Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
File: rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft (raw, json)
Hash identifier: 5LGPZPtZTiuhus1JFmVaCNmQ6ZyoGR36RKmF7QhbNu8=
Subject key identifier: A8:37:C8:C2:38:A2:3E:E2:12:03:B1:C0:95:89:D9:A7:6A:21:F9:30
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01984966D90E60D84961314020127EDD093C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
Manifest number: 1608
Signing time: Sun 27 Jul 2025 01:02:13 +0000
Manifest this update: Sun 27 Jul 2025 01:02:13 +0000
Manifest next update: Mon 28 Jul 2025 01:02:13 +0000
Files and hashes: 1: BAFnA8E_-fRHFvJR66V5dNg4Xzc.roa (hash: zli04q+UUFDZ6LvNlKF4wEZntdZy+cQL9il9Oh4rSZo=)
2: rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl (hash: +HnoiX8hNWx3XNMLMVBJ0RfrjXjsd7pvjHUZ4pl7rU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:d9:0e:60:d8:49:61:31:40:20:12:7e:dd:09:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Jul 27 01:02:13 2025 GMT
Not After : Jul 28 01:02:13 2025 GMT
Subject: CN=a837c8c238a23ee21203b1c09589d9a76a21f930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:a9:fa:85:3a:ca:b1:a2:de:24:f5:91:fd:
eb:fb:c9:7c:ec:08:03:31:40:a3:c6:55:56:07:43:
3d:73:98:ef:90:2c:a5:ad:9b:d6:ea:dd:e1:a0:28:
95:e8:e6:75:14:ac:7e:6f:c0:fe:30:1e:c2:18:09:
24:9d:77:94:2f:f2:4a:e5:76:60:55:5b:e7:bd:be:
71:ed:a8:c3:7b:4e:d9:96:c7:93:ef:2c:fc:5b:3e:
f7:23:a0:87:a6:d3:7a:03:74:10:67:da:50:97:a3:
d3:fe:cc:79:c2:0d:f4:18:3b:69:06:b0:5c:53:89:
69:1e:00:2f:4b:98:e0:9e:c1:3f:38:25:d1:78:55:
20:1c:bd:6c:dd:3a:10:a6:d7:94:75:0d:a8:41:ce:
02:5a:4b:91:8d:89:25:a2:f0:3d:7f:a2:52:fc:30:
1c:6a:f6:95:ef:2e:f7:df:d4:53:d1:3c:9b:91:c3:
c9:6e:95:5d:a9:59:a7:8f:f0:02:cc:0d:12:8c:f0:
2a:5c:2d:55:9e:1f:44:33:4f:20:6c:d9:ca:91:17:
5e:ec:00:f7:fa:0f:d8:27:b8:41:1a:ed:b6:17:99:
cb:03:df:75:34:f1:21:f0:81:94:48:f3:68:d4:35:
9d:ab:2c:51:9b:f6:5b:12:29:6d:9a:da:80:dc:6b:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:C8:C2:38:A2:3E:E2:12:03:B1:C0:95:89:D9:A7:6A:21:F9:30
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:52:aa:b2:06:cf:66:ac:c8:5d:f1:c7:58:ac:f9:ba:45:09:
c4:bb:8f:0e:91:ec:05:9c:40:d7:9c:01:a6:57:1e:62:b8:25:
d8:96:41:8e:83:a2:86:67:d5:41:9e:c9:de:b6:f7:c0:fb:c1:
7d:9e:6b:08:72:a0:8a:41:28:d8:ec:50:bb:12:93:39:e3:a0:
f1:39:2d:56:11:bd:4e:22:bf:a9:e4:97:fd:66:1c:c9:19:be:
37:30:71:4e:84:42:d6:0c:76:10:a2:19:b2:06:b1:41:ed:e3:
26:d4:6c:97:c3:41:2a:82:2e:d7:6e:35:ca:52:bd:38:cc:80:
89:19:a3:4c:bc:df:3f:c6:1e:9e:dc:2e:09:37:14:a9:f8:d8:
0f:66:81:4a:91:42:8a:09:ab:8d:2b:b7:27:d1:91:cb:c9:7e:
04:2f:9c:62:63:c1:88:3f:f6:70:c6:e0:19:b2:0c:24:ec:72:
07:2e:7f:54:cb:d3:62:de:a9:f3:fb:d4:a3:85:f9:26:28:16:
54:98:22:fc:9a:ae:7c:d2:c3:33:12:c1:92:39:78:4f:f0:ee:
f0:4c:df:77:fd:df:c2:f3:cf:b1:ba:6a:bf:ed:13:35:2e:d3:
9c:e2:77:1a:f3:9b:0b:67:b3:3e:f1:ef:c4:2e:62:5b:18:2d:
d0:61:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:51:29 2025 by rpki-client