Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: VA/bycn82KcbT13LCO2LecSMaluopo8a50lLfZQ0yqc=
Subject key identifier: 1D:F4:4F:04:D6:34:0F:4C:5C:DC:63:7D:16:77:9D:55:DD:A9:E0:F5
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 01983194381FAAEDAFC05AE838998D78800A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 158C
Signing time: Tue 22 Jul 2025 10:00:53 +0000
Manifest this update: Tue 22 Jul 2025 10:00:53 +0000
Manifest next update: Wed 23 Jul 2025 10:00:53 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: xeh+sI9k6nyxcT87nbx95l4UDL54+X8hUk/9spx917o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:94:38:1f:aa:ed:af:c0:5a:e8:38:99:8d:78:80:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jul 22 10:00:53 2025 GMT
Not After : Jul 23 10:00:53 2025 GMT
Subject: CN=1df44f04d6340f4c5cdc637d16779d55dda9e0f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:e0:23:84:f7:31:f5:c7:22:10:a5:ca:c5:
b6:9d:b6:f3:80:00:1c:bd:b9:a4:bd:24:96:87:05:
42:a4:39:c0:a9:11:4e:32:44:70:3f:65:ad:a8:89:
03:ca:41:86:5c:ee:2a:41:59:44:6f:6b:6f:2a:37:
de:59:fd:f2:a5:10:22:f1:6f:a8:ba:81:60:7f:bd:
a2:2c:74:94:2c:89:a8:11:21:06:65:14:54:09:fc:
2b:45:10:3b:84:08:66:c4:78:d7:e2:20:dd:03:20:
21:eb:2a:ce:62:c6:92:47:eb:0d:3b:86:aa:60:35:
e8:2c:e3:9b:c6:aa:64:01:93:fa:e2:9b:25:cd:f2:
41:f1:f7:58:ca:63:f6:25:6d:23:9c:44:2e:73:8c:
92:ab:31:02:3d:8c:31:36:ab:9b:02:62:7d:5e:cc:
03:28:10:0b:5b:00:6b:67:41:34:d8:42:46:b7:28:
22:ea:d5:92:24:da:4f:61:4f:be:83:ec:b3:dc:71:
1b:ad:24:f4:b8:65:5f:01:1a:38:9e:b7:6d:a5:0f:
4b:3c:f1:f5:5b:cb:39:8d:bc:20:aa:d0:78:1d:eb:
f6:09:02:8e:db:e7:0d:c6:92:b8:43:06:6e:88:22:
92:d3:40:c9:51:50:43:ba:aa:4a:78:07:9e:52:3c:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:4F:04:D6:34:0F:4C:5C:DC:63:7D:16:77:9D:55:DD:A9:E0:F5
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:29:3b:30:4a:39:01:9f:b6:ac:f3:b4:ab:7d:58:f0:4d:4a:
5b:d5:30:72:e1:1b:b3:de:6e:d7:8c:85:fb:5f:29:ed:5f:95:
05:a9:17:31:11:5a:c7:6b:49:4c:37:04:a6:cc:b7:8c:00:8f:
e5:8d:5f:21:6a:4e:33:99:52:0a:e0:c2:d3:aa:a7:e0:bc:20:
82:f8:5f:63:f1:80:71:74:9b:fe:36:85:9e:dd:3a:08:40:72:
63:4b:8e:b1:d4:fd:56:de:44:6c:d3:5f:f2:e7:80:f1:ff:cd:
95:91:b8:fc:de:a3:59:0d:79:c6:02:e0:75:24:6d:9a:a4:8a:
2d:80:b9:7b:01:ef:43:23:fc:df:df:ca:aa:47:75:da:68:cc:
3b:b6:9f:e6:eb:38:58:ff:a4:c2:1d:56:92:95:09:9a:2d:c2:
d3:74:0d:54:f0:16:41:d2:e6:3d:65:68:29:a0:76:06:4b:01:
40:be:a5:ac:bd:35:74:de:39:aa:3f:07:a7:46:78:1a:01:70:
80:f2:93:99:9e:a5:57:d9:a7:79:f7:70:3a:ab:86:69:88:93:
33:a4:8e:0f:fb:fa:5c:df:62:0e:ce:50:fd:87:b0:24:de:67:
77:28:4d:74:b7:ed:b2:84:92:4c:04:da:3f:fd:04:82:e8:6d:
5c:e1:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:56:40 2025 by rpki-client