Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: cmkl4z968eqYdV7u445Zn9FbUijewUAC4yhNrLKCSl8=
Subject key identifier: EB:55:96:5B:6D:88:34:B4:FE:F5:05:23:ED:EE:85:C4:94:BF:CB:77
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 01989CDDE71258458D43B04D8807D206A7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 10B4
Signing time: Tue 12 Aug 2025 06:00:44 +0000
Manifest this update: Tue 12 Aug 2025 06:00:44 +0000
Manifest next update: Wed 13 Aug 2025 06:00:44 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: ElgrXKHZA1jw7wGuVUmzxzdkMm6tIfS0cpFiXps/Tvs=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:dd:e7:12:58:45:8d:43:b0:4d:88:07:d2:06:a7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Aug 12 06:00:44 2025 GMT
Not After : Aug 13 06:00:44 2025 GMT
Subject: CN=eb55965b6d8834b4fef50523edee85c494bfcb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:eb:48:6e:c6:81:9b:84:3b:f4:ea:a8:73:e7:
1c:0f:04:2c:66:46:09:6a:69:b3:bb:bf:37:af:66:
de:26:9f:b5:d7:6b:3d:b8:90:cc:2c:88:13:da:e1:
06:57:56:9e:5f:5c:a6:6c:d8:82:c3:b2:96:73:a1:
f0:a5:ea:47:8a:d6:ca:26:f1:f3:d1:28:8a:91:89:
13:cf:ff:af:e5:85:82:c5:88:1d:81:27:79:fe:84:
28:9d:6e:3c:a1:ab:8f:05:e3:62:19:d4:51:53:07:
65:d2:60:c5:81:11:a5:7a:a8:5d:ad:db:d3:ba:28:
1c:81:16:cc:28:f7:4e:e9:aa:bd:3b:db:e2:5e:25:
e4:be:06:5a:28:48:38:ed:ad:90:2b:65:67:f7:51:
de:76:e8:72:d0:7f:95:3c:6b:77:57:6e:92:c0:34:
77:50:35:be:98:e5:15:d4:0c:24:d8:fa:b3:65:fc:
94:65:cb:39:09:d7:4d:1b:29:3f:a5:08:cf:6a:68:
f0:e6:32:51:b0:04:e8:d8:33:2f:80:bb:2e:ff:09:
a8:5a:56:02:9f:27:1b:22:46:30:c7:bf:7c:3f:94:
b7:7a:6c:eb:46:29:fd:d0:2a:8a:32:5e:6d:1d:b2:
8b:e3:65:ed:19:d0:64:0c:f7:5e:c7:66:13:51:89:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:96:5B:6D:88:34:B4:FE:F5:05:23:ED:EE:85:C4:94:BF:CB:77
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:54:8b:1f:bf:f3:fe:4b:3a:bb:0e:71:1a:4c:a7:e2:40:4f:
d0:04:d2:ab:d2:5e:8a:43:a8:73:c8:e2:96:56:88:f1:fc:32:
6a:8c:86:5c:02:3c:4d:2d:a5:5d:be:54:bb:47:26:68:cc:96:
b5:b3:b5:61:78:a9:cb:eb:21:ed:28:06:f5:19:2b:b8:79:3b:
93:2b:a7:ea:b4:9d:95:f4:8e:8e:c4:02:2f:f9:a4:5e:ba:bb:
33:6c:86:33:08:9c:16:25:f5:27:fa:85:8a:de:11:4e:65:b5:
fe:98:53:25:17:85:9e:04:24:56:6b:91:8d:6f:3e:3c:f8:87:
ea:0f:26:d0:74:e3:37:1f:df:d3:f6:68:c5:a2:48:95:d4:17:
5b:5c:ec:1e:1f:da:1a:3f:51:c0:e4:fe:7a:77:16:17:6c:25:
10:7d:4e:d1:8f:17:57:27:44:59:33:41:7e:fe:83:65:ce:90:
8c:c7:38:05:b1:20:23:96:1a:bd:7b:6a:61:38:14:0e:ab:7b:
0b:d9:45:66:a3:e4:85:a6:16:70:fe:8c:5d:35:77:23:81:13:
e1:33:b0:77:2c:1d:47:54:4b:93:cb:58:a7:45:8a:bb:2e:7b:
f8:4c:e2:80:5a:b3:b7:94:0c:b3:b3:02:80:52:84:28:1c:18:
c0:ba:64:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:20 2025 by rpki-client