Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: cu3j8T98CD1t1I9XVZCN0b0ujqMht+3v8OpT1C6uOc4=
Subject key identifier: 6B:48:6D:13:E2:D0:76:29:B0:1E:68:3B:93:EA:B6:4F:4A:1D:9F:04
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019880C2A6E98F0E7DBA1E7132866F559EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 0A58
Signing time: Wed 06 Aug 2025 19:01:36 +0000
Manifest this update: Wed 06 Aug 2025 19:01:36 +0000
Manifest next update: Thu 07 Aug 2025 19:01:36 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: 3sxxLVr84WxyRFYxgz8gX066zQO++I/LdtLoqRGoQIQ=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:a6:e9:8f:0e:7d:ba:1e:71:32:86:6f:55:9e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Aug 6 19:01:36 2025 GMT
Not After : Aug 7 19:01:36 2025 GMT
Subject: CN=6b486d13e2d07629b01e683b93eab64f4a1d9f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:cb:bb:94:73:89:d8:64:d2:c6:71:b2:bb:
bc:e6:06:88:31:d5:f5:d6:b5:64:e3:a5:19:d8:bd:
12:fc:aa:99:96:9a:44:a0:2b:e2:a0:a5:03:03:0c:
a8:e7:63:b4:92:cc:d4:0b:5c:3d:55:c4:20:2e:bc:
7a:c5:3f:98:b8:d3:ad:9c:ca:8b:d4:f2:08:cf:dc:
09:55:c7:82:04:e9:3a:ea:a4:2d:13:42:df:66:99:
2c:c4:b2:ae:93:53:6b:92:8a:9c:f2:20:f7:8e:de:
93:99:44:a5:dd:42:2a:0f:e4:66:57:c4:19:77:4d:
77:8a:73:a1:7a:db:6a:da:47:e5:e4:8b:ef:aa:4c:
d2:17:ea:c2:3c:31:54:7d:4f:33:4e:f6:b1:a7:20:
de:e9:b3:78:38:0a:28:48:12:90:22:12:d2:f2:07:
f6:60:a9:37:a9:03:f9:f4:c2:0d:87:4b:33:23:9b:
09:61:bc:38:11:51:d3:e6:d6:a2:ef:2e:71:36:5e:
bb:4d:39:2b:1a:61:66:8c:aa:e2:1a:f3:ef:31:0c:
4d:0e:49:59:fe:ae:1e:80:83:dd:11:40:09:5f:3d:
37:9e:dc:f0:b7:0d:e4:bc:9f:e0:68:f7:57:db:af:
e1:b3:22:ed:f2:04:e1:94:a1:de:23:ce:75:10:3d:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:6D:13:E2:D0:76:29:B0:1E:68:3B:93:EA:B6:4F:4A:1D:9F:04
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:71:cc:e6:6b:c1:b3:f0:9d:7c:44:2d:93:42:43:e4:2b:84:
b3:f5:75:44:da:48:c9:a3:9e:24:f3:0d:cf:c2:c4:b3:a2:0e:
09:f5:a2:ab:d0:33:84:e6:e0:08:f9:f2:8b:32:51:fc:91:70:
d9:8b:7b:32:94:fd:ea:a6:99:e7:8b:ea:e5:85:42:c8:81:fc:
a4:48:89:03:fb:49:3b:4b:78:9b:07:af:ae:71:f8:6f:c5:fe:
34:80:79:b5:93:30:b1:7b:c0:aa:ed:c3:42:78:89:3a:a8:8d:
f9:56:06:30:ef:a7:c7:5e:4e:8d:c7:4a:91:dc:0f:5a:04:e6:
96:b6:3c:eb:44:f2:33:13:f3:b2:7b:ba:44:3f:c1:0e:bf:33:
14:29:c0:95:e5:68:46:af:20:11:fe:fa:5d:8f:00:65:fb:16:
15:ee:84:b2:79:00:9e:ce:35:3e:a7:ac:74:ee:9d:51:d4:0c:
66:47:d3:f1:31:cf:38:81:6b:11:4f:75:cc:9a:fc:16:96:e8:
ef:95:dd:a7:01:d1:f1:1f:fc:f5:c0:93:86:c0:67:fb:6d:b6:
9b:27:e5:84:7e:e3:fa:18:2d:2d:e4:6e:33:fc:80:ee:6e:ef:
4f:87:bb:d8:4b:56:78:62:4e:d7:c8:3f:5a:89:a4:8f:03:4c:
ab:26:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:24:54 2025 by rpki-client