Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: xKyHVVjuzonXx1xEPprlGP2DIdWYGIdcoyWgGZO8910=
Subject key identifier: CC:24:4E:73:C5:F4:91:B2:F3:ED:97:5F:9E:7A:67:1D:47:69:95:C0
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01984A0A5DE9C78BAA018F9B9894852AC3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 0ECC
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: l5EhwFmqERxQX34TiXNMTFd0Z+jQSvrJAnnunGfcIV0=)
2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5d:e9:c7:8b:aa:01:8f:9b:98:94:85:2a:c3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=cc244e73c5f491b2f3ed975f9e7a671d476995c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:ad:9b:a9:d1:98:8c:a7:77:7a:69:4c:48:
32:3b:b3:ae:56:9e:bb:94:bc:56:9b:93:f5:25:dc:
cb:1b:3f:c0:1b:79:d0:c7:15:16:3e:20:9c:4b:fb:
3f:83:76:4c:84:89:9b:b6:d1:32:61:ca:15:03:a8:
af:00:bc:23:5e:61:58:02:34:23:ba:30:28:43:63:
d5:ba:32:71:19:85:d5:ee:d0:73:c1:3a:75:41:5b:
75:2a:4f:93:74:2d:5b:a3:c7:6f:e1:83:1c:7e:47:
da:a1:46:dc:1c:1a:ea:bd:d8:ad:35:75:bb:c9:43:
c2:c2:96:a2:5c:f8:d4:58:87:46:56:a1:3d:78:7a:
52:2f:72:b0:a6:0f:62:76:b6:8d:10:31:39:ca:de:
6f:d8:4f:c5:e7:69:9e:82:ac:57:c8:ac:99:e3:33:
f4:8b:4c:a1:95:ea:15:e4:50:73:a9:0f:a2:6e:4f:
45:c4:04:ef:ed:ed:e5:6f:91:e2:21:1b:04:3e:e7:
15:29:e4:1a:bd:dd:71:ba:e3:f8:e7:e9:9b:c1:c2:
de:83:5c:e2:a9:3f:98:90:b2:b4:c6:d3:63:46:ba:
84:ec:61:b7:07:1f:29:a6:c6:58:ff:26:c4:06:2f:
d7:bf:fd:c2:61:1c:54:ec:73:6f:dd:d1:cb:9e:12:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:4E:73:C5:F4:91:B2:F3:ED:97:5F:9E:7A:67:1D:47:69:95:C0
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f2:b9:09:cb:ab:13:7c:89:dd:ba:76:07:25:5f:73:af:a4:
5d:9a:b3:81:c3:c8:33:65:87:55:28:13:f9:25:d7:b6:80:7e:
d9:d2:27:29:c4:fe:29:3b:7d:11:b3:3d:57:db:e3:5b:05:cd:
3d:a7:e5:6f:84:45:3a:5b:4b:a2:ce:8b:60:ca:53:91:52:bd:
b7:31:56:8b:43:e8:bb:91:75:89:36:77:28:c7:f4:f9:0f:20:
b7:8f:af:9f:b5:be:68:a6:6c:4a:37:0f:1b:a1:7d:ae:8e:6d:
15:94:68:19:9b:79:c1:5e:d4:d4:1d:d0:0a:b4:33:1a:03:53:
94:2c:2a:b1:c1:dd:c6:ea:9e:91:2c:3b:7c:bb:40:ed:bf:60:
02:f9:9d:0c:3e:0d:f9:a0:69:e8:23:05:6f:12:d6:34:f6:fd:
52:5f:e1:c3:b5:26:67:c1:03:b2:d9:30:83:bf:6e:7d:30:8c:
b6:b5:2e:d7:d8:8c:b5:ef:f4:da:af:ee:c9:e0:c3:ca:cf:62:
d6:0e:90:73:7e:08:a6:9d:fc:6a:2f:5f:bd:88:de:a0:c0:80:
d8:78:04:9b:5d:c9:da:ba:3c:c0:bd:ed:d6:e8:15:0c:5a:5d:
74:c8:89:ec:c1:26:3e:ab:9f:e6:32:21:3d:1e:d5:62:02:d1:
9e:3f:69:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:23 2025 by rpki-client