Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: P30C/vqaijSr7jLWv/xqXIfzgNN0tvY6cuyBh0XcEzk=
Subject key identifier: 5E:0C:5F:DA:E0:A7:E2:3A:0D:08:D4:78:56:2C:99:6F:69:72:32:0B
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 01987E2E8001BD9BE5CAB8C7F1A88FD52A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 1054
Signing time: Wed 06 Aug 2025 07:00:33 +0000
Manifest this update: Wed 06 Aug 2025 07:00:33 +0000
Manifest next update: Thu 07 Aug 2025 07:00:33 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: suztXYRemhpbHywotftFQ86D3wPloTStR5NYBVi74VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:80:01:bd:9b:e5:ca:b8:c7:f1:a8:8f:d5:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Aug 6 07:00:33 2025 GMT
Not After : Aug 7 07:00:33 2025 GMT
Subject: CN=5e0c5fdae0a7e23a0d08d478562c996f6972320b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f4:57:51:58:08:ce:2c:8f:b5:5a:01:7b:8d:
e1:b1:91:25:6e:13:3c:4c:58:cb:b6:ab:b3:19:2c:
1a:91:da:5d:93:24:b7:3b:42:88:33:61:ef:ce:25:
ec:2e:d7:bc:c9:1f:0d:ff:af:11:b4:8f:5e:db:28:
96:cf:16:aa:4e:ea:24:1e:d5:a0:e3:52:1f:71:bc:
ab:d7:6b:c0:54:57:6f:a5:4a:b7:d5:84:d2:bc:4c:
03:31:cc:15:db:f0:c6:8a:b3:02:f3:7d:c9:ab:69:
fd:3f:b8:25:72:09:5f:ed:fd:ff:2a:c3:1a:f2:23:
7a:8c:71:78:c4:b8:90:a4:4a:28:30:8b:bd:6f:89:
c9:9f:6b:00:e3:2c:cc:8e:60:3e:c0:97:22:e7:46:
bf:97:90:25:4a:78:50:c2:56:62:8d:47:0c:e1:96:
5c:84:5a:44:3b:6c:f8:18:99:22:51:2c:de:29:54:
34:9b:a0:46:16:f0:de:fc:07:89:d0:73:99:b1:51:
92:30:39:34:6a:13:5e:4a:d5:c1:fc:8c:65:cf:d2:
c6:f2:5e:8d:3d:46:25:ca:f8:4b:9d:2f:e4:7e:af:
9e:cf:12:82:3b:37:d0:a0:ab:e8:f4:84:a5:20:c7:
85:91:78:4b:b8:40:0f:02:59:53:e2:f0:ae:06:fa:
af:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0C:5F:DA:E0:A7:E2:3A:0D:08:D4:78:56:2C:99:6F:69:72:32:0B
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:98:3a:86:90:d6:91:14:14:4d:db:52:0c:d1:d8:6d:a7:59:
0c:74:bc:6f:00:c1:f3:d8:60:46:e9:20:e3:4b:e0:bb:47:0f:
46:e4:ee:7a:62:9e:fc:f8:f3:13:9d:17:21:ec:18:82:55:e0:
3c:bc:b6:df:74:c7:bb:fe:35:a0:04:45:06:3a:6e:f1:fc:3a:
2c:7b:2a:a0:e5:19:a2:b1:39:6c:7f:d2:22:15:70:1a:67:fd:
e7:85:38:86:d7:81:b4:e5:5a:63:5d:9b:63:1b:c5:04:24:ad:
2d:86:43:c2:b1:9a:65:17:d7:a7:40:7b:be:97:49:7a:4e:ea:
a7:c4:d1:52:43:50:2a:9c:e0:a0:9f:56:62:b9:0b:ac:9b:a0:
e3:45:90:db:0b:d3:7e:99:c0:cf:29:d2:54:9b:a8:36:41:13:
df:15:b2:cf:09:db:46:d6:21:18:c5:bb:46:26:f3:3f:e2:80:
91:54:34:a1:2f:f7:f9:65:af:f1:66:d3:59:91:ad:b4:26:a4:
b4:6a:67:09:a5:70:49:14:ac:cb:03:45:67:bf:78:5d:cc:17:
60:0a:b6:82:53:e3:3d:70:aa:3d:ae:15:7f:3c:01:37:8a:0d:
5a:ce:99:dd:4a:9c:2d:23:19:ed:67:79:55:7e:c1:cd:79:63:
38:b0:d5:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+LoABvZvlyrjH8aiP1Sp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWNjYzQ4MjAwY2VmMDIxNmMyY2U1Mzg2OWZkMTkyYjRh
MjNmNTQwHhcNMjUwODA2MDcwMDMzWhcNMjUwODA3MDcwMDMzWjAzMTEwLwYDVQQD
Eyg1ZTBjNWZkYWUwYTdlMjNhMGQwOGQ0Nzg1NjJjOTk2ZjY5NzIzMjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PRXUVgIziyPtVoBe43hsZElbhM8
TFjLtquzGSwakdpdkyS3O0KIM2HvziXsLte8yR8N/68RtI9e2yiWzxaqTuokHtWg
41Ifcbyr12vAVFdvpUq31YTSvEwDMcwV2/DGirMC833Jq2n9P7glcglf7f3/KsMa
8iN6jHF4xLiQpEooMIu9b4nJn2sA4yzMjmA+wJci50a/l5AlSnhQwlZijUcM4ZZc
hFpEO2z4GJkiUSzeKVQ0m6BGFvDe/AeJ0HOZsVGSMDk0ahNeStXB/Ixlz9LG8l6N
PUYlyvhLnS/kfq+ezxKCOzfQoKvo9ISlIMeFkXhLuEAPAllT4vCuBvqvmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4MX9rgp+I6DQjUeFYsmW9pcjILMB8GA1UdIwQY
MBaAFPDszEggDO8CFsLOU4af0ZK0oj9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAt
YmI2NWM1OTAwZjc1LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAtYmI2NWM1OTAwZjc1
LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipg6hpDW
kRQUTdtSDNHYbadZDHS8bwDB89hgRukg40vgu0cPRuTuemKe/PjzE50XIewYglXg
PLy233THu/41oARFBjpu8fw6LHsqoOUZorE5bH/SIhVwGmf954U4hteBtOVaY12b
YxvFBCStLYZDwrGaZRfXp0B7vpdJek7qp8TRUkNQKpzgoJ9WYrkLrJug40WQ2wvT
fpnAzynSVJuoNkET3xWyzwnbRtYhGMW7RibzP+KAkVQ0oS/3+WWv8WbTWZGttCak
tGpnCaVwSRSsywNFZ794XcwXYAq2glPjPXCqPa4VfzwBN4oNWs6Z3UqcLSMZ7Wd5
VX7BzXljOLDVrw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:16:56 2025 by rpki-client