Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: CSTkAMs9CtnWz+8/N3FKtoV6L1DhQf1+mnIHOXdLx5U=
Subject key identifier: 90:48:61:F0:55:26:8D:71:2F:0A:99:64:EA:7A:39:AD:B6:8F:65:12
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 019893A446D6184ADE6B41B0622CE0D3D9CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0CB3
Signing time: Sun 10 Aug 2025 11:01:13 +0000
Manifest this update: Sun 10 Aug 2025 11:01:13 +0000
Manifest next update: Mon 11 Aug 2025 11:01:13 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: CNV4vPHho08fWmhfD2C6nKp8snZK3XCjNUoF4y7gtuw=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a4:46:d6:18:4a:de:6b:41:b0:62:2c:e0:d3:d9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Aug 10 11:01:13 2025 GMT
Not After : Aug 11 11:01:13 2025 GMT
Subject: CN=904861f055268d712f0a9964ea7a39adb68f6512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:2b:1a:46:8b:18:58:5d:15:d5:07:63:c2:
09:61:82:55:fc:d1:bc:fe:63:5c:64:46:ed:3c:91:
8d:96:28:38:71:9a:7e:01:0f:66:4f:e1:85:35:04:
b6:39:a3:5b:71:f4:cb:23:98:a7:b2:7a:48:86:4c:
3c:3d:30:89:21:cd:e1:2a:8e:3e:f8:aa:59:23:a3:
cf:52:b6:0d:be:7c:47:c5:27:e2:95:63:2c:0e:bd:
53:ef:0e:6f:d5:8d:a1:91:c8:e3:a6:4b:ba:74:3b:
ed:88:25:3e:51:98:8d:d6:85:2f:5d:2d:99:a0:8d:
ee:78:33:7f:e4:e1:9a:ba:7d:42:c7:51:d2:f3:7a:
4a:29:66:d6:c3:b9:56:7c:26:45:43:7c:9c:71:f6:
36:c0:02:68:b8:fc:3e:ce:3f:ca:2a:58:0a:2c:de:
16:62:37:6b:32:9a:01:b9:53:b6:c6:4c:0b:ad:dd:
c1:a8:8b:37:5c:dd:a3:81:27:58:ad:3e:ad:de:67:
f2:9b:f3:17:98:c9:fe:cf:3a:4c:af:e3:ae:a3:f8:
e2:fd:cc:f2:e5:d3:aa:ff:ea:5c:4a:6f:d9:7e:a5:
7e:e4:12:58:59:98:b9:4d:00:57:1c:bf:84:c3:91:
e2:84:0e:81:4f:dd:1c:b3:6a:17:75:48:f9:2f:be:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:48:61:F0:55:26:8D:71:2F:0A:99:64:EA:7A:39:AD:B6:8F:65:12
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:91:06:21:7c:8d:a8:8c:80:c2:39:fa:26:18:c3:fe:4b:
ba:fe:39:78:ff:cd:ee:f8:df:6d:82:97:11:0b:69:f8:91:69:
89:90:31:67:f9:2c:3b:d8:48:42:41:c8:b9:cb:bf:a7:99:83:
ac:85:0b:fc:6f:12:c9:20:3e:93:6e:40:5c:fd:b6:e1:ae:3a:
bb:ed:d9:e1:56:ce:7e:5f:1b:a4:08:85:63:ff:52:98:68:cf:
da:a2:9b:73:99:2f:3d:26:de:83:3b:82:d4:c1:91:a5:48:86:
c3:9d:90:33:97:59:76:10:f8:fe:8a:3a:ec:52:04:b1:d6:96:
dd:4a:e8:0b:3e:3f:92:a9:57:bc:32:d2:f6:8a:a4:80:02:9f:
a2:db:6a:54:f3:5f:25:de:b1:29:a7:0f:b7:c5:b5:10:ad:a3:
f8:82:8f:56:5a:fc:0d:69:a5:a2:25:d5:2a:18:76:70:97:9f:
44:c1:b8:43:35:f1:64:1c:f2:10:ac:ff:fd:f6:f1:55:0a:35:
65:3c:7f:46:61:ec:d6:a3:0b:10:1f:66:7b:31:2f:e1:a0:b0:
7b:a6:4e:17:97:49:3a:c1:26:32:83:d8:4c:6c:f7:25:67:a4:
4e:f4:db:bb:d2:c2:cc:70:74:5e:06:ef:f2:80:91:2d:e9:46:
58:11:47:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:45 2025 by rpki-client