Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: YIhIwDosh7R6WBzYuiqj53j/rpJJk+xRDYRh+a8yqUQ=
Subject key identifier: B5:CA:8B:45:D1:1F:79:8C:77:BF:B0:80:9C:68:6F:30:FD:A2:62:83
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 0198752BFE99A8C8F906DFC6D1A82F6C21C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0A76
Signing time: Mon 04 Aug 2025 13:01:13 +0000
Manifest this update: Mon 04 Aug 2025 13:01:13 +0000
Manifest next update: Tue 05 Aug 2025 13:01:13 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: ShF+re9lvj2sHWB2zqbK/YYGvTTCdMzEpsGEwLK3gs8=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:fe:99:a8:c8:f9:06:df:c6:d1:a8:2f:6c:21:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Aug 4 13:01:13 2025 GMT
Not After : Aug 5 13:01:13 2025 GMT
Subject: CN=b5ca8b45d11f798c77bfb0809c686f30fda26283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6f:cb:39:b1:22:ff:21:0a:42:bf:06:74:4a:
17:37:6f:30:d2:1a:5b:9e:59:67:d5:91:72:eb:fe:
2d:c9:72:d4:78:47:dd:37:e4:62:cb:bd:89:7b:c9:
ca:29:b1:db:de:32:6b:cd:c9:2a:6e:cf:cf:7d:64:
6b:76:8e:89:56:e8:40:6c:fe:44:59:00:39:9b:10:
0e:23:9b:c5:04:e4:a7:5b:6c:32:4e:86:31:40:ef:
8f:2f:15:c8:15:51:f1:18:12:1f:f0:34:4f:bc:3e:
bd:a9:04:4d:f7:3c:5b:0c:87:92:5f:6e:dd:16:5e:
a3:86:0b:4d:74:f7:1b:2a:f6:cf:98:4e:4c:1f:27:
32:7d:dd:3a:6e:08:59:e0:e3:4c:15:f0:55:b0:05:
d2:02:d0:0b:c1:36:3c:ef:f6:39:2d:1b:2b:bc:a5:
42:5c:f9:5e:e0:8a:8e:65:58:f0:41:9e:b8:18:d0:
3e:25:52:16:72:ba:40:e5:4b:c4:79:57:20:ba:9a:
b6:b0:aa:a8:3a:a4:5e:97:85:73:d3:67:4e:c0:80:
91:0b:34:15:3c:5e:8c:66:f4:5b:70:23:ef:6b:6a:
72:dd:1c:06:97:80:aa:19:b3:d9:f4:54:5c:75:d1:
40:56:7d:d6:46:e5:99:ae:82:4e:3c:dd:24:03:5a:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CA:8B:45:D1:1F:79:8C:77:BF:B0:80:9C:68:6F:30:FD:A2:62:83
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:94:22:e7:ff:f7:d6:7c:6c:fa:eb:41:16:d6:04:91:0e:cd:
19:24:89:d5:67:e8:4d:da:ef:b0:1e:e8:e1:0e:f9:9c:a3:7a:
44:8a:4b:67:2e:83:d8:2f:2d:84:d9:2d:8e:81:16:36:86:ad:
c7:1a:b1:b1:83:8c:7e:c9:66:b9:af:88:e0:97:57:45:7e:92:
a5:78:09:69:2b:0d:ce:0e:44:a5:62:a9:80:88:44:66:b6:24:
ec:9e:e7:b6:af:64:65:ad:3a:55:dd:1a:1f:9f:31:5b:37:73:
3b:4d:7d:1d:d3:a4:00:3e:c4:58:c2:f0:4f:5f:b4:92:55:30:
8f:08:bb:f0:e8:22:ed:2f:6b:92:f9:1f:bd:d6:4f:fb:1d:e7:
51:92:22:3d:91:36:51:00:ac:1b:b4:39:93:ff:41:67:07:5a:
ff:7a:a3:b7:a3:11:db:d6:0e:91:fb:c8:48:e8:c1:e2:e1:f0:
9f:77:7d:c9:3d:00:f9:8c:41:de:6c:9f:67:17:5b:74:4c:ee:
bd:e6:48:ee:6a:36:58:13:f3:fd:db:73:14:f0:dd:00:0b:25:
ef:4b:14:35:a5:d3:87:3b:88:96:97:5c:2d:7c:23:70:c2:e2:
82:8a:0b:6b:51:b1:bf:17:bd:68:f3:0d:30:cf:5b:31:7a:63:
eb:6c:eb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:59:12 2025 by rpki-client