Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: GFSjJsmgwKrRhRkTYyFwnOjjMyAnflai6dPkpN5IE+0=
Subject key identifier: B9:88:18:DE:A6:80:74:7B:20:6A:62:11:BD:3C:88:F7:AC:FD:4D:44
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019A533FA38639AD1F4938FBD262C4AE65BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 01D1
Signing time: Wed 05 Nov 2025 09:01:10 +0000
Manifest this update: Wed 05 Nov 2025 09:01:10 +0000
Manifest next update: Thu 06 Nov 2025 09:01:10 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: jlLmRQKmRP/Hvd8hzctGl4MA4JNuE0gqTdK2gOzm7Bk=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:a3:86:39:ad:1f:49:38:fb:d2:62:c4:ae:65:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Nov 5 09:01:10 2025 GMT
Not After : Nov 6 09:01:10 2025 GMT
Subject: CN=b98818dea680747b206a6211bd3c88f7acfd4d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:7b:77:99:84:d4:ea:c4:41:bb:e7:6f:86:
33:33:20:96:c9:86:29:95:f5:d7:23:14:61:0c:71:
7f:67:63:b9:8d:0b:1e:38:a1:eb:79:37:48:16:1e:
5a:f9:a6:07:91:b8:23:eb:ba:5d:0e:4b:51:0a:30:
d6:07:28:2a:65:94:ab:38:d7:77:14:98:26:35:42:
3e:3f:0b:1d:6c:78:3b:c7:1e:f3:ea:21:ff:bb:a2:
a9:44:78:b6:a6:e4:ad:ec:01:9f:de:6c:55:15:ba:
1e:e3:36:10:50:9b:55:a8:a4:0b:52:53:86:6b:f2:
b3:b3:8c:eb:84:55:12:fb:9f:1d:6c:08:0b:2d:3f:
74:73:f9:ba:4f:a9:f0:cc:aa:b0:9e:74:67:52:e4:
3c:00:26:03:55:1d:d4:2c:4e:47:88:24:99:6f:72:
2a:ca:d6:a9:69:6a:45:c1:d5:21:38:7d:fc:e1:6c:
58:9d:a6:bd:f2:88:37:c1:57:f4:db:bb:27:59:45:
6f:7e:df:79:bb:8a:6d:5f:66:7d:48:44:5e:bd:22:
a3:74:7c:05:21:f5:45:8c:91:b4:19:1c:26:a8:e3:
a7:c7:36:2f:7f:42:87:6d:35:1d:52:f5:e6:33:00:
35:df:c2:2c:7c:b7:ff:2f:c3:89:72:4c:a4:8c:f0:
52:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:18:DE:A6:80:74:7B:20:6A:62:11:BD:3C:88:F7:AC:FD:4D:44
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:bb:8e:fd:e4:5a:8f:fd:1e:1b:fb:10:57:18:11:90:b7:03:
90:74:66:e7:da:eb:a3:b8:a2:33:d4:42:75:e2:7e:b6:60:ec:
40:0b:f4:2b:4d:b0:9d:bd:79:5d:6a:4f:32:d3:a8:11:85:1f:
7e:02:7a:27:14:39:ef:2b:28:ee:87:4a:f7:8f:9e:89:eb:0c:
49:bc:3c:a0:da:ea:2e:2c:50:93:b2:5d:3e:c7:4a:d8:23:d7:
e3:ff:7a:07:8b:31:93:7c:90:be:0b:bd:9a:6a:82:47:f6:e3:
78:31:27:26:b6:06:68:78:c2:f5:89:81:57:c7:79:b3:0c:0a:
c6:48:b2:10:9b:71:a4:62:ca:ba:f2:1b:80:12:44:33:48:01:
63:48:5f:82:99:3e:56:49:bd:88:d9:f9:28:a2:19:23:b5:dc:
ec:f3:9b:12:01:30:3a:75:fd:17:c5:fb:ac:84:9d:a2:2c:88:
a0:d6:a7:cd:f5:df:b9:c2:94:ce:21:af:8a:51:db:aa:19:e9:
2d:03:f3:84:6f:de:3d:45:1f:6b:41:3e:50:56:5a:40:c4:ab:
1f:f3:d4:dd:22:c9:e7:85:23:ef:55:a8:42:82:1f:a4:a1:16:
cd:23:d3:5e:4f:26:31:a3:f4:30:e2:70:81:2d:c5:74:c1:f5:
bc:4b:63:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:54:28 2025 by rpki-client