Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: zTLMgWImgNp42hpcgAOSgzv8SSnV/GfKNwoZco3f2bg=
Subject key identifier: E7:04:BA:95:C1:DE:EB:8F:7D:59:9B:0B:A0:42:50:99:1A:C3:72:BA
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 0198745097AE89493D249F34AE015ECC20AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: D9
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: JE3l5oTOOPKW/Vt+uP2WFvWNOnr1yudaiPp/k80To+Q=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:97:ae:89:49:3d:24:9f:34:ae:01:5e:cc:20:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=e704ba95c1deeb8f7d599b0ba04250991ac372ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:2a:85:04:45:87:58:36:d3:9d:96:23:e0:
6f:36:70:94:67:53:69:10:86:35:69:2c:85:e4:09:
63:1d:7d:ef:55:90:7b:28:7b:bc:c2:94:be:5e:72:
0c:8c:30:33:e1:7c:eb:fa:67:34:74:98:77:87:97:
e7:f8:19:5b:d7:e4:a9:91:44:3a:cb:ce:9c:a6:a6:
05:11:78:cd:55:1a:53:87:8d:27:06:96:0a:06:d2:
03:2a:07:51:fc:b8:a8:9a:57:16:15:a5:06:ef:bc:
d7:e8:6b:0d:50:e2:d0:ea:06:9c:a4:a6:c6:2e:fb:
80:bc:00:3f:d9:08:fc:ca:fd:de:fb:d7:59:32:e2:
fa:49:b8:00:62:d4:e4:f6:40:be:c7:3f:a4:78:51:
bc:74:c6:69:d2:d2:46:a7:31:4f:db:e4:69:66:a7:
24:73:b9:34:69:ed:de:3a:9c:45:8e:15:7a:91:60:
85:b7:41:13:18:c5:a7:2f:a6:36:54:3a:e8:b7:ab:
c3:e5:5c:5f:e0:9e:61:4f:7d:fe:c3:8e:30:56:ca:
5f:b0:d3:4d:d4:d4:49:8d:b9:e1:c8:cd:d3:d8:cb:
9a:30:4f:05:ca:70:29:42:47:15:eb:c7:6a:4d:46:
02:08:c1:cd:a1:09:78:ba:42:6b:38:b9:eb:66:bd:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:04:BA:95:C1:DE:EB:8F:7D:59:9B:0B:A0:42:50:99:1A:C3:72:BA
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:f2:29:39:3b:c8:0e:51:6f:98:cf:28:07:ad:32:f2:a9:
ec:ea:c9:8f:9c:9d:95:b5:78:80:33:3b:d7:bc:82:d2:8b:10:
a9:9e:32:99:b5:08:63:75:a3:3e:5c:75:d9:23:eb:7a:ea:11:
40:75:9b:75:e2:88:20:a5:ca:2e:e4:23:ba:4a:d6:ff:ca:80:
b5:ce:f4:30:6a:4a:5e:f9:86:4b:15:a0:d6:b1:07:ce:ac:69:
68:9b:49:cc:60:70:11:4e:18:2a:1b:10:b0:05:49:64:95:d3:
b5:36:e1:d9:3e:d1:56:74:ab:99:a4:76:79:08:89:37:43:66:
38:30:54:59:a3:0a:28:b6:6f:6f:80:a0:aa:29:84:a5:7f:66:
aa:88:09:30:89:f7:e7:36:0d:8f:5e:7b:06:77:72:3d:e0:94:
28:11:80:67:0d:91:78:c5:9a:78:fa:49:fb:07:77:0f:e1:ec:
85:da:a5:f5:0b:75:c2:e8:09:ef:3b:77:de:7a:ef:fb:9a:87:
ad:f6:71:3d:a9:98:0f:36:7e:41:11:9c:8c:5c:d1:19:34:17:
85:c7:ee:00:51:3d:88:b6:f2:b7:76:c9:ac:dc:5a:59:53:f6:
d0:5a:55:2b:b3:ee:c4:27:05:33:43:88:76:e1:42:00:45:61:
09:f7:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:04 2025 by rpki-client