Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: gdfq5uET0seYoFGq+p/QaZL1A9uNfSK5ciSsKoO/CyM=
Subject key identifier: 0D:9F:FA:C2:BA:BC:C6:51:C1:9F:F0:55:36:45:5B:65:54:F4:B2:22
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 019835DE77C0CDF248F0F2FAEE94DEEE1C9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 08D5
Signing time: Wed 23 Jul 2025 06:00:28 +0000
Manifest this update: Wed 23 Jul 2025 06:00:28 +0000
Manifest next update: Thu 24 Jul 2025 06:00:28 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: AE6M38qkv9nf50eTdPXgTvQhA6JGo2QDcsXDiWbfq4M=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
5: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
6: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
7: nx5Oe8_eex0Lfmh8SN1I5-K_L0c.roa (hash: aN95mG0hj7PK2XyXWR+TAHvEHR+mZTfAc87764WjQ2c=)
8: qOO5dT9W5xkoHAQL601E08xwv24.roa (hash: 1FhIPAsVstrUOOgTU9C0JI4gYu/byZYWA//QylDnCnw=)
9: zKcHHqm6nAgqTE-C4TiY0X7SueI.roa (hash: iZfl8ZghJZguA4a9LNsQfxENOVNQqLvAQQCUSQMWqeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:de:77:c0:cd:f2:48:f0:f2:fa:ee:94:de:ee:1c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 23 06:00:28 2025 GMT
Not After : Jul 24 06:00:28 2025 GMT
Subject: CN=0d9ffac2babcc651c19ff05536455b6554f4b222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:63:f3:25:45:be:23:ab:c5:c8:33:7b:ec:
3d:d2:1a:bc:92:a4:ef:a5:fb:c0:81:dc:06:6d:02:
2d:31:73:39:2f:82:6e:7d:e9:1d:2c:e0:92:e8:8f:
1b:e5:b8:6a:cd:81:b8:cd:7a:45:3a:ce:08:ee:33:
ae:7b:30:76:bc:66:ad:b6:5f:57:d7:02:8e:8a:0e:
a2:f0:95:20:e4:dd:ae:05:49:7b:10:96:ac:d4:72:
5f:6f:c8:3f:d7:f7:35:d9:96:c9:42:d3:a9:43:3e:
38:71:24:0d:6d:8e:49:17:09:96:43:1d:df:91:75:
e1:fe:19:1f:5c:c9:20:14:a8:e0:8e:c7:a7:e3:26:
cb:42:38:32:db:76:60:93:58:fd:49:d5:7b:8d:d2:
0e:5c:a8:27:38:64:af:6b:e5:19:c6:d6:77:ab:52:
88:5e:cb:61:c2:9e:01:e5:f3:bd:82:6c:a4:9d:94:
02:5c:2c:d8:37:c9:51:c5:45:b5:fa:e0:d8:a1:ce:
2f:d1:9b:aa:ac:c7:24:4a:77:d1:0e:ad:86:31:06:
62:12:58:6a:5d:8e:2b:48:d7:82:ef:b1:8c:54:0a:
ef:66:63:99:fe:91:6a:6c:0b:d7:f5:a3:11:50:c9:
c4:e1:2a:3f:f6:20:4f:29:ec:9c:13:0a:7a:90:b5:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9F:FA:C2:BA:BC:C6:51:C1:9F:F0:55:36:45:5B:65:54:F4:B2:22
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:40:ae:a5:98:63:c3:a1:0e:a5:a3:f1:67:05:85:85:f7:e4:
5a:e0:93:bb:2f:76:4a:2e:72:33:30:fa:0e:4d:0c:6f:52:ea:
5f:34:1d:40:54:0d:9d:9d:14:c4:82:01:62:60:e0:8a:03:09:
0b:02:4c:ce:fa:d7:51:13:84:bd:45:bb:da:db:d9:f9:a0:1a:
34:12:b2:f0:24:b3:27:af:10:28:42:61:ef:6e:85:f6:b1:5b:
8a:a0:df:5a:fa:32:6c:16:c2:35:df:bc:57:6d:c7:2b:e8:aa:
9d:35:61:1b:c1:2d:fa:2e:9b:27:ad:a4:c3:93:76:f8:e4:00:
e4:f2:83:ad:4a:00:12:0a:c0:0e:a8:51:10:b5:59:de:88:6d:
b2:0c:99:db:64:e6:72:b3:73:fb:b9:47:32:e8:fe:ae:57:f1:
10:ef:ee:3e:a9:12:e9:dd:a0:ac:65:4e:78:c5:72:38:60:14:
e1:a9:dd:91:82:dd:85:70:f1:8f:ef:a8:5a:ad:6d:61:be:6c:
14:50:d5:25:26:b3:99:84:46:a9:0c:8d:82:ee:f2:1f:9e:e5:
64:2c:0d:41:7c:79:48:77:ac:9e:bd:83:4f:0c:5e:ee:b9:0b:
48:eb:87:df:5b:cc:29:46:7a:3f:3e:c0:44:38:2f:71:3f:9d:
81:ba:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:44:58 2025 by rpki-client