Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: cDyz3Igp6FGfJIFPZlmNayzXZ5Jn3iWKGSsm73ARa/k=
Subject key identifier: 35:16:E7:A0:2A:63:45:CC:E1:19:57:47:04:69:6A:46:E4:5B:BF:35
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 019877BFD8891C4C9D4EA34DB76719F3E285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0906
Signing time: Tue 05 Aug 2025 01:01:58 +0000
Manifest this update: Tue 05 Aug 2025 01:01:58 +0000
Manifest next update: Wed 06 Aug 2025 01:01:58 +0000
Files and hashes: 1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: vAw9A84wwVfOPUFRsn6MNa8iOetkbIQSwP6NdRlD/Zk=)
3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
4: kMR-QfeDtCXrH6KaC8fd3q46UD0.roa (hash: 3G94bGBmGhHgTXEu5GeWzI4ZUQXww57vFy+evvpPr2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:bf:d8:89:1c:4c:9d:4e:a3:4d:b7:67:19:f3:e2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Aug 5 01:01:58 2025 GMT
Not After : Aug 6 01:01:58 2025 GMT
Subject: CN=3516e7a02a6345cce119574704696a46e45bbf35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b3:dc:b9:1b:c9:14:96:0c:d1:80:d9:07:98:
29:c1:a9:52:e1:97:5e:7e:e3:70:7e:9b:30:07:08:
50:70:79:dc:a3:21:55:44:65:fe:8e:84:df:ae:52:
fd:bf:c6:79:aa:54:40:a1:b0:5b:29:31:ce:07:02:
1d:a0:f6:7c:ff:59:54:60:ac:88:67:c8:7c:d7:4d:
12:12:81:3f:d1:bd:3d:1d:a2:63:95:d8:87:70:a0:
43:82:c9:93:2c:89:6c:fe:1e:a0:d4:a3:f0:33:0e:
e7:70:49:d3:8b:44:5f:0b:ad:89:7a:45:b4:d1:b1:
cc:5a:d7:4a:db:a6:83:a8:92:13:3b:2a:13:52:70:
7d:40:7e:8e:4f:42:ac:f1:f4:5b:5e:7d:61:b0:91:
da:69:cc:94:5c:04:02:55:9f:d7:7e:06:a1:98:a8:
a5:da:ca:b9:00:b0:36:f1:27:a5:10:4f:86:96:58:
45:ee:5b:99:14:7d:a1:02:96:66:37:f8:da:d0:be:
36:69:64:37:10:66:7f:d1:7a:ab:c5:c0:11:3c:2c:
76:84:54:17:35:0e:32:10:d9:db:b7:85:47:3a:b5:
09:d2:18:e4:ce:f8:bd:9d:91:f3:7b:36:0b:17:fa:
de:f4:9c:c7:14:bd:6a:d7:3f:ea:60:2a:0f:09:f7:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:16:E7:A0:2A:63:45:CC:E1:19:57:47:04:69:6A:46:E4:5B:BF:35
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:84:20:d4:ee:ea:6d:2b:37:9d:bc:72:2b:b1:0e:d0:b5:4a:
7e:45:4f:31:71:0c:b2:2a:2e:86:41:67:d3:3f:9a:b6:d5:73:
59:df:f3:fa:e9:ea:8d:11:ea:29:86:bb:76:a1:3b:04:1d:9b:
93:ec:00:63:17:06:bb:93:42:91:68:a4:e3:e0:4f:21:b5:ff:
e4:77:8b:bc:8d:79:c1:4f:7f:e0:71:98:e2:f7:c7:5e:2b:ba:
74:a3:af:cd:53:fc:b5:f0:cf:8e:0b:33:51:26:2b:3f:78:7e:
8a:e5:2b:a8:7c:fc:e0:e3:c6:ad:1a:cc:95:31:ef:f9:ef:fe:
33:7a:1c:63:ae:c6:5e:4f:97:b0:2b:1a:6d:b8:ce:e1:23:fb:
6c:47:3b:98:6f:e8:7c:ef:ba:4e:6c:3a:4e:5f:53:51:90:13:
da:63:96:75:32:77:d5:65:c8:09:f8:e6:3b:15:9a:fe:84:7f:
a3:21:61:ab:1a:5a:5f:e9:a8:c4:1f:34:b5:61:98:0b:c9:a9:
5a:b5:43:2d:b3:d3:61:de:cd:f7:bb:73:0f:a6:48:4c:81:b3:
24:42:53:43:23:b8:09:55:78:1b:df:d2:17:6f:c0:58:71:4e:
9b:d6:94:0b:20:3c:bd:24:73:51:db:c5:c6:d4:94:5f:41:59:
e4:80:01:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:11:57 2025 by rpki-client