Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: SgnJgTpG3lW6Yw1+WR++1gX6n5yXGrrf4YaVWV4dy+M=
Subject key identifier: 7C:D9:30:7E:B4:9C:28:52:AF:31:76:02:D1:5D:D8:FB:BE:0F:28:27
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01987DF8545CB50048519ED577E46A2C149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0A75
Signing time: Wed 06 Aug 2025 06:01:23 +0000
Manifest this update: Wed 06 Aug 2025 06:01:23 +0000
Manifest next update: Thu 07 Aug 2025 06:01:23 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 9lyvCKBXmfASdyvBPsYDI2CaQ6ZaL5EZWa/CavYt9EE=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:54:5c:b5:00:48:51:9e:d5:77:e4:6a:2c:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Aug 6 06:01:23 2025 GMT
Not After : Aug 7 06:01:23 2025 GMT
Subject: CN=7cd9307eb49c2852af317602d15dd8fbbe0f2827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b5:ac:cd:ba:9c:0a:e2:6f:ed:1a:72:27:28:
b1:a9:c4:56:b5:0e:66:9e:42:d5:c7:22:79:03:90:
98:9e:0e:a9:5c:5f:41:e0:1d:75:c0:6b:7c:99:4d:
c2:18:33:ed:8a:c9:e0:1e:68:d4:59:49:d3:0e:64:
0d:1e:43:d8:68:53:45:9c:7a:4c:50:b0:50:33:72:
bf:d2:68:ad:e7:0f:75:39:eb:1e:77:59:e6:11:0a:
75:b3:c7:2d:f8:a7:c9:ef:1f:66:5d:c9:96:8e:3f:
1c:18:26:7a:41:09:f2:e9:fa:15:8b:3e:09:9b:da:
db:cf:79:d0:43:3a:1c:10:72:b7:4b:c1:ee:00:8f:
44:1f:e5:3e:7e:c2:d1:c1:1d:5b:16:94:9e:b6:b0:
f5:f6:fb:0f:14:7a:4e:fa:46:df:a0:1a:02:8f:7f:
aa:ef:24:a5:22:ea:46:17:a2:06:ca:f7:04:18:c3:
9e:57:cc:7f:dd:82:f5:f9:18:c8:cc:f1:60:d3:df:
39:40:df:f7:2c:d0:68:a4:b7:7c:91:fa:00:31:4c:
f9:c7:15:2c:b3:27:8f:49:68:e0:a4:03:87:55:fe:
3f:70:b1:c2:60:fa:3f:0b:99:02:29:f8:07:e2:70:
bc:a6:36:1c:d3:82:f9:bf:dd:6b:65:83:50:ca:52:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D9:30:7E:B4:9C:28:52:AF:31:76:02:D1:5D:D8:FB:BE:0F:28:27
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2b:63:e4:b3:b8:4c:5a:ac:56:1c:39:e2:c3:60:7e:46:ef:
5b:5a:60:7d:f6:07:37:5b:0e:09:c8:72:d2:c1:75:be:46:aa:
4a:40:e8:e7:c1:2a:aa:fd:02:e6:03:ea:d8:7a:a8:9a:c2:2e:
8e:26:11:85:c6:09:2f:11:ef:e9:88:ea:cc:a8:2d:bc:0e:90:
f2:fd:41:87:68:c1:5a:6e:b4:55:62:0f:10:dd:e0:60:3f:b5:
d1:a9:cc:b6:c2:63:f8:03:a8:c0:f4:bd:17:58:36:59:d2:4c:
c4:84:6d:2c:37:fc:c5:54:98:ce:74:85:80:fc:46:b3:51:10:
e8:09:5a:54:d3:77:c9:c8:e7:bc:96:63:eb:b4:c5:62:95:9d:
6e:8b:f5:98:7e:f2:b6:8d:36:78:94:20:ef:41:1c:3c:56:0d:
5c:30:5c:11:19:20:f1:53:c4:24:94:0e:c0:11:8f:8b:a6:1f:
97:04:9c:dd:5b:dc:15:bc:fd:a3:30:e1:f4:6d:eb:b1:5e:b3:
96:79:87:a5:67:87:fc:93:c6:56:e6:94:f1:16:82:49:2d:28:
a4:07:81:e0:58:69:63:3f:05:f6:bb:e9:91:ad:37:09:b1:fb:
9e:d9:c3:48:50:cd:ba:f0:c9:47:f9:1c:df:aa:30:58:f4:4c:
c2:34:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:37:43 2025 by rpki-client