Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
File: xMO8BapSq5610YT1CInx_wyQzng.mft (raw, json)
Hash identifier: 2+7MjQikyeOoL1gvA0eJoGpUNgWuoT/s3xRaNoOE3XM=
Subject key identifier: AD:D8:8C:45:9A:56:05:BD:61:3D:8F:DE:F2:74:C9:ED:52:A8:FE:B4
Authority key identifier: C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
Certificate issuer: /CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Certificate serial: 0198D4E0D6F316F66E5985BE6FE454612560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
Manifest number: 0CB0
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: 3Krd3X8gM6K6uQN1pZPs1zNdYR4.roa (hash: fGcfj1MLOHaxsx+wYEI+CaMKulrmVPv7+yNp06XKMSk=)
2: xMO8BapSq5610YT1CInx_wyQzng.crl (hash: EozFFuzXTNdR+cZ1xjbyVzBENI9/I9Vc6cX3JEjIisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d6:f3:16:f6:6e:59:85:be:6f:e4:54:61:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4c3bc05aa52ab9eb5d184f50889f1ff0c90ce78
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=add88c459a5605bd613d8fdef274c9ed52a8feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:45:6c:7d:60:5a:8b:e6:b0:76:7a:10:8f:
af:0d:ab:77:f9:06:a6:d0:8b:bd:1b:ca:d1:55:9f:
6d:83:d6:00:f6:5d:e3:db:99:02:8e:54:38:ec:c5:
10:56:00:3a:fb:57:57:ac:17:ab:ef:68:ef:ec:09:
b9:f5:e6:aa:66:44:e7:47:45:d6:08:e7:d9:cf:0a:
53:12:b4:a8:62:6a:a1:25:dd:21:e6:45:7c:c2:5f:
2d:c6:2d:cb:a9:22:16:5e:81:6b:80:9a:81:0d:aa:
7b:06:c4:a6:ee:af:84:6f:f6:1f:30:f5:15:8d:cc:
3a:e7:17:c6:de:5e:6f:45:b1:5f:c3:a7:99:4a:73:
97:95:52:e6:d6:f4:e7:54:0b:5f:4f:5a:5e:76:5a:
b7:0f:e3:e9:d6:75:c9:48:b0:a9:c7:a6:b1:b3:46:
a9:23:59:fc:dd:a2:82:df:da:42:a1:e6:fb:74:c2:
7f:1c:46:62:c0:89:5a:d9:4e:f7:b1:78:a1:c5:f0:
63:b5:1a:03:93:c6:08:80:25:2f:bb:fe:09:65:19:
88:b9:3a:af:c3:d4:4a:a5:93:01:af:75:5f:3f:31:
58:34:de:66:92:1c:48:61:aa:71:64:8e:8b:ff:f1:
8e:f7:91:b3:0b:69:98:ef:2f:af:c1:b0:ae:44:cc:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D8:8C:45:9A:56:05:BD:61:3D:8F:DE:F2:74:C9:ED:52:A8:FE:B4
X509v3 Authority Key Identifier:
keyid:C4:C3:BC:05:AA:52:AB:9E:B5:D1:84:F5:08:89:F1:FF:0C:90:CE:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMO8BapSq5610YT1CInx_wyQzng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d237fa-b105-432e-83cb-6d35b7956fce/1/xMO8BapSq5610YT1CInx_wyQzng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1c:67:c3:d5:2d:38:27:00:7b:20:a0:f1:85:76:40:5a:d0:
bc:cf:21:2c:0d:6c:55:90:11:28:cb:d1:e7:8b:a2:03:4f:93:
af:95:0d:16:34:86:f5:6a:10:be:bf:72:5b:ae:c7:be:1f:12:
eb:27:8a:40:01:b6:eb:4f:55:b1:ff:96:8b:41:41:01:a9:6f:
4a:bc:db:5b:b2:37:89:13:9e:4e:e8:3c:65:a8:8a:97:bc:cf:
9b:68:2e:73:5c:77:07:5a:12:cd:2c:80:9d:ef:e2:ea:f4:5e:
a9:e9:57:7b:19:12:51:ef:7a:e8:e5:76:54:6f:d3:f7:e9:24:
03:5c:e5:88:41:d4:11:06:c9:55:59:2b:60:cf:15:8a:3c:34:
99:ad:9c:91:d7:d5:68:90:67:89:ff:d8:94:58:5f:b5:4f:52:
70:f1:15:e7:dd:d8:16:53:9f:34:3a:99:c1:64:c3:05:fb:ee:
f6:b2:c8:2f:bb:2d:77:54:54:79:97:8e:c1:23:e3:d6:eb:7f:
ab:76:ae:78:87:df:33:3d:4c:68:3b:5e:9d:03:34:1b:8c:3a:
da:ca:3f:73:b5:ee:ae:9f:79:da:59:3d:72:69:ce:c4:c5:ee:
4b:f1:ba:c0:2a:37:72:0b:c2:a7:14:12:e6:76:80:cb:c7:cf:
5f:f6:2b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:09 2025 by rpki-client