Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: qnxyFbKn/kdvtAyTXBZkDBpxU9UEawkSopPDX74P0ns=
Subject key identifier: C0:78:51:10:BC:53:43:CF:60:89:6A:08:99:38:26:4B:52:49:C9:1B
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 01982710B659F45CC7FF646EF975D93FE9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1077
Signing time: Sun 20 Jul 2025 09:01:03 +0000
Manifest this update: Sun 20 Jul 2025 09:01:03 +0000
Manifest next update: Mon 21 Jul 2025 09:01:03 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: xx8RYoYPCxzObIbQuQgp7MFPlYB2rcWXpa9OvxJ5Ids=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:b6:59:f4:5c:c7:ff:64:6e:f9:75:d9:3f:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jul 20 09:01:03 2025 GMT
Not After : Jul 21 09:01:03 2025 GMT
Subject: CN=c0785110bc5343cf60896a089938264b5249c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ef:10:31:20:05:31:f5:ec:7b:7f:3f:a6:21:
7f:f4:14:2d:1e:7d:09:c5:e3:10:61:0e:77:cc:49:
81:b0:29:5c:74:b8:f3:22:8e:83:63:81:33:34:94:
f1:06:7b:36:3f:fb:9c:63:25:89:4b:9b:f8:ce:b0:
65:fe:1d:3a:49:91:67:0c:e3:83:42:94:ec:97:9b:
5a:fb:1f:b0:17:43:24:b6:ba:ec:7c:53:23:9d:9d:
ec:80:8c:41:46:a9:39:38:13:7e:95:00:0b:b0:ed:
2e:49:1a:6d:46:7b:e7:7b:44:b7:23:d8:19:b0:4e:
e2:7c:cf:b9:7c:b3:05:7a:cc:54:77:86:f8:6e:3b:
e6:8d:3a:c9:f5:ae:9f:ea:a5:a1:3f:e1:41:33:50:
b3:63:68:20:2c:45:2e:f2:80:42:4b:e2:bb:40:84:
1c:30:ae:e2:19:c2:44:29:7b:53:49:d1:1c:ac:68:
00:24:30:a5:9f:43:d2:c4:a4:50:7b:d7:02:a3:e9:
db:36:54:2d:35:9d:b6:c1:2f:99:3d:ed:47:ec:d3:
52:e4:da:0b:ff:10:f9:ea:b3:46:59:34:99:f4:06:
e9:e7:a0:b0:db:40:56:a5:32:4b:95:28:3c:de:3d:
44:d5:79:f2:c0:1a:3b:83:76:37:4e:c9:02:93:69:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:78:51:10:BC:53:43:CF:60:89:6A:08:99:38:26:4B:52:49:C9:1B
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:3b:1d:9d:5c:55:61:83:1a:62:6d:62:eb:51:16:5c:45:52:
6b:da:dd:89:5b:c4:dc:86:da:00:37:e0:9c:95:6a:84:d0:7e:
c0:eb:85:c6:b5:ac:87:2c:a4:2c:d2:ba:e3:de:8d:84:d4:73:
e7:ee:b3:14:fd:85:cb:38:ae:e6:1a:d4:35:22:02:f1:1d:87:
a3:dc:14:6a:c1:bd:81:c8:13:9d:c8:d3:47:8e:e7:bd:30:4f:
01:21:79:02:7b:b9:16:a8:64:1b:0f:ef:2a:37:00:1a:2e:54:
f1:75:2f:5d:05:be:b3:a6:49:e5:e1:fc:bd:86:00:97:cd:af:
86:14:87:b6:cd:40:00:3e:be:da:e4:c7:a3:f0:1f:d0:37:6d:
9d:9b:34:99:0b:04:8c:5e:7c:a8:36:5b:9e:37:12:16:c2:c0:
50:90:21:e7:98:9d:f8:ae:d9:47:ea:dc:cd:ff:80:97:65:5f:
83:7d:21:9e:11:4e:f2:ce:b6:18:53:3f:f5:99:11:24:3e:8f:
3d:be:61:53:b0:02:6c:ab:0e:60:3d:82:a5:89:5a:13:fa:25:
01:50:d2:1a:29:a1:3a:3c:7f:ea:be:9c:82:39:d7:21:c2:93:
85:08:8f:39:1b:04:85:4a:ab:4c:21:3b:f0:e3:b1:13:a0:e6:
b0:4c:e0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:21 2025 by rpki-client