Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: Ybq6J5Pmw7a0EXP7mLNcwCMxv6RcwGx0nbuxN4AjaL0=
Subject key identifier: 80:64:0F:9A:DD:A1:94:C7:C5:5E:95:5B:DD:5B:9B:1B:28:3B:FF:E2
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 01988BEAD6519518AAD2347B7465FBC1F916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 23:01:19 +0000
Manifest this update: Fri 08 Aug 2025 23:01:19 +0000
Manifest next update: Sat 09 Aug 2025 23:01:19 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: gA9a8hqSk8zrjuWyGI/EagjVEZfXJWQN13df1Ev6s8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:d6:51:95:18:aa:d2:34:7b:74:65:fb:c1:f9:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Aug 8 23:01:19 2025 GMT
Not After : Aug 9 23:01:19 2025 GMT
Subject: CN=80640f9adda194c7c55e955bdd5b9b1b283bffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:b4:5d:ac:bb:bc:c5:97:84:0c:72:f8:6a:
9e:57:8e:e8:b0:ea:7a:f3:4d:66:2a:97:c2:a5:ae:
af:b2:83:fa:20:37:b8:7d:d9:9e:81:f4:38:2c:f0:
22:a8:5e:a3:8e:c3:ea:a8:0b:4e:95:2d:5d:15:2f:
3e:fd:62:85:70:af:5f:d6:73:b2:4b:cb:e7:35:4e:
95:c7:21:2c:e5:f1:b0:d0:58:38:2a:ef:8a:c2:e9:
f3:bd:a4:aa:10:a1:9b:0f:e9:86:bb:e1:d9:2d:2c:
1d:6f:2f:4f:99:39:5b:f9:1c:99:ad:da:fc:09:5d:
18:df:65:47:b0:9a:7e:bb:ee:86:df:d7:b4:13:b0:
e1:b6:2f:7a:15:c4:88:10:b4:c2:1f:4a:ed:87:ee:
4a:e5:ab:d7:81:d1:6d:16:11:08:27:bf:44:9c:14:
63:53:19:4e:55:5b:1e:fc:bf:76:e1:eb:a1:73:b6:
30:e3:bc:c2:33:b5:54:d5:2a:3e:bb:d0:38:e6:03:
21:87:49:3b:34:ad:af:78:5f:26:99:cb:ed:4e:d6:
7f:21:47:8c:5f:b3:9b:6a:e7:2a:51:d5:18:27:1a:
b6:10:5f:d4:7a:50:4a:6f:d3:da:81:9e:23:36:4f:
1c:72:7e:02:56:9a:8c:4e:e8:31:d7:38:24:07:b5:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:64:0F:9A:DD:A1:94:C7:C5:5E:95:5B:DD:5B:9B:1B:28:3B:FF:E2
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e8:3e:13:af:e7:c3:40:be:e1:18:6e:08:26:ae:04:fc:9d:
db:f2:90:ee:af:57:bc:07:f5:d8:b7:9a:55:ef:e9:95:23:7e:
97:17:10:0d:aa:86:40:b0:0d:4d:f7:c2:da:66:c5:9b:64:3d:
a4:d9:79:3d:7f:b1:b5:82:60:36:79:77:59:21:54:98:db:b5:
2c:be:27:d8:a9:fa:54:ec:21:7b:45:b0:56:eb:cc:a4:51:51:
c6:55:4b:a4:8d:58:49:b2:39:99:eb:89:43:66:42:0a:ad:aa:
5d:b5:47:13:8e:44:69:b4:97:9b:1e:f8:5c:80:a9:7b:85:fb:
a7:2e:c9:4d:23:25:7a:ec:54:2f:bf:69:63:79:64:ef:62:00:
c1:a2:41:83:67:1d:e7:02:b0:8f:23:c9:5d:26:3e:19:68:b7:
52:83:21:07:9e:62:c5:46:9e:2f:e5:ef:2c:b9:e2:15:cf:30:
7e:25:d0:39:ec:e8:b6:9e:64:e7:6d:07:0b:82:0b:d0:26:88:
d2:55:82:af:11:0c:47:d1:e4:79:99:d4:13:80:27:a0:f0:b3:
c1:1a:ca:ab:99:de:0b:2e:e4:14:f6:28:f0:23:84:ed:81:88:
07:54:a6:73:f2:51:8a:87:f6:66:87:f4:12:94:15:e0:1e:35:
98:72:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:55 2025 by rpki-client