Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: Sn9kbB1qnEMbjpIVknicWMPqF8JdRlR7SAXFQ9Sa7mE=
Subject key identifier: 40:08:95:7C:6B:99:11:13:B3:52:B2:F0:9C:91:67:F2:86:2D:E8:18
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 0198D5BBD2FA5AFC81AA4CCE4C69D4D0B0E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 15E1
Signing time: Sat 23 Aug 2025 07:01:52 +0000
Manifest this update: Sat 23 Aug 2025 07:01:52 +0000
Manifest next update: Sun 24 Aug 2025 07:01:52 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: fYKvyftH7r9l5e5v3sb5lXoaRoqhH5ndSuPDo1GV6Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d2:fa:5a:fc:81:aa:4c:ce:4c:69:d4:d0:b0:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Aug 23 07:01:52 2025 GMT
Not After : Aug 24 07:01:52 2025 GMT
Subject: CN=4008957c6b991113b352b2f09c9167f2862de818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7f:19:92:57:d4:bb:f5:2c:83:67:a7:1f:a8:
0d:ac:df:82:d4:75:8d:72:a2:7b:04:8c:e4:27:67:
df:44:32:25:07:f8:d6:0c:47:45:dc:c8:bb:66:d0:
68:ae:f4:55:fb:cb:4b:35:ae:54:88:f4:f9:b0:02:
f0:67:1f:e6:c6:21:fb:78:03:77:83:c6:b1:68:fc:
18:c1:e2:ef:3a:c6:96:68:38:41:8f:c1:41:1b:54:
b0:e1:eb:b5:dd:f4:e7:01:a2:ef:46:82:9b:ab:74:
17:b1:60:3d:c2:19:f0:05:78:59:2b:53:35:82:7e:
bd:09:10:d6:12:ed:56:6a:da:9d:ba:ad:ea:99:45:
e9:7b:f0:24:22:1d:04:1a:f2:67:f0:60:aa:a8:7e:
51:4e:ea:c0:a2:5e:01:1a:1a:dc:80:87:b4:66:11:
90:2b:1a:df:d8:92:a4:ae:88:ee:7e:99:38:27:4c:
23:78:ec:7f:9c:17:64:27:8e:ec:88:b0:91:6c:49:
fb:42:b7:c6:5f:cc:b4:7a:5d:f8:43:db:6b:a7:47:
ac:7d:2b:da:c3:4b:44:5d:af:49:f7:bc:07:47:96:
dd:b4:8b:8f:a9:d3:32:39:96:8d:d8:77:12:9f:c4:
a2:d4:de:c4:f3:56:14:6b:2a:d2:1e:85:91:26:f3:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:95:7C:6B:99:11:13:B3:52:B2:F0:9C:91:67:F2:86:2D:E8:18
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:cc:06:47:18:41:56:cc:2d:e6:bf:24:2e:56:46:fd:ff:8a:
d7:75:17:8a:17:9a:7d:1b:3e:fa:ca:9c:8e:8c:b1:b1:bb:7e:
50:da:f6:42:ce:d1:dc:6e:30:11:62:ff:8e:55:cb:e3:f7:4f:
79:22:a1:a7:07:be:56:04:c6:38:7a:77:c9:81:74:d4:13:5a:
b7:0a:4b:b9:36:65:19:2d:02:32:e5:32:b5:46:a0:d7:40:c6:
c3:41:0e:c5:29:f2:5e:37:7d:ed:3a:06:56:47:44:6b:53:fe:
c1:7c:0c:e5:ee:a6:37:af:b8:f3:f0:1d:9f:17:0c:88:0c:2e:
f9:2b:1e:16:85:92:e3:ed:34:54:fa:c1:05:49:c0:1f:68:c2:
c8:b1:85:0e:a6:2c:e1:7c:20:8d:b6:91:d6:52:6c:85:85:2c:
cb:17:26:13:be:66:76:8b:f6:b2:de:4f:3b:92:0f:a3:90:4f:
d8:34:a7:57:5e:d0:47:23:b2:43:a7:6f:37:33:4b:97:a0:4f:
79:31:f5:f5:79:4a:46:69:17:a0:22:06:84:35:1d:77:b5:a1:
de:b3:c0:69:f9:1d:c7:f4:31:a2:11:38:18:a4:b7:d6:3b:5e:
2c:e4:2a:dd:ac:7e:36:21:d8:9f:12:1b:ff:ed:47:af:30:09:
da:5b:40:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:46 2025 by rpki-client