Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json)
Hash identifier: u2g/wF07pGfR6O2CoDLnURoakBal4p2US8NCuDMG7OY=
Subject key identifier: 0D:85:3E:E0:EB:48:A4:03:21:F2:CF:06:7D:6D:E9:23:F6:87:C6:F7
Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Certificate serial: 0198458A0AFA4B724423085AE9E9C46B0245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
Manifest number: 09EE
Signing time: Sat 26 Jul 2025 07:02:11 +0000
Manifest this update: Sat 26 Jul 2025 07:02:11 +0000
Manifest next update: Sun 27 Jul 2025 07:02:11 +0000
Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=)
2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: xmIigEFYaRNaUuwycr6kRAQdm9Msj+f0RhQp/6TZlg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:8a:0a:fa:4b:72:44:23:08:5a:e9:e9:c4:6b:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765
Validity
Not Before: Jul 26 07:02:11 2025 GMT
Not After : Jul 27 07:02:11 2025 GMT
Subject: CN=0d853ee0eb48a40321f2cf067d6de923f687c6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:77:da:e7:ab:d2:5b:e1:be:1e:f1:ca:3b:19:
8c:0d:ea:9e:55:0a:e5:21:59:54:4c:3a:60:1e:9d:
2d:03:af:af:bd:a6:c5:8e:69:cb:0b:8f:af:ff:80:
a3:54:33:6d:86:89:30:71:ea:8e:23:c8:ba:6d:a4:
b6:18:10:14:7b:57:16:df:71:c8:9a:29:f1:ee:b4:
4c:3b:d0:b2:67:9e:7a:f0:3e:3f:0f:92:59:e6:e8:
1e:0b:ea:cf:98:d1:41:f3:9c:53:96:ad:94:f6:f2:
35:74:b0:52:98:4e:47:0c:60:e8:d5:55:a6:df:c0:
ba:40:43:a8:72:75:9b:68:d3:45:0d:51:4b:59:3a:
5b:f4:d8:6d:66:b2:58:7d:b7:e1:6b:77:96:8b:63:
9e:7a:c6:ac:21:11:e7:00:9f:e3:06:c7:c1:28:fd:
fc:f9:9c:62:4c:4c:fe:0c:67:e6:12:75:6c:0e:4e:
90:67:83:c5:b5:16:e7:82:66:1b:2f:de:90:16:a9:
b8:6d:59:47:a5:91:05:30:78:ea:4f:5b:1f:21:18:
f1:e1:26:56:8a:b6:10:5f:3d:16:83:04:04:17:c3:
25:f1:27:86:fa:5e:fe:5f:fb:b7:da:1d:34:a9:1b:
51:e8:b7:21:3b:45:8c:5c:ce:03:47:8c:85:0b:9a:
9e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:3E:E0:EB:48:A4:03:21:F2:CF:06:7D:6D:E9:23:F6:87:C6:F7
X509v3 Authority Key Identifier:
keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ab:b4:41:b7:a2:1b:f5:97:d5:4a:54:a5:fc:bf:cd:32:66:
6a:68:f8:d1:30:fe:ed:06:53:7e:12:0b:ee:7c:19:8d:ef:ea:
6c:28:6e:e9:f7:07:cf:a7:7c:c1:11:d3:22:84:f1:0d:9c:a5:
62:32:e2:c4:13:bd:26:8a:34:c2:66:99:25:a1:2e:6d:bf:0c:
96:09:9c:e4:4b:ae:16:56:1b:13:4b:90:7e:ab:f9:74:6b:6f:
f7:a3:d8:9b:4b:43:ac:11:59:a2:ec:aa:ec:e2:b2:97:e0:e7:
d3:fc:65:12:28:bc:81:b3:bb:dd:da:15:37:06:7f:ec:d2:10:
00:0c:92:16:ad:11:a1:03:a6:81:90:0c:c8:cc:6f:5d:38:9f:
d9:b2:4f:46:1b:66:5f:56:6b:f1:11:42:5f:51:d3:cc:91:54:
0a:97:31:28:41:fd:aa:d2:ba:48:0c:ea:c5:a9:8e:e3:62:47:
13:2f:8c:eb:f3:4e:82:e2:d4:88:ee:bc:54:08:b6:5a:da:b2:
c7:7d:5e:f7:46:17:c0:d4:8a:97:59:7a:9c:e8:1e:43:7d:84:
54:9e:89:7e:ed:11:e4:93:48:ad:c1:b3:54:0d:26:49:9a:b8:
7a:8f:2d:15:73:07:68:10:df:f2:03:2f:19:b9:71:8a:9a:7a:
d4:5b:a4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:45:58 2025 by rpki-client