Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: iBY/ZD8Z8kzvoi3LBUHWjyZf+tBWAIhazVyT3IDsKsA=
Subject key identifier: 3D:47:DB:6F:9B:AA:A8:6D:68:D7:35:12:5A:72:C8:91:DB:B7:8B:8A
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 01984A09D38CB10ECC8FBB544443880419CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 1039
Signing time: Sun 27 Jul 2025 04:00:14 +0000
Manifest this update: Sun 27 Jul 2025 04:00:14 +0000
Manifest next update: Mon 28 Jul 2025 04:00:14 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: R9DfeybyvnkpTVtewvcPiVcmc9Gk8PORrM4jqeJ/t+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d3:8c:b1:0e:cc:8f:bb:54:44:43:88:04:19:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Jul 27 04:00:14 2025 GMT
Not After : Jul 28 04:00:14 2025 GMT
Subject: CN=3d47db6f9baaa86d68d735125a72c891dbb78b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0f:84:51:20:b8:a8:d7:20:51:67:78:70:08:
bd:1d:cd:e6:7e:f6:67:b2:ec:25:41:c1:7d:35:c6:
5e:40:b0:ab:46:99:ff:3d:c1:ad:b4:d3:0d:95:62:
29:06:04:7e:b7:d7:67:d7:fc:69:44:7f:4f:fb:32:
6f:51:cf:1e:ae:9b:8a:74:bf:60:2f:9e:00:8a:f2:
b0:be:47:38:6d:a4:9b:93:5b:43:a5:6a:a9:9a:0a:
7e:5f:a1:c6:02:e2:c5:13:86:8f:ce:5b:f6:81:dd:
48:28:f0:6c:e5:02:39:6f:ac:66:0f:ef:b3:1b:c6:
cf:37:a9:c0:d7:1d:93:63:b0:16:51:23:d8:56:35:
fb:fb:f3:52:27:0a:a0:2a:7f:74:06:08:91:5d:66:
04:90:8b:3f:61:0c:89:91:fc:00:55:94:15:06:4e:
a5:47:03:ec:e5:8d:93:23:cd:93:c9:d5:2d:ca:00:
9d:e2:1b:0e:88:58:75:96:81:f3:e7:e9:32:a2:47:
a9:f5:1e:16:a8:ab:a8:2f:f9:2c:cc:c8:56:b2:6e:
ae:3a:9a:26:3a:b1:12:9b:b1:60:83:5c:f2:01:61:
a1:21:2b:2e:b7:eb:ac:55:8a:f0:da:c6:a8:a0:8b:
48:59:37:ba:a1:5b:5b:37:61:c8:6a:d9:d6:97:61:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:47:DB:6F:9B:AA:A8:6D:68:D7:35:12:5A:72:C8:91:DB:B7:8B:8A
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ba:21:41:f8:c8:8f:fd:46:5a:5c:94:f6:29:fe:c7:b8:01:
d6:12:ea:84:a7:7a:02:fe:d3:e5:5d:f9:a8:f2:f3:62:a0:5c:
d3:c3:ab:cd:e5:bf:62:f8:1d:d7:5a:9c:15:57:fe:9e:04:75:
c9:63:4e:42:0d:af:6b:9b:e8:d5:ed:99:69:56:89:87:49:d3:
3e:34:68:ae:64:8d:b0:8a:01:9d:d2:a2:5b:29:ca:01:0e:bb:
61:93:eb:51:6f:65:c9:09:25:35:bb:46:2c:11:8b:58:64:af:
22:10:80:3b:a2:e6:ef:2c:8e:db:7e:f4:a7:4a:27:35:68:b6:
c6:25:4c:00:ee:f7:03:5a:87:4d:cc:b3:49:d5:ae:4f:cf:e9:
bf:12:65:d0:16:09:cc:3a:92:c6:d9:2d:6e:e2:c6:37:1e:77:
2e:37:81:ba:4e:5b:c2:63:b9:04:f6:ab:1c:bc:eb:88:64:53:
ba:d2:9b:2b:af:fb:b8:aa:09:a8:2e:36:d5:78:5d:d5:43:58:
8b:42:f9:0b:0e:12:1e:88:99:7f:43:52:44:61:8a:18:86:13:
16:ef:5f:2d:6f:de:e0:81:57:f3:f9:21:c0:68:1e:4f:5b:5e:
48:9c:b9:2d:72:ad:9e:0b:8b:ec:ac:0f:81:40:f3:86:2f:c6:
a8:54:86:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:37:32 2025 by rpki-client