
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: jnyanNoO6q/zIb6LB32jg0wqJ9Z8DiXmnGc1Njdi03I=
Subject key identifier: 13:E4:5B:33:34:1B:0F:43:9E:3C:1C:EF:2B:25:E9:12:38:95:E2:42
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 01984C2FC0CE7067A71AAFCB04A5361547CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0C8E
Signing time: Sun 27 Jul 2025 14:00:54 +0000
Manifest this update: Sun 27 Jul 2025 14:00:54 +0000
Manifest next update: Mon 28 Jul 2025 14:00:54 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: AczDTRVlyHmOjOQMWGERePAv+7QvIXdZrEptGR7cM1s=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:c0:ce:70:67:a7:1a:af:cb:04:a5:36:15:47:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jul 27 14:00:54 2025 GMT
Not After : Jul 28 14:00:54 2025 GMT
Subject: CN=13e45b33341b0f439e3c1cef2b25e9123895e242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:4e:93:ff:91:46:89:71:7e:37:9d:84:23:
62:82:2e:ba:17:32:3e:2a:4a:ea:e3:0f:28:8f:85:
7b:b6:7c:66:c7:47:d4:4c:96:a6:43:a9:fe:03:88:
35:ed:bc:ab:f8:d8:76:dc:f3:73:64:e1:ed:d4:07:
13:f1:29:b7:a1:31:c2:f2:f2:39:db:e4:d2:21:90:
c4:1e:6c:04:b8:11:7c:4d:c9:9a:91:32:e6:48:8e:
47:7f:99:4e:f3:30:9d:08:b0:17:10:27:39:43:a9:
ae:9b:1b:68:71:df:73:e6:43:15:25:c1:7d:9d:93:
39:d4:87:2a:56:78:a9:ef:b6:71:f7:53:1d:48:06:
45:b4:30:dc:f9:6e:5c:4e:db:54:c5:49:cc:fe:d9:
0c:42:66:c8:c8:2b:5a:1f:31:58:ab:d1:8c:c4:dd:
41:56:77:1a:f7:44:f6:1e:cb:77:8e:64:6e:23:90:
91:9b:c8:3f:54:04:dd:16:67:50:8a:99:12:9c:34:
09:61:90:b4:ab:67:4e:ad:3f:87:c6:38:e7:bb:5f:
b1:9a:54:6f:f2:67:28:55:68:db:93:76:05:0f:ac:
eb:21:64:20:34:71:3b:b4:69:e9:82:fc:1f:10:68:
10:10:c9:c7:f3:80:b5:6d:2b:53:05:3d:51:26:91:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E4:5B:33:34:1B:0F:43:9E:3C:1C:EF:2B:25:E9:12:38:95:E2:42
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:72:cd:22:f5:31:f2:3e:51:4c:25:4c:0e:15:79:e0:49:de:
fe:2e:0f:82:7c:25:15:93:12:0c:b2:23:1e:2e:00:b4:82:26:
ed:45:af:54:77:c0:40:7f:40:5d:dd:76:57:20:a4:5f:2e:b3:
cc:2d:dd:ee:81:b5:7a:8e:51:53:b8:eb:9f:5f:b4:5d:e4:98:
18:d4:d7:38:28:8f:7c:ff:8c:52:67:b5:0e:78:9d:52:ee:b9:
f9:52:93:b4:2c:68:c9:3b:dc:99:06:47:64:66:c4:a2:f4:5f:
66:89:11:16:b8:76:83:65:70:dd:a3:79:3b:45:50:eb:e3:1d:
13:11:2c:41:45:43:dd:5c:49:b3:0b:9a:d8:82:8e:6e:f8:91:
2f:8d:b8:b3:22:2e:01:e8:f8:11:b2:a9:fd:de:98:ea:ec:b2:
9e:c9:f4:8c:1a:3e:64:2e:51:f8:1d:26:a5:e9:21:73:f0:1d:
d1:47:65:e0:d9:cd:17:fa:7e:80:77:ea:20:50:4a:1e:ec:59:
60:f3:13:ed:0b:df:3e:23:1d:fc:d8:79:ad:ea:31:a6:c2:27:
e6:aa:c9:42:c5:c3:a6:dd:29:d6:38:44:33:5d:e1:c1:d4:5e:
04:a0:f6:d4:e4:5b:fa:6b:76:44:1f:eb:8d:20:14:95:7d:53:
ec:5e:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 17:33:01 2025 by rpki-client