
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: 6BoU4DtrAsJGIgGzbipxQLKofCWnsQEdh904UMO3Kh8=
Subject key identifier: 90:B7:72:CC:36:9C:44:4E:D5:B9:31:A6:8E:89:AA:27:CE:16:0D:F6
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 01987450A2AFB002078072D4F2C2958F9CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 0F2E
Signing time: Mon 04 Aug 2025 09:01:37 +0000
Manifest this update: Mon 04 Aug 2025 09:01:37 +0000
Manifest next update: Tue 05 Aug 2025 09:01:37 +0000
Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: mNKM4CzqV+DyLDcAyH4Q9wRkOPxyUKEBTkkU1l2Gym0=)
2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a2:af:b0:02:07:80:72:d4:f2:c2:95:8f:9c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Aug 4 09:01:37 2025 GMT
Not After : Aug 5 09:01:37 2025 GMT
Subject: CN=90b772cc369c444ed5b931a68e89aa27ce160df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:62:f2:da:9c:28:b0:81:75:c1:37:6e:cc:a7:
0c:71:31:b3:97:90:3a:30:10:1a:53:9d:73:10:4f:
07:34:00:d7:32:4b:3b:77:ea:38:2c:dc:dd:65:88:
4e:d6:6c:01:e5:18:a0:1f:5a:f4:21:7b:2a:18:13:
0c:4e:16:e9:b4:b9:e8:66:f6:94:44:7e:0a:fa:96:
6a:d8:31:d9:a1:fd:11:68:ad:4a:6f:f3:75:1c:68:
1d:e3:3c:f0:99:97:85:1c:3c:c1:b9:06:97:23:4e:
03:e5:5f:89:f4:70:b9:d4:39:ab:cd:fb:ec:73:f4:
ee:10:c0:64:81:ee:fc:53:19:8c:84:af:f2:3a:92:
c8:01:70:57:32:81:4a:ab:eb:1f:aa:36:3b:27:d9:
58:a2:55:ee:22:04:a1:ed:73:c0:3f:df:98:02:dd:
62:4f:50:39:72:11:b1:ee:b9:a6:95:2b:1c:7f:74:
f1:bd:e4:35:43:cd:e6:d4:93:2e:39:54:49:37:c0:
09:18:31:cb:39:f9:e1:97:c1:2f:8e:7c:99:93:31:
c6:fc:d2:97:5f:6b:f7:90:d8:2f:74:83:e2:93:0d:
dc:72:20:43:0e:03:c3:7d:50:15:80:79:9a:c5:fe:
a6:ad:b8:6e:69:5b:5e:03:2c:66:91:17:c5:f6:a9:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B7:72:CC:36:9C:44:4E:D5:B9:31:A6:8E:89:AA:27:CE:16:0D:F6
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:12:e8:74:77:99:88:57:92:79:c3:07:6b:e3:0f:4c:ec:01:
92:ff:94:47:b4:75:b1:e3:11:f8:5a:e3:9c:04:c7:cc:17:08:
88:fd:6a:1b:f7:f4:8e:2b:28:62:1d:3c:6b:8f:87:2d:3a:c6:
14:bd:2f:b4:9b:38:07:19:57:c4:9d:71:a5:15:89:d3:4e:8d:
18:1c:62:c0:93:eb:ed:34:0d:1f:a3:af:71:e3:a7:d5:5b:79:
9d:5d:f8:98:eb:4c:7a:09:ac:47:28:a2:38:55:d6:5d:f7:b8:
5f:b6:42:29:88:95:02:70:ee:fa:3b:91:a2:39:98:7c:8f:a5:
1f:fe:52:83:81:96:0f:42:06:ef:c6:66:e9:a1:46:68:1a:c9:
fe:99:d5:67:8a:27:36:5c:8f:15:c8:38:82:57:ec:98:5f:0c:
04:34:c7:34:4d:b5:13:ee:3b:e8:ee:ec:af:58:23:4c:44:e7:
d2:cd:2c:64:92:ec:85:36:de:43:bd:32:29:ca:9a:b3:da:0c:
f8:ae:19:46:5a:10:12:8f:76:6c:69:27:b1:f5:e5:62:1e:d0:
90:c0:f7:be:78:9d:ad:4f:a7:7a:48:8e:e4:72:f9:8b:95:08:
79:65:ed:0f:66:f1:6e:66:47:8c:ba:56:a0:bf:94:ed:24:03:
2b:5c:a1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:06 2025 by rpki-client