Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: aEppcux8N+pKU2W9SaYAfudFZBmgwQM9Wb1qiHpUTM8=
Subject key identifier: C1:83:63:F7:35:24:E6:F4:2D:8E:DE:D7:0F:2C:3E:E5:DC:C7:47:D5
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 0198887BBD0303C243DD7230C00C6E962FF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 15B9
Signing time: Fri 08 Aug 2025 07:01:07 +0000
Manifest this update: Fri 08 Aug 2025 07:01:07 +0000
Manifest next update: Sat 09 Aug 2025 07:01:07 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: Td2ssUpj3goIJ/G7ojHg/f/fGIhUT8bwyWHPhucOiC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:bd:03:03:c2:43:dd:72:30:c0:0c:6e:96:2f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Aug 8 07:01:07 2025 GMT
Not After : Aug 9 07:01:07 2025 GMT
Subject: CN=c18363f73524e6f42d8eded70f2c3ee5dcc747d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c4:05:a1:dd:06:7b:e2:98:fd:59:11:4f:93:
8d:79:58:0d:b0:f7:e4:ff:0e:a6:e6:71:35:83:b0:
7b:e0:72:74:4d:c5:63:c4:ec:35:e6:ab:f0:01:31:
4c:f4:2d:12:5d:25:90:d4:b2:b8:20:5f:a3:c3:e9:
e4:80:92:1e:5f:cc:88:0c:70:22:cc:f1:4c:1e:f7:
03:f3:80:9f:3a:b6:ae:ba:67:a4:19:dd:0e:33:35:
39:b7:7c:c1:21:f0:f0:ec:9e:0d:7c:60:98:c0:dd:
62:57:75:1e:e0:0d:c0:e1:e7:04:ba:92:e0:5a:4b:
db:36:ce:e9:85:93:f3:55:12:9b:91:28:6e:0e:a8:
27:fe:a9:c2:0b:2e:6a:87:80:44:32:d2:fe:7c:1d:
25:08:f9:e1:5a:cb:30:ca:3f:d0:37:d7:0a:30:a8:
eb:b2:62:9c:55:70:fe:79:94:1c:d6:7f:5b:09:b3:
4b:4b:10:a1:f6:db:cd:77:78:d9:93:93:c0:c9:00:
e8:7b:1e:1b:3a:1c:c8:a4:11:d3:e6:54:59:c7:ab:
6a:48:6f:31:d4:55:a9:ea:94:bd:e0:d7:f7:81:28:
2a:93:f6:d1:d6:6e:15:1c:3c:42:87:cf:a3:74:30:
cd:54:06:02:ba:ad:06:ea:01:4d:a8:7b:7d:14:9e:
14:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:83:63:F7:35:24:E6:F4:2D:8E:DE:D7:0F:2C:3E:E5:DC:C7:47:D5
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:0b:94:9a:f8:4e:d2:c9:5a:ae:15:dc:96:fb:c1:70:dc:1a:
31:f0:5f:b2:55:97:18:4a:f6:f4:87:e3:c0:fd:16:80:65:17:
b0:2a:60:cb:be:a2:a6:7e:aa:90:a8:91:c4:58:67:78:94:d2:
73:1d:f7:23:7a:d1:6b:b5:db:b9:f5:90:6b:62:5f:e1:07:c1:
81:e4:3f:9e:39:9e:f8:89:84:3e:0c:33:88:f0:64:f0:ee:6e:
24:ea:93:aa:41:78:aa:92:51:3a:cd:e5:10:16:00:ed:ca:3d:
12:1d:46:02:9c:55:89:b1:e3:c8:4b:b5:8a:22:e5:b6:34:26:
c1:b4:f6:7e:c4:f1:a4:9c:1a:24:8c:1a:dd:1a:85:5f:59:1e:
72:e5:70:26:da:c6:6e:83:79:7f:d5:99:4d:c0:32:a8:ee:af:
fb:db:40:d6:ca:df:b2:77:3e:19:5f:79:4b:85:f3:de:bc:60:
d1:05:2f:2e:31:94:6b:67:81:1e:31:4e:41:0b:62:50:64:70:
91:3a:76:50:36:50:e7:28:5c:b8:8e:78:38:1b:03:49:6f:c0:
8f:9d:1a:0d:47:6f:54:fe:85:f6:eb:95:6d:04:b3:9b:40:62:
a3:f0:f6:07:8b:9d:3f:3f:91:e4:ea:09:89:eb:d4:64:bc:ae:
85:93:d8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:30 2025 by rpki-client