Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: cWf4T16Qqub+YZ7Ip9PgLxkeu8mL9Dzgb5JoH15qdjQ=
Subject key identifier: 9E:B6:F9:67:6A:C8:F9:E4:D9:FF:C7:EB:EF:24:EE:F5:86:2A:45:BD
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019849D3AF1CCA0836710B716ED15F377F99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: C3
Signing time: Sun 27 Jul 2025 03:01:06 +0000
Manifest this update: Sun 27 Jul 2025 03:01:06 +0000
Manifest next update: Mon 28 Jul 2025 03:01:06 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: +LhGwvRAodNTfEA4hiWYRTxs+O6S+Jkvk2f8oqmKwus=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:af:1c:ca:08:36:71:0b:71:6e:d1:5f:37:7f:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Jul 27 03:01:06 2025 GMT
Not After : Jul 28 03:01:06 2025 GMT
Subject: CN=9eb6f9676ac8f9e4d9ffc7ebef24eef5862a45bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:c8:4a:2d:a3:be:f0:06:bd:75:b1:e0:ab:
88:d6:e0:35:26:89:e5:b1:24:0e:da:c5:01:5d:48:
99:d0:c7:b9:ee:5e:cf:47:5d:e8:9d:c6:96:19:64:
3a:a8:00:36:f2:25:53:58:ff:e7:fa:70:8f:e0:6e:
66:03:17:d8:7c:6b:3c:e1:0c:49:e7:b8:8d:1b:80:
27:fc:cb:19:cd:0f:b6:11:c7:51:a5:7d:e5:36:91:
db:2f:6e:96:ed:09:d9:24:ab:8b:b2:20:97:df:b3:
2b:38:03:c6:5f:46:3d:6b:78:b8:88:9f:f0:ce:77:
07:b1:67:14:c7:32:bc:cd:68:e8:52:d9:c1:89:52:
f4:c9:be:a9:b6:43:66:41:69:b6:69:4e:b8:e0:04:
77:b4:7c:37:b0:6f:3d:07:e9:1f:ac:c4:7b:4e:ce:
61:eb:87:05:d5:6b:e5:e7:6a:e7:83:d7:85:9e:14:
ba:44:b7:4d:d3:4b:ce:2c:ca:94:64:4d:dd:e7:67:
3d:84:ef:83:f8:86:85:4c:3b:82:2e:c1:c7:46:da:
29:5f:39:51:eb:fb:af:50:be:2c:26:21:50:21:c0:
5e:1b:54:8d:8e:f2:75:e7:71:97:bb:15:11:8f:20:
7a:38:cf:97:32:5c:96:31:74:1a:d8:41:bb:fd:83:
81:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:F9:67:6A:C8:F9:E4:D9:FF:C7:EB:EF:24:EE:F5:86:2A:45:BD
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f3:a5:a0:a7:54:3d:12:43:69:a2:ef:94:6d:6f:18:58:ad:
88:f4:4f:2e:5a:a4:81:95:97:bb:e3:8f:a8:53:b5:47:67:d5:
e0:d2:e9:3a:9c:73:93:f9:59:9d:fb:e6:bf:99:10:2d:3b:2f:
99:8e:2b:98:93:b5:a7:12:15:34:db:92:c8:4e:e1:3b:ef:1c:
8c:88:f9:43:99:6e:61:30:48:b8:a3:f9:75:24:71:32:4a:41:
b4:53:aa:42:b2:5d:c3:c6:d1:bc:02:d6:c9:7f:30:dc:7d:87:
e2:e4:25:79:73:70:f6:ed:71:9c:54:20:54:01:f8:a6:4c:1b:
9f:da:33:28:09:12:64:ad:f0:ef:e2:05:c9:d9:c1:e1:30:80:
9f:df:be:12:2c:44:b8:d5:e1:67:39:14:b1:d7:13:5a:63:9f:
1f:c2:2c:82:a8:a9:e9:d3:51:2c:b8:4c:6e:62:97:bd:2c:61:
e5:fc:9c:3e:29:20:14:8e:d1:1d:50:5d:9c:ca:66:2e:fc:15:
ad:8e:39:30:42:c6:c9:02:16:d6:0d:73:f4:23:b4:b8:38:5d:
a7:a5:c9:f3:8d:ca:fe:e2:ba:d0:53:0c:35:97:21:3e:74:3a:
4a:68:a9:c4:70:ab:8b:c0:36:6c:c0:d9:bb:8d:cb:98:41:c7:
73:81:ee:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:16:25 2025 by rpki-client