Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: NzZcd+PI1KoWaD9gwngRgjMVSAggzBtkrBFts8wnRVY=
Subject key identifier: 5B:AE:65:18:C9:4C:AE:F5:21:0F:88:10:0D:7F:20:70:0E:61:23:72
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 01976FD162CD681788718C125EBF3B003600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 0FC8
Signing time: Sat 14 Jun 2025 19:01:22 +0000
Manifest this update: Sat 14 Jun 2025 19:01:22 +0000
Manifest next update: Sun 15 Jun 2025 19:01:22 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: c1IHUv8ibn+IsjNXJS3UHDndWZEcng7XgS2eDeYgAEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:62:cd:68:17:88:71:8c:12:5e:bf:3b:00:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Jun 14 19:01:22 2025 GMT
Not After : Jun 15 19:01:22 2025 GMT
Subject: CN=5bae6518c94caef5210f88100d7f20700e612372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6b:4e:aa:ca:ce:7a:b7:90:df:44:73:96:c3:
09:15:da:e7:9d:74:99:9c:af:ca:84:f3:2b:38:ea:
24:a0:90:96:4f:bd:49:3a:28:e4:34:70:f1:36:03:
d3:95:17:1e:f6:6b:e9:64:3e:2e:41:c3:d5:38:72:
63:28:44:70:0f:ee:d8:1b:3d:63:c1:4d:80:a2:ff:
9a:e0:be:52:6a:d4:47:53:f6:8d:0f:f3:bb:2f:61:
f5:99:49:47:73:95:74:f6:40:df:21:fc:6a:3b:de:
7c:f4:2a:1f:8e:49:b3:67:a1:8b:b4:8a:f1:f0:f6:
ff:61:1f:68:76:ca:11:b3:74:f2:3f:a9:b0:a3:db:
cd:6b:c2:27:a2:49:10:f9:cf:bc:c1:f0:5d:d9:5c:
d3:06:96:a1:e0:e3:70:03:dd:43:00:d7:83:05:d6:
39:9d:66:34:cf:1d:65:73:9e:9f:73:09:9f:13:7c:
eb:4f:ba:05:37:2e:89:f1:11:6d:d8:f0:5c:e9:fc:
d2:00:54:89:e6:08:5b:1e:40:59:d5:b9:ed:e6:a1:
aa:97:61:36:1d:5a:10:50:57:01:83:a4:e6:dc:52:
a9:89:7b:33:60:58:0f:de:fb:9f:b3:20:14:bc:0a:
a1:08:77:37:66:21:c0:9a:f9:a6:39:31:46:c2:f9:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:65:18:C9:4C:AE:F5:21:0F:88:10:0D:7F:20:70:0E:61:23:72
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1e:17:d3:36:8d:23:6d:18:74:2e:93:5e:7e:b1:37:97:a0:
ac:25:cb:e3:fa:10:6c:f8:dc:80:0d:27:42:ea:7b:53:fc:7a:
a7:0b:83:ec:24:6d:26:ee:99:ae:d9:1f:84:d8:25:3e:12:7a:
f0:3c:4c:bf:44:1e:6b:80:ac:af:de:fb:6c:49:f7:f4:5d:0a:
11:fc:51:ae:57:d1:d7:1a:bd:96:82:a0:93:09:21:50:05:e2:
74:e8:74:91:ea:98:d9:61:61:28:ef:23:74:de:69:1c:28:44:
f5:10:8c:26:1d:55:21:2f:d9:b4:c5:bb:7e:98:20:3f:ab:07:
ae:29:68:4c:c2:7c:31:4c:40:d3:01:32:3f:84:98:ed:ec:fb:
4d:d5:38:ba:fd:5c:01:f3:8f:33:df:44:5c:d7:7e:62:96:84:
2d:e6:24:2c:4f:83:ff:fb:67:35:48:5f:10:ee:47:b5:8e:13:
8b:12:73:e1:7d:67:8e:d1:55:00:71:77:ee:63:c6:d6:4d:fc:
5f:55:ff:88:97:ee:54:fa:ef:a1:49:51:14:32:0d:0f:eb:c5:
b9:06:08:c8:6d:5c:5a:5a:65:3d:cd:1b:03:58:88:13:1b:6a:
15:1a:97:75:06:c8:3f:a7:63:8e:41:af:29:56:41:26:5d:b0:
75:28:90:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:11:26 2025 by rpki-client