Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: k+pygx2GnhnaQebIkn7mC4VGm7HhlIxs1Z5B6ISehpc=
Subject key identifier: 64:9B:1B:77:B1:BF:92:B4:10:1D:F6:91:86:48:2F:95:F9:61:04:BB
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 019A006C68EC54CBB1380B84E711E16C99EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 111C
Signing time: Mon 20 Oct 2025 07:01:35 +0000
Manifest this update: Mon 20 Oct 2025 07:01:35 +0000
Manifest next update: Tue 21 Oct 2025 07:01:35 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: vZLlrZWlvWNbIvbT6EJbNdUOKniWkWBaUuWw0jZ5Asg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:68:ec:54:cb:b1:38:0b:84:e7:11:e1:6c:99:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Oct 20 07:01:35 2025 GMT
Not After : Oct 21 07:01:35 2025 GMT
Subject: CN=649b1b77b1bf92b4101df69186482f95f96104bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ad:69:b4:89:fa:52:0a:6e:5a:e2:1d:66:9f:
c1:32:93:f0:49:ab:77:22:bd:c0:78:db:d4:c2:ce:
5e:59:b3:21:8a:54:04:6e:5b:19:56:fb:06:7f:b8:
4b:48:74:b5:70:b9:97:a1:e3:76:06:88:a2:ba:36:
9a:cd:aa:85:ac:35:96:d2:2a:de:01:3b:bf:19:db:
cf:6b:4c:94:68:a0:17:9e:17:4e:89:51:f1:b6:d5:
cb:25:d1:27:a9:43:f1:d7:d2:d7:08:31:0c:df:94:
d6:a2:72:fa:dc:66:ab:be:2c:dd:0f:b4:71:b4:e3:
78:c7:4c:9c:00:00:87:b0:f7:67:70:db:da:9f:a7:
ff:39:09:0e:b8:f2:96:01:14:48:ea:8e:23:7d:f6:
88:c0:11:b6:ab:7c:46:bd:b4:b1:94:b8:d5:67:ad:
1a:bd:91:18:89:2d:00:bb:f1:28:a5:08:3f:e4:da:
85:25:da:70:02:3b:59:2a:c9:13:fc:20:85:96:68:
e5:4c:19:ba:1f:b4:79:ae:cd:84:d6:f9:73:83:8a:
2e:59:80:c3:49:3c:dc:99:5c:8d:cd:0d:97:89:8e:
4e:23:90:ef:64:64:14:ea:39:27:49:cf:cd:45:ae:
5f:7c:09:45:c0:3b:45:c1:8e:2c:c7:15:7b:57:8b:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9B:1B:77:B1:BF:92:B4:10:1D:F6:91:86:48:2F:95:F9:61:04:BB
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6a:28:46:cd:ea:8e:8f:9b:a7:7e:6d:44:86:be:cb:24:f0:
01:31:24:f9:48:8a:99:ec:53:74:63:1e:29:f1:ec:6f:f3:8c:
f0:20:f5:26:74:5e:33:e4:55:d9:83:18:66:a1:96:9b:48:08:
e7:23:e0:97:cd:0c:2b:54:ac:7e:21:c7:ac:74:53:51:a4:aa:
a7:56:f8:94:e2:ee:a5:e2:14:d5:8b:72:0b:02:45:e4:1a:db:
63:9a:ef:0c:91:4c:7c:2d:50:d9:b7:4d:2b:8f:07:17:5a:97:
b0:28:f7:bb:2e:a3:1b:f1:bd:ea:b6:cb:1b:ef:3f:81:6e:63:
5c:a2:da:ed:5b:09:67:8d:61:d3:d6:f6:76:16:0d:77:40:14:
d6:aa:26:c4:20:c8:ec:0b:25:cd:88:78:d0:e8:5c:e5:ba:92:
e7:77:86:50:31:74:05:64:ed:6c:05:72:2d:c3:91:48:c9:8d:
55:2f:2d:0c:04:0b:8c:fa:8b:71:3d:6a:79:fb:e6:06:68:b9:
3d:7b:fc:0e:de:f4:19:e9:22:c1:04:d8:9c:ce:e6:4a:58:69:
c8:59:22:3c:61:a3:7f:96:ca:62:41:54:b4:43:1a:e2:a2:88:
0d:39:43:75:55:32:12:f3:c9:d8:72:ba:96:d0:3a:18:00:e0:
76:cd:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:33 2025 by rpki-client