Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: Nx2uXG91AdNKk6Dtae0crRQQD4lHsJVTS8xDYv4Q874=
Subject key identifier: B8:05:66:96:E8:B0:AC:9B:88:D3:FF:CA:B8:F9:FD:C7:FB:72:98:FB
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 0198D7A913FB68F978A0C1CCBF25235A7C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0A85
Signing time: Sat 23 Aug 2025 16:00:38 +0000
Manifest this update: Sat 23 Aug 2025 16:00:38 +0000
Manifest next update: Sun 24 Aug 2025 16:00:38 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: aD+G1WElfibinSvShTezR5nJnxJz0JPysB4kStrpMY4=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:13:fb:68:f9:78:a0:c1:cc:bf:25:23:5a:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Aug 23 16:00:38 2025 GMT
Not After : Aug 24 16:00:38 2025 GMT
Subject: CN=b8056696e8b0ac9b88d3ffcab8f9fdc7fb7298fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:7f:88:df:3a:80:be:07:78:50:24:9f:6f:
ef:7e:24:f7:74:b1:35:28:14:db:10:65:eb:48:0a:
a0:a8:7b:3a:ef:d5:82:97:3c:ac:d2:44:8a:da:0f:
00:ba:b0:f4:22:78:1a:9f:9d:0b:48:1a:cd:33:bb:
18:8f:c2:7c:3a:1c:3a:b1:ea:d5:b2:a7:3b:bf:17:
3d:f3:bb:3b:85:02:a4:23:23:77:b8:ec:a3:82:55:
26:07:25:b8:44:8b:1f:d6:33:4e:c4:be:e2:5a:94:
8a:61:47:67:72:23:38:6e:80:82:25:da:6a:ad:06:
c8:b4:91:97:83:51:dd:63:9e:37:4a:1e:95:4f:5e:
b2:42:5a:d2:0a:ea:97:fd:bc:46:18:8c:9c:27:55:
72:cf:a7:a6:c6:a7:d6:f8:9d:3d:0f:3a:6e:7d:db:
da:02:ee:9f:b6:da:0b:32:c2:c3:c2:43:d9:e6:0d:
96:71:d8:cb:5c:c4:64:e1:5d:b2:08:c2:ea:b2:4f:
9e:a9:24:2f:d5:82:5b:1f:1c:a2:fa:f9:46:ad:a6:
cf:28:9c:e6:7d:9b:43:66:b4:67:04:72:f8:5e:0e:
8a:9c:2a:8e:f2:d9:f3:c9:3c:29:ff:05:2b:61:68:
d7:a9:9d:1d:b1:0f:26:6e:fb:af:1e:c7:66:18:06:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:66:96:E8:B0:AC:9B:88:D3:FF:CA:B8:F9:FD:C7:FB:72:98:FB
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7a:b1:c0:5f:7f:f8:81:e9:c8:75:a7:c7:90:12:90:0e:50:
e7:89:db:e1:83:4d:89:52:fc:2f:ce:9f:fb:71:93:c1:ec:c3:
37:67:3a:c2:bb:ec:35:5e:b2:c2:16:de:bb:f3:af:f7:9b:7a:
c5:14:72:89:89:10:d7:48:2b:f9:42:d5:37:94:95:6d:4b:9c:
7d:dd:92:af:c3:e2:8d:70:08:77:17:ec:99:ab:37:84:4c:0b:
e9:59:b2:74:2f:a5:c9:68:e4:3c:85:1c:61:17:44:76:5b:9c:
bf:78:6e:b6:9a:fc:1b:c2:1d:29:31:e5:79:cc:a8:40:e1:4a:
37:08:7b:73:bb:81:1b:71:00:5c:c7:98:0c:70:b7:52:c8:5f:
47:29:e0:1f:98:ce:df:17:ac:63:1b:81:2b:41:24:9d:6b:bf:
fc:92:04:ed:2c:ba:71:b7:00:33:ad:53:20:06:f7:6c:64:09:
01:08:d5:9f:30:9c:44:b4:37:fd:77:ca:5c:84:c4:18:87:8b:
60:eb:da:91:43:da:41:25:f1:fd:02:0c:d3:c0:7e:f2:f3:f5:
d5:a1:8d:bc:2f:30:70:7e:ad:92:da:21:cf:15:17:d2:15:0d:
c4:3f:97:7e:ff:3c:45:8a:6c:1f:c6:84:e8:60:9b:8e:b5:65:
c7:91:07:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqRP7aPl4oMHMvyUjWnx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTY5Y2M3OWQzYTBjNDljMjkxZmQ0MDdmYjJiZWRjMjNl
YTdhODkwHhcNMjUwODIzMTYwMDM4WhcNMjUwODI0MTYwMDM4WjAzMTEwLwYDVQQD
EyhiODA1NjY5NmU4YjBhYzliODhkM2ZmY2FiOGY5ZmRjN2ZiNzI5OGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1V/iN86gL4HeFAkn2/vfiT3dLE1
KBTbEGXrSAqgqHs679WClzys0kSK2g8AurD0Ingan50LSBrNM7sYj8J8Ohw6serV
sqc7vxc987s7hQKkIyN3uOyjglUmByW4RIsf1jNOxL7iWpSKYUdnciM4boCCJdpq
rQbItJGXg1HdY543Sh6VT16yQlrSCuqX/bxGGIycJ1Vyz6emxqfW+J09Dzpufdva
Au6fttoLMsLDwkPZ5g2WcdjLXMRk4V2yCMLqsk+eqSQv1YJbHxyi+vlGrabPKJzm
fZtDZrRnBHL4Xg6KnCqO8tnzyTwp/wUrYWjXqZ0dsQ8mbvuvHsdmGAakmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgFZpbosKybiNP/yrj5/cf7cpj7MB8GA1UdIwQY
MBaAFPDmnMedOgxJwpH9QH+yvtwj6nqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgt
OGRmNzFiYTAzOTE1LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xYThiMDYtOWZkYS00MTE1LWJlNDgtOGRmNzFiYTAzOTE1
LzEvOE9hY3g1MDZERW5Da2YxQWY3Sy0zQ1BxZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHqxwF9/
+IHpyHWnx5ASkA5Q54nb4YNNiVL8L86f+3GTwezDN2c6wrvsNV6ywhbeu/Ov95t6
xRRyiYkQ10gr+ULVN5SVbUucfd2Sr8PijXAIdxfsmas3hEwL6VmydC+lyWjkPIUc
YRdEdlucv3hutpr8G8IdKTHlecyoQOFKNwh7c7uBG3EAXMeYDHC3UshfRyngH5jO
3xesYxuBK0EknWu//JIE7Sy6cbcAM61TIAb3bGQJAQjVnzCcRLQ3/XfKXITEGIeL
YOvakUPaQSXx/QIM08B+8vP11aGNvC8wcH6tktohzxUX0hUNxD+Xfv88RYpsH8aE
6GCbjrVlx5EH8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:50:41 2025 by rpki-client