Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: wjEPpsLCI1CARWLZ9k+otqN4BEp1lYIA4iVbmnMcG6c=
Subject key identifier: 7C:70:B6:DC:36:51:9F:28:4D:06:29:81:52:5B:D4:C0:D9:96:73:65
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 01989780EAE5E2CE7B21B3051AF506AD0615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1628
Signing time: Mon 11 Aug 2025 05:01:04 +0000
Manifest this update: Mon 11 Aug 2025 05:01:04 +0000
Manifest next update: Tue 12 Aug 2025 05:01:04 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: cfC1uxUclS58/vppYBMxtgOUp/QEtWlUHC2ChkJZvkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:ea:e5:e2:ce:7b:21:b3:05:1a:f5:06:ad:06:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Aug 11 05:01:04 2025 GMT
Not After : Aug 12 05:01:04 2025 GMT
Subject: CN=7c70b6dc36519f284d062981525bd4c0d9967365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:80:3d:f1:12:10:76:b1:15:eb:96:8a:06:5a:
3b:e7:0f:67:62:25:13:bd:76:9f:22:c3:63:47:16:
b4:e2:de:0b:48:45:8e:b3:d3:fd:5e:ce:97:2d:0e:
bb:46:16:f0:8b:91:a2:bb:ed:4b:40:63:7a:e0:33:
07:dd:d9:0b:98:da:5b:70:66:62:34:c0:97:2f:59:
c2:c5:b7:03:ba:a6:bd:e9:c1:09:a7:26:ed:32:ca:
fe:96:8d:77:08:98:a7:75:0f:23:fe:fb:ee:14:0d:
2f:63:73:22:ed:88:61:74:94:17:a3:5b:73:1c:b3:
2f:70:c1:a2:37:aa:74:a7:56:63:08:53:7d:23:af:
1f:08:ba:4e:9a:c4:99:2f:bb:0f:15:80:a6:03:fe:
90:03:ed:16:81:2f:fb:c5:81:b8:6d:c9:6f:c0:3e:
fc:d4:24:42:3b:03:26:d9:59:31:4a:f8:8e:d9:c6:
3b:ff:48:5d:58:fc:33:a2:52:7d:a0:5b:55:15:0b:
90:eb:e3:8b:57:0f:82:b4:4d:ff:3e:49:2d:cc:87:
d2:d5:bd:51:2f:60:be:25:90:44:16:a5:d6:8b:5c:
66:77:56:4f:1c:68:df:f9:b4:a9:82:b8:dd:23:a8:
07:2c:27:76:98:1c:be:d7:04:d5:cb:6a:08:c8:fe:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:70:B6:DC:36:51:9F:28:4D:06:29:81:52:5B:D4:C0:D9:96:73:65
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:dc:11:ea:90:6e:26:82:e1:0c:b4:d4:a8:da:eb:6b:b2:1a:
4d:12:2c:3d:58:c1:09:a4:95:a5:b1:1d:11:e8:0b:96:e2:9e:
2b:55:44:22:cb:43:45:cb:e0:16:b7:86:bb:cc:2e:6b:24:36:
f0:4d:9e:1d:c7:c3:7c:7b:9e:3f:94:c9:83:97:4f:cf:e8:0e:
24:7f:64:67:62:bd:76:b4:d1:88:13:29:5c:41:d9:01:83:27:
ae:9f:5c:d6:f1:26:5f:78:bc:8b:19:f5:c2:98:89:78:89:9d:
a4:6d:f5:11:3d:a2:fd:66:38:73:2e:1a:52:da:dd:5c:20:1d:
4a:d7:d8:3a:9d:a6:0e:18:ab:74:eb:8c:d8:d0:ef:ac:7e:06:
b5:df:8d:6d:5f:16:07:93:e3:d1:e2:8b:9c:da:d8:92:9f:cf:
90:d1:7e:06:f1:0a:b4:b1:6e:20:02:e2:73:a3:e9:3f:a8:90:
c5:c0:9b:9c:e4:7e:91:43:48:86:b6:9c:63:f9:e5:51:f9:33:
29:4f:0b:26:20:a5:41:4f:8c:6e:06:9d:c9:74:37:e5:96:da:
d6:05:65:ab:b9:2f:eb:9c:94:73:d1:4a:d1:b4:fb:a7:2b:49:
3e:9f:30:e8:3c:cc:30:79:97:34:a1:d3:65:84:1b:90:c0:ca:
18:95:de:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:39 2025 by rpki-client