Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: UYkBsFfglkILMX1O5NIxOuMv4KUd2qhVG6Lt6hGSMR0=
Subject key identifier: 29:5B:21:47:EE:5C:6F:FB:E0:07:34:E9:40:57:41:1F:6D:89:6E:67
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 0198D70579F5295463D43A4977C0511B0CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 1082
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: tyt5Zs0/dozV1xP87GrAUC0maN6kyVS4z43SE2BFr0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:79:f5:29:54:63:d4:3a:49:77:c0:51:1b:0c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=295b2147ee5c6ffbe00734e94057411f6d896e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:a6:d6:e5:80:be:61:b2:fe:18:b1:f7:b6:
69:b4:3f:92:9d:78:98:99:23:4e:6f:8c:38:68:9e:
8d:e3:77:de:71:45:4d:36:cf:f2:c7:6a:ad:6a:6c:
0c:75:28:38:76:bc:b2:12:10:8b:a0:dd:0b:b0:37:
15:f8:df:b1:8e:ba:f7:9a:68:37:00:c4:61:5a:ec:
cb:91:78:c4:71:ad:cb:d5:bc:9b:6b:bb:06:18:91:
a1:34:37:aa:d8:ef:ec:9b:5e:d8:55:b6:c0:d9:4d:
bd:c9:30:d4:5c:8e:85:2f:7e:21:55:ae:42:ca:30:
e1:c2:41:74:99:c9:a7:c5:c6:a5:4f:b3:a4:ba:cd:
38:e9:af:78:92:9a:a7:e1:b5:15:69:64:a0:22:50:
c1:cd:a1:5d:18:79:c3:8c:22:e7:e6:93:8d:17:21:
8a:f2:b3:05:cc:75:80:34:46:ef:21:b1:09:38:ac:
83:72:f8:c8:10:ed:0d:54:db:db:19:80:c7:8f:c9:
d3:d0:8d:41:c4:52:87:97:7a:1f:e3:cd:bb:35:b7:
33:24:fa:8d:4a:a3:54:3e:a2:21:01:e9:c2:de:b3:
90:26:52:f2:c8:f5:c4:be:14:da:49:58:d3:99:a8:
9c:a1:df:c2:8b:3e:9e:a2:7b:5c:7d:af:c7:bb:e3:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5B:21:47:EE:5C:6F:FB:E0:07:34:E9:40:57:41:1F:6D:89:6E:67
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:88:67:af:a9:b8:52:93:b9:b1:2d:f6:6d:36:a7:26:e1:
59:15:a4:6d:9f:8d:c0:a8:7a:48:93:65:3c:40:db:5f:f7:ef:
93:8f:11:ed:4d:e8:dc:8b:e6:5c:3a:70:3c:a1:e9:dd:4f:99:
ec:7b:c7:cf:78:77:f2:02:41:40:fa:b6:89:b2:25:79:ad:6b:
54:55:3b:a8:94:7d:bc:b5:48:76:8b:5a:19:d0:11:5e:31:25:
5e:0f:26:93:19:1f:f5:4c:c8:68:1e:bf:97:79:d8:d8:89:80:
6e:10:99:21:69:2e:67:1c:6b:07:c5:5d:7c:da:84:32:a4:88:
7e:aa:95:4d:db:5c:90:e7:29:84:70:4d:7d:ea:5e:81:5e:df:
07:8a:ab:b8:d5:a4:24:31:63:20:22:13:4c:1d:4d:8e:d7:64:
0f:d3:0e:83:91:5c:80:f3:c1:2a:d6:64:a8:5d:a9:78:a0:a2:
6a:97:b3:6e:17:d3:da:80:db:0d:bd:79:c0:bb:69:bf:1d:c3:
fb:fb:6a:2a:83:80:7f:56:78:96:9f:9f:1f:4e:78:af:50:83:
43:ee:06:2a:b5:81:c6:f8:4a:59:4b:79:43:10:f4:37:df:2c:
9b:4b:60:4a:d6:6b:62:7a:07:33:38:e5:27:b8:fa:1f:78:d4:
75:13:d9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:41:57 2025 by rpki-client