Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: 44urnXvs7rS3Dc+itxNt+/dt9X75vu6+vsh7yWnNz10=
Subject key identifier: 74:33:2D:12:F6:72:DF:F3:2D:34:88:C8:AC:DD:37:F7:96:2D:AF:2F
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 0197B745B5E9C6490CDB76A10CB6A3D405F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 0FED
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: vJaqHfgywQCyux5RTJ0TtrNUliWxTPFqyl6Q8Fan2Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b5:e9:c6:49:0c:db:76:a1:0c:b6:a3:d4:05:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=74332d12f672dff32d3488c8acdd37f7962daf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:b7:7d:db:ca:03:1a:34:a0:14:58:f2:43:
b6:ed:c4:50:87:97:e7:3e:49:a3:80:11:58:9c:e2:
62:c9:95:83:28:16:4f:3c:d3:35:8a:a9:c3:d8:6b:
9f:41:92:07:a2:73:b9:52:3b:b0:90:7d:ca:78:b1:
61:57:de:22:99:22:05:3e:3b:d4:1d:bf:f3:87:7d:
7f:95:ff:36:0d:89:22:30:7b:c0:16:54:6f:e5:dd:
7e:6d:63:e0:a0:47:65:99:78:a3:1a:01:97:7b:a3:
75:10:86:85:3d:ad:34:aa:98:f7:51:cd:16:40:eb:
f3:8e:be:1a:7b:63:04:0d:25:6a:73:be:c2:75:63:
ff:5a:cd:1c:77:0a:ad:fc:78:f2:f5:3a:4c:57:ee:
5d:9d:62:9d:6c:64:d6:2e:31:72:d1:85:b8:5c:ce:
0e:c3:5c:87:32:dd:b0:f8:67:fc:cf:b8:9a:d7:ac:
1f:d9:a3:12:70:7a:67:ed:af:88:d6:21:d0:8c:26:
3f:cd:58:a6:67:af:bf:b9:f5:2f:f2:35:3e:3f:fb:
63:4d:9d:6b:d2:7b:df:68:86:b8:2e:64:fe:6b:01:
0c:8e:93:a6:30:c6:8e:e7:79:20:0e:d7:b3:50:a1:
71:f4:57:b7:84:14:99:4a:d0:1b:94:d2:6d:37:ab:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:2D:12:F6:72:DF:F3:2D:34:88:C8:AC:DD:37:F7:96:2D:AF:2F
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:de:86:4d:54:04:d4:96:b1:d1:f4:26:86:2f:b5:23:60:7e:
6b:64:4a:2b:35:4d:a3:53:66:c9:71:2a:0a:be:39:8e:ac:19:
a7:ae:35:c1:8a:de:87:aa:3d:a5:ec:06:5c:3e:2d:b8:67:ee:
a6:74:33:77:26:e9:cf:b6:c7:f3:7d:7c:0e:c7:ec:5c:45:e8:
33:b7:13:c4:88:da:bd:28:34:b3:3f:81:d0:ae:b8:f3:ce:5a:
cb:05:02:13:27:60:4e:c6:22:ed:81:3e:11:89:e2:ee:73:dd:
ac:8a:8e:0f:19:04:b8:b6:a5:ed:62:0e:0a:ca:58:be:c0:55:
3c:98:26:6d:c4:42:b7:f3:51:06:55:4e:99:bd:70:dd:29:18:
38:a8:44:0d:79:70:ff:0a:fb:6b:78:52:d3:6d:db:a7:53:1f:
bd:ec:e8:35:c1:38:8a:27:b6:a8:28:5a:f2:d0:41:5e:28:46:
21:7e:d1:44:ea:af:91:4a:85:27:c1:d6:3b:13:d2:b1:b5:76:
14:25:4d:6b:2e:4c:26:c9:9a:0f:5e:73:0e:f1:ac:41:01:6a:
7a:f9:9a:c8:34:dc:36:84:b6:1f:26:44:03:17:7b:ca:34:9b:
da:aa:e1:e9:78:cf:58:ca:32:17:3b:b8:0a:fb:ed:67:ae:3f:
d5:54:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:23 2025 by rpki-client