Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: xHz9+Z9EFy4/hfPi/SB0jf7BPlVtx5zx7QxXLdO07dk=
Subject key identifier: 0B:95:87:B0:DA:70:64:AC:DB:E7:6E:DA:DF:31:3E:78:EC:AF:48:08
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 0198819E242BF66FD7BF53C41ADAA403C5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 49
Signing time: Wed 06 Aug 2025 23:01:21 +0000
Manifest this update: Wed 06 Aug 2025 23:01:21 +0000
Manifest next update: Thu 07 Aug 2025 23:01:21 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: NsSDrjGmKzcrWfY1dKJSPzBVYh717iI2GqErbnzZpTE=)
2: O1NX1SHolf4Je2aEzJJZvHyU16A.roa (hash: po5PkDRV33bzHbue9Doph6bDM4MKCS5aDFumD95q9kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9e:24:2b:f6:6f:d7:bf:53:c4:1a:da:a4:03:c5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Aug 6 23:01:21 2025 GMT
Not After : Aug 7 23:01:21 2025 GMT
Subject: CN=0b9587b0da7064acdbe76edadf313e78ecaf4808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6f:67:ea:0b:05:ef:e5:10:2b:3f:6f:b1:87:
57:74:a8:9d:60:cd:a4:0e:0f:67:ce:78:8e:d4:bd:
e5:9c:9a:5c:62:cb:f4:7c:84:a5:6f:2b:df:c2:cd:
b5:68:d9:07:bc:ca:b0:20:ba:57:8f:13:0b:ed:ec:
43:fe:29:ac:ae:cc:53:5f:bf:a8:98:ed:8a:6a:25:
cb:10:ac:02:f7:a6:d4:e1:02:10:30:8e:1a:eb:61:
c0:5f:08:97:d8:0e:58:37:f9:95:59:b4:dd:44:35:
1c:f2:8c:fc:5f:4c:97:3f:2c:5b:51:a6:9d:0e:2b:
a2:0e:cd:5a:1b:ef:6b:f3:e9:c5:f0:7b:4f:7d:fa:
02:a0:1e:79:07:5b:e3:01:48:3d:71:35:fd:9b:d5:
30:88:79:80:dc:48:ad:a2:44:9e:15:c5:5e:f3:cd:
5c:b2:08:9e:0c:33:c8:0d:86:7e:36:da:54:1f:93:
35:74:4d:17:98:3e:6a:fe:65:cb:f9:3d:aa:b9:43:
57:3a:8e:8e:27:26:32:a6:78:23:19:99:21:63:5e:
24:fd:f4:6d:4b:89:0d:7a:2c:d3:7a:0e:eb:99:a2:
0f:ae:f8:ee:4f:bc:ee:16:5f:77:35:b5:fe:ba:f3:
ec:39:c6:d0:9b:9a:d5:e7:ea:8c:74:88:4e:6b:bc:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:87:B0:DA:70:64:AC:DB:E7:6E:DA:DF:31:3E:78:EC:AF:48:08
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:a0:63:b6:39:fa:cb:a5:94:45:24:79:cb:d7:af:dc:23:
e1:41:42:88:a8:77:ac:72:06:e9:9d:52:7f:80:77:f7:30:90:
f1:ab:2e:65:3d:8d:2a:0b:36:34:f2:ad:1f:e6:5a:8f:4e:53:
f4:1b:0f:0f:26:f7:76:00:3f:07:33:e2:12:c8:ef:ec:ed:ea:
11:56:4a:14:e2:78:48:bc:26:16:0b:fc:bc:3e:66:33:19:12:
d9:8e:8f:e6:93:ac:b9:23:fb:80:2f:6a:72:c2:3b:f6:b2:fb:
15:0f:a3:e7:12:25:f8:49:f9:9a:9e:84:0f:68:f4:1d:42:3b:
99:01:46:e2:50:5a:54:3e:76:06:1b:40:51:5f:ae:8a:ad:c8:
1c:74:83:51:27:0e:87:a2:21:e1:51:f1:f3:92:88:fd:4f:a4:
58:e2:a6:20:18:b6:81:f7:bf:8c:df:4b:e0:e6:52:86:86:b4:
f2:7d:69:04:04:3b:4f:82:27:7a:80:a5:7b:1d:b9:50:de:28:
64:2d:70:71:ef:45:b7:3c:b9:af:35:b1:70:89:66:63:ce:38:
2b:16:7e:1e:98:4a:9a:c6:6c:43:1a:e9:b2:f5:47:73:6f:a3:
5c:c3:f7:f3:d9:b9:9c:15:c9:80:b6:88:3e:44:4d:82:28:63:
4b:bc:58:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:24:48 2025 by rpki-client