Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: hY7BJZJPX3Uv5KY3xFqLBMT6eOmP1+SITebtj3BUSEw=
Subject key identifier: 29:AE:73:E2:C6:CF:CF:2E:F4:1F:58:F7:C4:F2:B8:BA:26:BE:0D:FD
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 0197B6A2207F6A87BB1D176C3F573C38D35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 08A2
Signing time: Sat 28 Jun 2025 13:02:47 +0000
Manifest this update: Sat 28 Jun 2025 13:02:47 +0000
Manifest next update: Sun 29 Jun 2025 13:02:47 +0000
Files and hashes: 1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: wShTvZDZm8oI+nKGfCiV7KOWP0kRDsGgT0DETgGWIKk=)
3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
4: kMR-QfeDtCXrH6KaC8fd3q46UD0.roa (hash: 3G94bGBmGhHgTXEu5GeWzI4ZUQXww57vFy+evvpPr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:20:7f:6a:87:bb:1d:17:6c:3f:57:3c:38:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jun 28 13:02:47 2025 GMT
Not After : Jun 29 13:02:47 2025 GMT
Subject: CN=29ae73e2c6cfcf2ef41f58f7c4f2b8ba26be0dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:11:5e:4a:2b:b8:67:9d:2c:93:f7:e7:50:
74:86:8d:88:14:32:fe:0e:37:89:f0:c7:ec:dc:ae:
59:af:00:c3:a4:f0:7d:22:ef:28:ef:06:8e:2c:db:
7e:ed:44:ee:11:12:ee:2f:7a:f8:2f:ee:78:b1:ae:
9c:a6:8b:69:7b:cd:00:47:59:c6:47:fb:cd:37:51:
9b:4e:ee:5f:a0:2d:0f:b2:5c:ce:42:26:49:8f:27:
5a:b7:29:25:b7:2e:8c:25:2d:21:83:3e:94:b1:a4:
db:28:d8:46:75:80:0e:3b:46:ad:fa:8a:ee:84:e3:
87:d1:81:de:22:d1:4d:b5:86:39:28:70:94:ba:10:
d0:54:30:dc:5a:cc:8a:bb:67:13:d8:6b:26:5d:2c:
d3:2c:05:4c:40:64:a8:39:f3:14:59:9a:7f:ab:4b:
99:55:c2:6d:09:d0:f0:97:c9:7a:1c:54:33:f9:54:
68:6e:a7:3f:9c:15:62:84:b6:4d:54:14:d0:f2:82:
cd:e7:69:ca:ed:96:a5:c4:f2:e9:17:87:dc:94:8e:
c1:e4:65:14:95:c8:57:0f:0c:a3:6f:01:39:58:71:
2f:1a:50:a3:15:4e:19:80:48:fe:6b:8d:4a:ad:01:
f7:58:3c:9e:6f:07:06:dd:44:27:92:2a:8f:c0:08:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AE:73:E2:C6:CF:CF:2E:F4:1F:58:F7:C4:F2:B8:BA:26:BE:0D:FD
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:94:07:4d:b5:fd:f1:9a:04:16:a4:9c:2b:f9:ff:3b:a0:09:
d2:35:dc:38:50:a6:8f:f2:5b:a6:f1:69:c1:0b:59:41:85:5e:
aa:67:c5:a7:99:a7:40:a3:9a:60:59:79:e6:22:fb:33:91:f6:
7c:df:bb:a5:8a:07:f8:69:55:19:0b:99:59:c0:ec:55:11:f9:
b0:c5:63:dc:e5:9d:88:d5:a5:c9:18:ef:fe:8a:b2:63:ff:9e:
28:79:1c:14:c7:45:52:13:2b:e1:57:01:c7:16:ee:75:61:9e:
3a:16:d1:65:52:49:c2:7b:c8:f6:6e:11:e0:1a:c5:fe:82:b9:
82:dc:97:bd:fe:05:9f:5c:da:6c:b3:e4:a5:b4:60:1f:7e:17:
40:de:f9:66:72:cc:dc:19:56:14:b9:59:b4:39:0d:92:37:ba:
b5:53:74:15:3c:2b:a0:6c:e5:d0:84:00:60:3f:08:fe:0b:54:
a9:14:e0:cd:b0:aa:f9:a0:79:ec:b8:d6:67:19:a8:ab:e4:c4:
f3:99:86:c0:d7:65:5f:41:b2:83:08:58:11:74:45:2d:ce:38:
a6:78:52:db:fb:ef:95:35:8c:7d:bb:57:37:5a:e4:02:ba:79:
f1:57:21:a9:25:75:2f:3f:da:77:ef:5b:71:6f:cf:be:83:39:
d4:22:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:02 2025 by rpki-client