Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: 5FWwyEncw8MDFEJJUJeEaSWHetyLRDb4lr3j8TtyRM4=
Subject key identifier: 7D:85:FC:85:41:74:80:7E:26:80:BF:7A:74:8B:D5:A1:A1:D8:91:7B
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0197B6694B8091864BB4BD3279445BCCDD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0891
Signing time: Sat 28 Jun 2025 12:00:43 +0000
Manifest this update: Sat 28 Jun 2025 12:00:43 +0000
Manifest next update: Sun 29 Jun 2025 12:00:43 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: Ch1sFZTLvpZNL6dtYsHN26fg2U2eYKx1pBco/d6R0qs=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
5: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
6: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
7: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
8: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (hash: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:69:4b:80:91:86:4b:b4:bd:32:79:44:5b:cc:dd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jun 28 12:00:43 2025 GMT
Not After : Jun 29 12:00:43 2025 GMT
Subject: CN=7d85fc854174807e2680bf7a748bd5a1a1d8917b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:4f:99:74:04:16:ce:d7:79:bc:ff:ea:1b:
2f:59:49:13:ea:cf:93:69:a7:6e:dc:2f:94:c2:3a:
07:89:45:a0:11:d1:bf:9c:ab:36:b6:10:eb:4d:46:
42:d6:5c:a2:1b:1e:31:3f:bb:64:c6:39:9b:ac:8a:
01:dc:0d:b9:07:0e:cb:e8:d8:2a:97:19:e7:c2:db:
65:db:88:7d:c9:2f:7f:d5:4a:2e:4c:cb:9e:e5:90:
54:10:a1:56:86:90:c7:4e:7a:d1:8b:fd:ce:00:06:
6c:e4:0c:e6:6b:3e:c0:d9:72:a0:82:96:d2:4a:dd:
d1:7e:cc:26:ef:60:72:0c:75:6b:c6:cf:3c:32:71:
ca:46:f7:88:ff:dd:a4:fd:f2:1b:ac:f7:7d:5f:d9:
42:b1:88:99:54:97:af:88:7f:df:96:81:4c:0b:c8:
6d:0e:2a:0a:be:a8:6c:b8:d8:d7:75:29:2b:e6:c5:
98:4e:35:dd:57:e6:69:4b:2d:5a:f1:9f:49:6f:bd:
00:61:e6:ff:7d:e8:d5:dc:66:78:da:24:a0:3f:66:
57:92:c1:68:8d:04:b1:c4:cb:4e:41:1e:79:3d:95:
c1:20:7a:7c:89:95:8e:4d:c7:e7:8e:e1:23:58:48:
9a:35:08:30:3b:9d:65:22:f4:8d:ed:b7:34:bc:12:
20:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:85:FC:85:41:74:80:7E:26:80:BF:7A:74:8B:D5:A1:A1:D8:91:7B
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2e:bc:2b:16:be:89:2e:8d:bb:f9:4c:2a:f1:3e:82:26:4e:
ff:8e:cc:e4:87:c0:f3:26:7e:02:7c:b6:68:46:60:77:91:24:
e4:d9:c9:84:e8:c1:76:1b:2e:e7:cd:a1:ac:67:9d:4f:34:a7:
96:59:64:2b:85:d8:c9:6c:50:d0:0c:93:2c:c1:a0:1e:d6:40:
f7:d0:35:a3:77:f9:4e:bc:e2:0e:b7:18:a1:e4:6e:e9:7a:fe:
12:9f:93:ca:c8:67:7e:96:aa:f4:73:a6:fc:7c:48:9e:0d:13:
86:ef:02:38:6a:ac:2e:d7:5e:07:20:a0:55:38:b6:e4:8b:5a:
20:f0:04:54:c3:1b:c9:60:93:82:6c:01:61:7a:bc:7a:43:cf:
25:d7:e4:20:5d:98:11:28:d4:f2:a7:f8:54:4f:b3:aa:df:c9:
87:21:28:3b:9e:2f:1c:e5:19:24:94:ec:7f:5f:94:d2:49:46:
ef:c2:a1:14:7a:76:28:30:dd:9c:e9:1d:f9:b4:7d:d0:f9:df:
92:8b:61:a3:ff:e9:eb:41:43:2b:f4:2b:0e:ef:67:27:7c:de:
25:c5:4a:20:4c:4c:22:64:da:88:da:57:3a:c5:94:b9:f5:0f:
1c:a7:ad:46:e5:ba:3d:db:df:9c:2a:f8:33:c3:e5:a8:54:7b:
6a:88:38:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:42 2025 by rpki-client