Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: C/KwazSi/PtJDujD/5hUfl9ggGHGDqNT2v0xqZU02CM=
Subject key identifier: 03:0C:4F:AD:54:31:A7:24:0D:FE:08:4E:14:4C:29:80:98:8B:B3:47
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 01985268C9F8AEBC0025591A535977007B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0A64
Signing time: Mon 28 Jul 2025 19:00:55 +0000
Manifest this update: Mon 28 Jul 2025 19:00:55 +0000
Manifest next update: Tue 29 Jul 2025 19:00:55 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: nVY7FTv7hlCHETVAYEF87T6x5cuSRzQL0TjjjI1i8+M=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:c9:f8:ae:bc:00:25:59:1a:53:59:77:00:7b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Jul 28 19:00:55 2025 GMT
Not After : Jul 29 19:00:55 2025 GMT
Subject: CN=030c4fad5431a7240dfe084e144c2980988bb347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:2e:f5:21:96:09:0e:0b:c2:6d:af:c4:82:
da:42:e1:3e:4e:37:a9:01:65:99:ce:a0:ec:48:29:
d7:64:b4:1e:7e:b6:d9:a9:0b:f5:74:ee:bc:e3:4e:
3e:bf:94:cd:73:55:f7:f7:28:24:fc:99:fe:0a:42:
44:2c:a7:88:7d:b4:42:25:2c:d4:50:35:73:29:00:
03:b3:48:fc:34:e5:28:24:20:f5:65:b4:23:45:8c:
f4:c5:68:ad:2a:3c:5a:26:5e:41:8d:a5:6f:4e:41:
87:54:cb:9f:24:58:c2:98:d4:ab:95:4e:60:2e:d5:
24:d9:2a:a0:58:f9:49:8e:25:c7:f2:0c:d3:a7:ea:
a6:9d:58:e2:87:c0:93:a2:29:90:a9:68:79:a6:2e:
c7:8a:8d:2f:7b:4d:cb:cb:a3:fa:c4:21:5d:21:dd:
1d:8d:9b:97:2b:0a:8a:53:67:ee:13:00:63:5d:ad:
f4:3f:3a:30:96:91:e7:41:d3:a6:c8:ac:38:bf:c9:
48:a5:7e:5c:56:cc:71:f6:de:7e:8d:da:b8:37:42:
1f:52:45:b6:3f:3c:ef:23:38:27:b2:66:ee:0e:5f:
d2:33:13:1c:fc:ef:42:9f:3b:20:e5:85:9e:df:b1:
c0:ae:74:87:bb:27:80:89:78:09:8a:94:b7:83:72:
7c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:4F:AD:54:31:A7:24:0D:FE:08:4E:14:4C:29:80:98:8B:B3:47
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:39:67:f0:5a:f3:26:df:65:63:a3:12:0b:81:be:1d:d3:a2:
e5:99:55:68:b2:0e:98:02:b1:cd:4e:72:b0:da:8e:a3:86:b7:
b3:d6:87:b6:51:bf:53:ba:af:05:56:ba:8e:e6:a6:ca:92:d5:
6c:3c:e0:4e:07:ac:aa:15:5a:b3:98:c3:4d:67:9f:82:32:42:
55:8a:ee:eb:0f:0e:f1:44:6b:b8:a7:ce:9e:01:e0:13:19:23:
0b:9d:fa:14:52:84:2a:01:f9:d4:7e:6f:49:c2:8b:fc:70:cd:
32:ac:4c:dc:38:41:c2:89:bf:d5:ee:50:2e:23:55:89:8d:5f:
73:49:58:3c:ce:46:31:77:c9:c0:25:d7:30:06:19:be:46:13:
2c:71:f9:e4:5b:7c:63:cb:aa:2f:10:4f:5a:4f:ff:19:96:a7:
11:f3:3b:59:8b:74:6e:92:19:c2:4f:1e:fa:14:11:c6:4d:76:
2f:a2:07:1e:3b:51:9f:71:ba:57:2c:42:4f:8a:42:34:b7:cb:
9f:bf:b3:32:4c:e4:d1:68:25:98:14:80:3c:8a:04:d9:4d:78:
6f:1e:7f:44:bb:e0:4a:29:29:33:9e:39:ae:3c:b1:e1:32:85:
93:7d:c0:2d:64:43:bb:b7:0e:c4:c6:e6:c3:6d:2e:e8:5f:66:
05:b0:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:14 2025 by rpki-client