Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
File: AV8OZlqcdCI8S_4nChZZreTO8x8.mft (raw, json)
Hash identifier: GSsLp+tObIakJY5x1Nta8ZT/ZHat92IfxPr6BWna2V0=
Subject key identifier: DA:40:6B:7B:E0:46:76:D6:0C:AD:E8:C6:75:C2:6C:B9:D4:E2:4B:2C
Authority key identifier: 01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
Certificate issuer: /CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Certificate serial: 01988DA193DAA566702B424DB5AB0D3AEB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
Manifest number: 0148
Signing time: Sat 09 Aug 2025 07:00:33 +0000
Manifest this update: Sat 09 Aug 2025 07:00:33 +0000
Manifest next update: Sun 10 Aug 2025 07:00:33 +0000
Files and hashes: 1: AV8OZlqcdCI8S_4nChZZreTO8x8.crl (hash: ob0j5BAB7UkrQJNr5snNePfc4rQJCqDbu/e85RvtnGA=)
2: dG3vSEaAbpBYGMjnVqj3IkRAi0o.roa (hash: gF5q2naGzlJIG0YvikJ9g/7wr5QlHQs7okrQO5XF9dA=)
3: fE-CoC_oBJRa8r51jGuZP6UT1fo.roa (hash: EW07mUQxRP7f97x2KLlPw1Z2VU9hXKfncKzg+1xlCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:93:da:a5:66:70:2b:42:4d:b5:ab:0d:3a:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=015f0e665a9c74223c4bfe270a1659ade4cef31f
Validity
Not Before: Aug 9 07:00:33 2025 GMT
Not After : Aug 10 07:00:33 2025 GMT
Subject: CN=da406b7be04676d60cade8c675c26cb9d4e24b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:87:52:b8:0d:7e:3b:bf:b5:27:fe:a1:b5:cd:
62:ee:f6:bf:13:75:0a:58:f0:0f:b1:93:dc:7c:57:
53:20:78:02:b8:4b:2f:8f:a2:ab:07:75:af:0f:70:
77:05:13:12:a2:81:c1:e2:16:35:90:35:a4:7a:86:
61:56:6e:2d:46:07:a5:66:22:c9:10:88:f3:eb:5d:
e4:6c:9b:c1:f4:2d:90:95:9e:54:77:15:a2:cb:b7:
05:4b:a8:35:7f:16:e8:02:5c:40:8b:2b:b2:41:f9:
0e:58:ae:87:c1:ff:d6:bf:56:9f:3d:70:82:38:b8:
39:8b:82:18:0c:62:d6:3d:39:85:e5:a0:a9:76:68:
b1:a9:f4:21:13:f3:67:d1:3b:bc:65:13:2d:87:22:
1a:cd:04:59:db:cc:23:e4:b1:b3:f7:85:dd:bc:89:
18:47:29:3e:42:1a:d4:12:7f:14:34:6b:54:76:f9:
67:a7:fc:81:b0:7b:17:52:13:94:02:43:d8:bf:30:
9d:08:86:d7:68:2f:da:b9:cc:42:fd:af:16:7e:c9:
da:b8:f2:8b:d7:9f:62:42:4f:c2:1f:a8:b5:53:b2:
65:dd:1a:e5:4b:fd:f8:ac:f8:ff:8a:e2:9a:21:36:
cc:69:24:8e:85:6b:53:9c:80:3b:fe:1d:67:da:34:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:40:6B:7B:E0:46:76:D6:0C:AD:E8:C6:75:C2:6C:B9:D4:E2:4B:2C
X509v3 Authority Key Identifier:
keyid:01:5F:0E:66:5A:9C:74:22:3C:4B:FE:27:0A:16:59:AD:E4:CE:F3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AV8OZlqcdCI8S_4nChZZreTO8x8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/46bd33-b527-462e-81e0-8677b3dd8707/1/AV8OZlqcdCI8S_4nChZZreTO8x8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:62:52:e5:fd:bc:9c:0b:7e:02:1c:9b:1c:4f:45:4c:08:bd:
6d:28:55:d6:18:b6:a3:18:9b:b6:25:9d:bb:74:d1:a2:8c:5c:
12:e0:bf:05:9a:c4:56:c6:c8:df:fc:da:6b:ab:ec:ff:33:cd:
43:f5:e2:34:24:88:5d:95:6f:28:a5:db:db:60:98:ca:ba:90:
91:bb:a9:f7:f1:9d:fa:69:84:4d:be:72:a4:f3:5e:a2:19:c4:
95:8e:ca:73:78:b0:46:b7:9b:77:ce:f2:65:20:2e:fa:9f:2b:
b1:90:0e:3e:6e:5d:70:83:a6:96:c7:b1:d3:88:71:bf:01:7b:
70:4a:79:15:be:60:55:56:38:72:a0:08:c3:06:9f:1f:5e:68:
6c:c3:74:df:6a:17:a1:6b:fa:3f:96:8e:f0:bf:ac:59:01:e7:
55:3f:9a:04:13:be:a7:aa:8b:36:2e:cd:04:63:35:ab:dc:e3:
a8:52:7d:14:74:ec:db:d0:e2:c5:15:36:11:11:16:fa:5d:5c:
b1:b1:49:40:81:46:32:a9:84:83:55:23:9a:89:4d:41:bd:e5:
9d:44:55:28:7b:be:df:30:04:40:bd:46:81:f6:26:d8:84:8e:
24:23:04:78:1f:4f:ef:0e:5a:32:4c:db:8c:bb:ae:41:2b:c2:
e3:d1:0a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:51 2025 by rpki-client