Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
File: o8igyniYQoP6uYbJuApbBAl35VY.mft (raw, json)
Hash identifier: tkY2Cun8+OUWvCJW8MJh9jNDXEkw3y5rB5VFtaRhTVQ=
Subject key identifier: C9:3F:6C:D8:C3:BA:8A:74:E6:D4:8B:6D:09:C2:7F:AF:32:48:03:0A
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 01984A40E540DDE2FE251EE3D650A334F82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 05:00:23 +0000
Manifest this update: Sun 27 Jul 2025 05:00:23 +0000
Manifest next update: Mon 28 Jul 2025 05:00:23 +0000
Files and hashes: 1: 2dCQLf2c8rJJ6iCQKe0e6vINyPk.roa (hash: SEFpdbMTDaaA3AA3UouB55T1ZZTJCyUohOoSjbS+NbY=)
2: S590SXJakiMm1tsWzi1G9Qgs-eo.roa (hash: 3PI1IRmRMy2Dl683V5IPqONj9wz5d+QDZfRjIsrHO1I=)
3: o8igyniYQoP6uYbJuApbBAl35VY.crl (hash: a2SpPmfXcS4br4CVr4D/PkMccyEA4ZOqnlmtOdEOM7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e5:40:dd:e2:fe:25:1e:e3:d6:50:a3:34:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jul 27 05:00:23 2025 GMT
Not After : Jul 28 05:00:23 2025 GMT
Subject: CN=c93f6cd8c3ba8a74e6d48b6d09c27faf3248030a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:a9:2c:02:5e:b3:85:ca:92:13:84:ef:cf:
fc:80:91:70:09:54:ea:2c:a4:72:01:31:0e:be:91:
2d:86:f3:cc:7e:81:2a:3a:70:2a:cb:e8:3c:52:7b:
f3:6f:bd:3a:4a:eb:72:7f:04:fd:d2:15:56:18:31:
b4:dd:9b:db:6a:cd:8c:4a:81:f1:98:c1:c1:1b:ae:
57:a4:e6:bf:c8:5d:0d:23:6d:bd:70:50:52:78:e3:
83:8b:3c:5f:72:d0:49:c8:ec:49:d8:6d:e5:68:8b:
d6:8e:2d:e9:5b:5f:f2:26:6c:68:ac:f5:8a:a3:11:
eb:da:02:3c:b9:32:1b:e6:dd:53:ea:29:f2:8e:12:
d4:01:b4:8c:82:7a:ce:67:b0:0d:7d:0e:a8:6d:d3:
b9:b6:b1:c1:46:97:9d:21:84:43:ff:07:54:7b:97:
b0:ee:ea:15:bf:68:c6:6c:ee:12:b3:98:b9:a9:73:
f9:ff:68:db:fc:4f:13:a7:9f:56:ba:f1:bb:65:7a:
6d:57:e2:4e:bb:52:97:7f:1f:f0:41:97:4c:30:ae:
d6:c8:9f:b6:b9:a6:58:79:7f:1a:d2:f3:94:34:27:
33:d8:62:59:51:dc:02:c1:4b:97:51:39:8f:9c:e0:
0a:ad:68:7d:b1:d1:52:06:27:d5:b6:90:7c:2c:36:
6f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3F:6C:D8:C3:BA:8A:74:E6:D4:8B:6D:09:C2:7F:AF:32:48:03:0A
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:58:4b:0f:45:3b:6e:a7:3c:5b:6a:7c:fb:36:84:84:dd:b9:
7a:61:e4:2b:97:ce:c0:60:4d:88:be:46:3b:85:92:d2:0e:d0:
9c:70:10:e7:89:11:79:19:57:90:2a:28:b9:d3:f9:66:31:36:
27:d4:1b:d5:e0:e4:52:1e:0b:21:b0:99:e8:8d:5c:8b:7e:75:
29:2d:5a:3b:6a:3c:2c:88:de:68:e8:9a:34:a7:04:84:e4:49:
81:07:72:21:3a:85:84:89:7f:87:c2:a4:02:39:91:48:47:f5:
3a:b2:b9:3b:b4:73:fd:af:ef:4d:61:22:fa:af:b6:35:be:9a:
87:0a:8c:d6:5b:a1:b6:26:b0:03:cd:15:98:16:93:f3:e0:d4:
ea:1f:b4:5c:bf:85:6d:cc:00:05:c4:3f:e3:46:19:e4:53:e1:
c8:66:b0:31:5e:21:6e:8e:6a:f1:9a:04:8d:80:a3:71:93:6f:
be:7d:42:04:01:9b:e8:bb:82:78:82:15:2e:04:9c:88:0e:42:
e5:53:01:92:e3:38:4e:3f:04:84:e4:39:35:e5:fb:60:67:79:
3e:38:f7:51:9f:09:b9:5d:19:40:f5:a6:b4:90:33:ee:6f:8b:
6d:82:69:ae:55:fe:a2:01:c2:59:95:9d:96:91:d8:ef:46:a4:
cd:00:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:09 2025 by rpki-client