Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: 2GgpLSFwDGtzLb3/4gvFW8UHHWj0fwTf38WBRdyRbVM=
Subject key identifier: 5D:3A:88:04:17:66:27:A8:94:68:F7:F9:60:AC:69:FE:8D:02:82:9A
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 0198880D4CB84506A10871724B3DCF251003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 74
Signing time: Fri 08 Aug 2025 05:00:29 +0000
Manifest this update: Fri 08 Aug 2025 05:00:29 +0000
Manifest next update: Sat 09 Aug 2025 05:00:29 +0000
Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=)
2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: xIlpePHJBIomOgdm8zrDMBrWmp19sCwsThgIbRKtlN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:0d:4c:b8:45:06:a1:08:71:72:4b:3d:cf:25:10:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Aug 8 05:00:29 2025 GMT
Not After : Aug 9 05:00:29 2025 GMT
Subject: CN=5d3a8804176627a89468f7f960ac69fe8d02829a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:67:51:f1:86:dc:46:c8:f4:96:89:3b:07:
0b:90:62:d1:c7:a1:6c:53:9b:f0:bd:2e:5b:51:21:
36:1c:4b:ab:5f:b9:17:8e:86:e5:f2:89:e7:69:fc:
1b:ad:1a:5a:c1:5f:3e:e5:51:01:38:ad:82:87:d8:
a2:3f:3d:0c:f5:f9:b3:1d:e4:ca:ad:66:17:a0:6a:
2c:2e:c7:30:a0:94:d4:df:26:21:81:f2:2b:ef:d8:
59:86:5b:fa:fd:89:eb:1c:a9:fa:82:ba:8b:28:ae:
f2:c8:b4:25:69:2b:b4:49:51:83:73:39:27:e0:03:
87:8b:cc:9e:6c:20:a9:aa:8d:8a:b2:75:98:36:df:
e7:22:98:81:37:b8:7b:86:da:02:cb:35:8a:fe:80:
04:34:11:83:93:a6:85:29:a6:1a:43:af:60:92:25:
4b:3e:ce:54:64:b0:8e:68:e3:e9:6d:86:bb:aa:1e:
7f:ca:84:b1:33:b9:a5:a2:97:02:f8:9f:68:e0:39:
cc:7b:ee:12:8b:8d:4a:f4:2e:2f:95:66:72:77:0e:
ce:71:65:09:d3:ad:fc:90:2e:f8:74:3b:a8:78:00:
30:a6:57:92:3e:55:7c:33:f0:b0:76:81:bc:44:a4:
e6:4c:0c:0f:81:be:99:21:ad:3a:e5:22:bc:7b:4f:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:88:04:17:66:27:A8:94:68:F7:F9:60:AC:69:FE:8D:02:82:9A
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:27:61:4d:f8:d9:91:f9:88:c2:4c:9b:1c:85:ef:16:61:b3:
b0:8a:bb:63:0d:06:45:02:41:f0:06:f6:7d:c2:18:61:92:aa:
ae:ef:3f:c1:99:7d:32:cd:46:cc:16:1b:fb:34:05:14:c3:3e:
eb:e8:31:c3:2b:9d:2e:3f:af:3a:29:ab:ba:42:ec:93:01:f7:
41:f9:56:ed:d7:0f:29:f5:6c:4c:1b:4b:b1:ce:45:5d:95:b8:
06:45:e4:05:6b:af:46:80:b0:84:50:5e:d5:85:cf:ce:42:88:
6e:ff:8b:7c:56:b2:31:ab:ba:da:6d:80:77:10:de:cd:fc:55:
01:d4:07:b4:89:7f:3a:c4:b0:d4:a6:cc:ee:be:2f:d2:bb:c9:
b7:71:c9:d4:0b:d1:15:8a:75:cb:83:c9:17:27:c1:8d:9a:e7:
d3:77:98:2f:56:af:b0:82:b1:7b:20:e3:b5:18:58:0c:c0:76:
ed:02:9a:83:f7:03:b8:22:3c:3a:62:02:ec:5c:18:df:32:40:
8d:9f:29:a0:01:e3:64:07:39:5b:c2:0f:02:56:30:37:e9:8b:
ed:23:2c:3c:9c:63:8e:31:62:98:04:04:b4:65:07:bc:40:89:
9b:1e:a1:c1:87:e6:6f:fd:9f:76:8d:f9:01:5a:54:87:e1:f7:
c3:38:38:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:47 2025 by rpki-client