:21:1c:52:2c:fa:52:ee:f4:7d:e0:78:43:
25:6c:28:b9:42:70:56:47:38:63:3f:80:06:5a:ad:
6c:f4:4f:ae:42:bc:e2:2c:3e:d4:7e:b2:d6:64:04:
4f:45:8a:05:8e:19:e9:40:72:4d:ac:de:28:94:51:
f0:a7:39:f5:bb:b5:70:a3:ad:d7:26:44:7e:2d:7b:
dc:c5:12:a5:21:35:4b:6b:cc:bf:d9:b6:a0:6d:c1:
e8:48:ad:1e:72:ff:7b:a2:b5:a2:95:54:04:a9:97:
62:94:06:60:2d:1d:9e:6e:9c:de:b1:59:fc:9d:d3:
96:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:E9:F5:DF:26:01:42:1F:15:DD:03:F6:80:DE:D1:BE:9A:84:F4
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:45:3c:38:d3:fd:ff:fc:a8:55:cf:52:12:b3:09:fb:b2:97:
ad:50:45:a6:6d:10:94:df:58:16:4e:87:80:63:99:26:28:aa:
56:2a:7b:1d:ef:4c:59:63:02:25:73:b8:12:91:db:d5:50:fe:
fe:4f:65:ef:f2:cd:d5:3a:95:72:dc:76:3a:2f:1c:da:39:3f:
92:2a:9f:69:98:52:8a:22:95:76:9f:96:92:7c:07:37:f2:4c:
ba:15:6f:ac:4a:50:2b:c4:35:16:87:b5:01:cc:72:d3:f1:73:
d7:90:53:d3:dd:ac:02:8b:ad:93:fc:96:b1:3a:69:5e:10:c3:
c7:9c:79:d5:42:0a:b7:99:dc:ff:f2:81:cd:0f:d7:74:ca:e3:
04:4b:61:cc:73:02:85:87:d1:14:3b:1e:29:13:c9:13:89:20:
56:6a:4c:f9:b7:a6:a3:0d:dd:27:6b:d1:80:1b:cb:bf:e7:0c:
61:b6:65:01:14:13:19:21:17:44:54:e1:d3:ce:22:e3:9a:91:
dd:48:6f:eb:ca:35:fe:64:0f:6c:03:13:4b:e5:a8:43:cc:dc:
95:64:37:23:f2:3b:d8:ac:47:4a:97:47:e6:dd:b4:84:a1:d7:
23:ff:c6:cd:0f:00:51:24:9a:e1:88:d8:05:9a:21:c2:ed:a0:
0b:f4:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:57 2025 by rpki-client