Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
File: ao7dovIciF--ZyhiGLgxjWrSOJY.mft (raw, json)
Hash identifier: R25YOLmjuhT/VGkWVFSOdMU9lJB5lmle7zyFpcHpdok=
Subject key identifier: 1C:E9:2F:5E:5E:ED:E6:B0:2E:28:08:37:04:D0:97:A8:E0:65:8B:F1
Authority key identifier: 6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
Certificate issuer: /CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Certificate serial: 019872CF424FCDD96D50166E07876D3ED73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
Manifest number: 08C7
Signing time: Mon 04 Aug 2025 02:00:42 +0000
Manifest this update: Mon 04 Aug 2025 02:00:42 +0000
Manifest next update: Tue 05 Aug 2025 02:00:42 +0000
Files and hashes: 1: 3raexFFj3tPstgifa_l8jJHkazQ.roa (hash: tJRmWB+nxgvOJkVjhkrY7i53nGolZQoscv3aKM9NJDk=)
2: SsPMfuLYiptAn1KbqNePMw_A4VY.roa (hash: s7uhDyPNR/o8+HrZcEPeZiMphtLlmdxbZNwJprWhgdg=)
3: ao7dovIciF--ZyhiGLgxjWrSOJY.crl (hash: jEislWTpvvnAoO09UUCZ/trv8bN3aPefzA/l+cqfAW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:42:4f:cd:d9:6d:50:16:6e:07:87:6d:3e:d7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8edda2f21c885fbe67286218b8318d6ad23896
Validity
Not Before: Aug 4 02:00:42 2025 GMT
Not After : Aug 5 02:00:42 2025 GMT
Subject: CN=1ce92f5e5eede6b02e28083704d097a8e0658bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:8c:76:11:7e:d9:3b:69:63:f0:3f:f9:ee:
c5:a3:50:04:6c:c8:ee:29:8d:02:aa:95:24:70:6a:
a9:b7:33:a1:98:45:6c:88:51:44:f7:d9:c5:bd:b9:
08:ec:0d:ab:2d:3d:83:45:42:a7:0c:b3:43:32:91:
e0:62:15:e9:09:b0:24:43:5e:df:51:74:d8:cb:bd:
4e:45:e8:b4:d1:45:47:1f:30:4f:63:d7:ea:e9:b6:
0b:ee:f6:f2:68:c9:07:ae:89:9f:0b:33:1f:e3:a4:
14:40:18:39:21:21:fd:5e:49:4a:cb:a4:a0:98:a3:
8f:42:10:0b:cc:b8:99:95:68:14:8b:4d:0f:01:cc:
82:ec:59:20:5e:74:8c:93:82:c6:e7:a8:3d:90:42:
a0:2f:06:a4:7f:6a:be:ee:d4:99:dc:05:ba:af:bb:
dc:c5:30:31:12:02:49:72:48:e7:8d:a0:12:ea:ca:
6e:b0:c2:76:bb:5f:c5:7c:2c:c5:6a:2a:b9:79:f7:
c5:50:3e:a3:aa:62:13:34:4c:ee:78:77:99:2e:1a:
06:2e:d1:cc:05:e3:d2:2b:38:6d:1b:57:da:48:2c:
a9:79:cb:2f:6c:95:4e:93:d9:dc:52:51:0b:ba:60:
f1:e5:0e:2d:48:b7:c7:f6:14:3a:7a:75:1f:ca:90:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:2F:5E:5E:ED:E6:B0:2E:28:08:37:04:D0:97:A8:E0:65:8B:F1
X509v3 Authority Key Identifier:
keyid:6A:8E:DD:A2:F2:1C:88:5F:BE:67:28:62:18:B8:31:8D:6A:D2:38:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7dovIciF--ZyhiGLgxjWrSOJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6db797-a3d3-4241-903a-0c66840198d0/1/ao7dovIciF--ZyhiGLgxjWrSOJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7e:79:6e:2e:06:1e:0e:cb:ff:57:1c:d7:30:5e:ae:c3:b2:
e1:bd:35:74:07:25:2b:ee:29:9d:0c:50:0b:72:13:68:df:ba:
69:24:19:19:3f:17:89:82:ff:8a:71:5b:3b:d1:bc:30:b1:71:
7b:fd:42:6c:f2:49:b2:bd:e1:90:26:77:fd:46:10:09:1f:51:
c4:10:48:74:e7:63:6e:bc:8b:34:1b:5b:a6:4f:8e:38:b3:d0:
42:8d:96:2c:d0:64:a9:38:a3:29:0d:60:47:ca:fd:a0:64:8a:
38:06:de:e1:30:ac:70:f3:48:1e:51:22:c8:92:b5:9f:16:a2:
88:58:84:1d:06:59:89:10:87:d3:b3:9f:a9:dc:9a:64:45:57:
05:a8:70:84:7c:20:af:3c:0b:ed:a0:1a:c2:d5:48:37:1d:cf:
64:31:0d:d3:78:ec:13:f0:da:1d:e2:a6:b3:19:a1:4e:41:5f:
f9:28:16:84:93:61:be:20:41:f5:b4:77:0d:e9:a0:a2:31:88:
55:94:cd:a4:29:61:b8:c5:84:4a:11:e9:7c:2c:5b:5b:2f:71:
50:88:15:34:5d:5a:8b:9a:ef:52:c4:40:e2:97:74:91:f4:ea:
63:88:87:80:fd:24:0f:c2:31:46:d5:69:2b:90:36:73:1f:09:
45:be:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:43 2025 by rpki-client