Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File: 8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier: ssIBoOQkOHrb+3kP7Zyqnd3zn2DcfJIaYSLthLRhfsE=
Subject key identifier: 5C:84:5F:2E:63:2C:3C:3F:E8:70:D5:1C:CF:B5:12:39:8A:8A:F4:52
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer: /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial: 019828C7F68B95AB4C3053AF902425584D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number: 1B
Signing time: Sun 20 Jul 2025 17:00:49 +0000
Manifest this update: Sun 20 Jul 2025 17:00:49 +0000
Manifest next update: Mon 21 Jul 2025 17:00:49 +0000
Files and hashes: 1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: 6dT1xeY3kB5fhONJkNbLC8EDqoj4Daa+fCJ0Nh40lbw=)
2: O1NX1SHolf4Je2aEzJJZvHyU16A.roa (hash: po5PkDRV33bzHbue9Doph6bDM4MKCS5aDFumD95q9kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:c7:f6:8b:95:ab:4c:30:53:af:90:24:25:58:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
Validity
Not Before: Jul 20 17:00:49 2025 GMT
Not After : Jul 21 17:00:49 2025 GMT
Subject: CN=5c845f2e632c3c3fe870d51ccfb512398a8af452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:84:a2:22:6a:13:d3:fc:66:4f:d6:a4:9e:
93:f9:32:5e:17:23:dc:81:0e:23:59:3e:c7:8b:2c:
a4:58:bc:3e:81:59:27:0a:67:87:ec:68:2c:2d:fe:
ae:e3:a7:52:4e:06:31:dd:41:48:d5:6f:4c:89:13:
fa:2a:df:2f:60:5d:bf:42:51:2d:1b:9b:22:0f:d6:
4a:10:d7:ee:ee:a0:81:29:76:99:9d:51:2f:73:be:
25:1b:9d:b5:00:01:f8:5c:b3:92:8a:5e:7d:d4:df:
e0:ae:ab:b1:66:45:c7:d9:02:b9:17:21:2b:c0:a1:
08:74:02:f5:9f:f8:85:05:c4:40:d4:2b:0c:c3:f1:
fa:ab:d8:e9:83:1f:e9:80:da:b3:6b:07:df:02:a1:
24:f1:35:b3:ef:76:fa:0d:2c:6a:c8:87:b3:39:c9:
43:5b:bd:62:5a:86:98:cb:4d:cd:35:26:b6:30:47:
e1:64:3e:46:53:be:b0:25:fb:83:a3:74:27:34:55:
92:6a:83:a8:6a:fe:ce:6c:02:e8:e8:74:6f:a9:f1:
bf:91:1b:dd:fc:40:7f:5d:fc:95:eb:43:44:f2:c7:
d9:65:e7:2e:03:09:4a:b4:3f:82:dd:fe:09:ed:d4:
07:fc:86:9f:db:84:8c:a9:14:be:c8:54:d2:49:e3:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:84:5F:2E:63:2C:3C:3F:E8:70:D5:1C:CF:B5:12:39:8A:8A:F4:52
X509v3 Authority Key Identifier:
keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:25:61:a2:6e:a6:10:5e:ed:9f:08:86:9c:47:dc:91:bc:0a:
ff:3d:bf:db:6f:c2:06:a8:23:72:b2:d3:cd:a8:73:46:55:36:
15:6c:52:be:93:70:2e:54:86:78:5d:62:09:7f:a8:70:ce:c9:
5d:96:67:f8:35:8f:01:b1:55:e0:7c:60:57:d9:df:0d:42:99:
03:87:86:6a:8a:10:be:a5:66:2a:59:11:b6:f0:5b:f6:a8:e1:
90:31:2c:0e:c4:58:a6:3c:ea:22:40:21:b3:bf:1a:52:cf:16:
9a:57:51:a4:9a:af:ea:87:37:b4:b9:6a:47:1c:c1:f4:f6:4f:
90:af:a8:6f:e1:ae:15:03:a5:b3:56:ea:40:42:a3:bf:30:33:
ed:8b:3f:b8:72:10:a3:b7:71:42:dd:8a:55:8d:41:5f:54:e9:
b8:f6:3d:10:75:02:22:3d:9f:0c:a2:75:e0:f0:d0:b0:13:2a:
48:c9:06:2b:48:c4:5e:a5:7e:df:15:40:80:ec:5a:fb:f1:9b:
d1:95:18:c1:b8:8c:74:94:7e:07:20:22:d0:31:09:7b:ed:c8:
75:2e:11:69:08:95:50:49:22:50:cb:bc:30:79:1d:46:6f:3b:
d0:7d:e5:0c:74:75:79:93:ab:f3:da:a2:fd:f7:8f:c2:dc:c7:
7a:fe:00:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:16:45 2025 by rpki-client