Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: lsPkvSviVUT4uzRY8f6NKQL5oEaRPv527RpMeUMW3+0=
Subject key identifier: DA:37:D7:30:3F:1F:89:05:EB:D0:98:38:53:00:B2:CE:C0:CF:4F:3B
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 0198835603CABA5EFE9ABC849F40C3B4C44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 039D
Signing time: Thu 07 Aug 2025 07:01:48 +0000
Manifest this update: Thu 07 Aug 2025 07:01:48 +0000
Manifest next update: Fri 08 Aug 2025 07:01:48 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: PvL0RseDFUsZUKPTDEftV+//Y8QMLXFBrLzSAcQ3rUs=)
2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:56:03:ca:ba:5e:fe:9a:bc:84:9f:40:c3:b4:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Aug 7 07:01:48 2025 GMT
Not After : Aug 8 07:01:48 2025 GMT
Subject: CN=da37d7303f1f8905ebd098385300b2cec0cf4f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:6e:21:72:56:cb:a1:ec:71:1c:66:02:e3:
bb:c0:3c:f3:f6:17:9b:7f:5b:80:bf:2d:e6:c1:11:
8a:1b:7f:92:d6:e4:e8:88:fe:f6:d4:14:0d:27:c2:
8e:3b:7b:51:0f:56:17:4e:69:60:ad:69:09:11:88:
05:cb:b1:44:e3:b0:28:c9:74:13:4d:cb:ef:f8:cd:
4f:c1:dc:3e:67:28:b9:2c:4c:c3:2c:2b:22:85:41:
dc:45:fa:56:c2:45:19:ee:0e:6c:8f:b5:95:dc:92:
a2:3f:5f:81:c3:18:06:7a:6a:92:b0:46:65:de:06:
cb:9e:c5:77:d0:e2:06:ad:22:36:43:70:85:ca:49:
c0:2d:67:5a:44:de:56:a5:3d:0d:a9:35:ce:20:94:
30:0a:75:b8:43:01:78:5f:97:f6:52:05:68:38:f5:
a5:34:a2:a8:93:44:46:42:a1:db:bb:56:97:7f:f8:
a0:88:79:11:c0:0d:e7:07:58:0b:8e:c8:c6:05:20:
c4:a5:05:93:c8:ad:8d:4b:c4:32:73:b9:74:24:02:
33:c5:f8:79:37:ed:09:11:ac:69:bf:ff:18:54:42:
7c:47:a7:f3:15:61:75:d0:79:72:30:43:55:76:b1:
7e:cb:00:8e:ff:28:72:58:e4:14:47:b0:77:df:19:
4c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:D7:30:3F:1F:89:05:EB:D0:98:38:53:00:B2:CE:C0:CF:4F:3B
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:77:98:11:db:ac:31:92:0f:e7:89:86:09:62:da:a6:fa:78:
97:91:3f:ef:d3:64:3f:d4:e6:b2:90:58:5c:54:1f:04:8f:6a:
c3:c5:02:b1:07:7c:1a:17:4a:47:cc:f4:46:b9:42:2e:ea:92:
63:38:b8:bf:a0:04:15:7c:cc:d8:01:18:0a:0a:64:3c:bf:03:
2d:8e:e6:2f:ae:f1:d0:23:54:f0:d9:cc:75:57:bb:05:83:e8:
13:be:6d:6a:14:0d:ba:a9:5f:1d:67:c0:0f:51:48:d7:58:1e:
52:84:b8:1d:3b:ae:c7:14:bd:23:5c:b0:2a:15:87:f0:cc:b0:
e1:3b:ef:e1:5d:0a:f7:89:96:07:ad:44:b8:bc:e9:8d:76:c6:
de:8b:3e:a5:b9:60:a6:1a:00:e7:6f:23:1c:9e:d9:ed:73:78:
ba:52:08:0e:cb:29:88:38:c1:27:a9:c4:8d:40:76:fa:89:57:
12:57:cb:79:c4:df:34:19:e0:87:d3:bf:95:dd:49:61:d9:b4:
92:91:3d:68:b1:8e:31:bd:5c:38:c4:98:af:7c:c5:40:c6:0b:
a5:7a:0e:a3:7e:ff:91:c7:26:15:2a:04:03:47:79:9f:09:38:
26:a6:de:78:b1:4e:df:0a:30:f0:a2:78:8c:b8:47:e5:16:e0:
e2:68:04:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:48:17 2025 by rpki-client