Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: m4xpBFuEb5KQIZktw9XgmJDJijWnZIBgCOchlbOWTjk=
Subject key identifier: 63:F3:A1:5C:8E:CA:6F:F1:B7:A3:20:82:09:80:CC:A7:BB:F9:86:78
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 0199221E92115BB32A51C83B274B37A45083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 10F9
Signing time: Sun 07 Sep 2025 03:00:52 +0000
Manifest this update: Sun 07 Sep 2025 03:00:52 +0000
Manifest next update: Mon 08 Sep 2025 03:00:52 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: W3f3t+iVeKm10ddul0eP+rdIRGP9QKgePfPfLRcD9AA=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:92:11:5b:b3:2a:51:c8:3b:27:4b:37:a4:50:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Sep 7 03:00:52 2025 GMT
Not After : Sep 8 03:00:52 2025 GMT
Subject: CN=63f3a15c8eca6ff1b7a320820980cca7bbf98678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:50:a9:5b:fa:9f:8b:e8:34:b8:84:a5:d8:cf:
ba:7b:3e:ab:19:35:5f:49:c4:df:77:2b:70:64:3a:
e7:26:b0:a9:d8:12:ad:d8:0f:e3:6b:70:a0:26:b8:
a1:12:1e:b3:f3:e1:f2:c9:97:04:7d:c4:db:2d:01:
c6:fa:01:71:4b:ae:47:15:59:15:2c:da:74:90:dc:
67:8d:b2:c4:96:a3:20:58:c6:ad:47:23:5a:c2:ec:
48:cb:e6:f3:79:e8:34:08:8e:e8:e6:0e:43:01:04:
bf:9a:a6:8e:fd:77:19:7b:d7:34:3f:dc:1f:02:4f:
06:30:25:4f:08:75:0f:e2:10:3d:06:60:38:3c:fe:
cd:ff:84:e3:97:9a:bc:70:9b:77:30:2b:b5:a3:ac:
29:99:19:c1:6e:cf:d5:5a:89:a6:2a:e1:44:f6:7f:
54:99:c7:8b:d1:fc:35:18:53:db:b6:31:dd:f9:fa:
ae:bb:f8:4a:38:d0:bb:40:34:50:63:ee:fe:e8:bf:
06:d3:44:b3:5d:5c:52:a1:4a:01:11:5f:78:ef:9b:
63:e9:fe:ee:48:45:55:12:30:95:01:54:53:4a:33:
50:77:4f:83:06:a7:3a:a7:88:cd:03:1c:2f:a7:e1:
c5:47:d8:e5:80:7f:12:d7:6f:4f:68:cd:25:66:00:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:A1:5C:8E:CA:6F:F1:B7:A3:20:82:09:80:CC:A7:BB:F9:86:78
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:30:49:80:fa:e2:c0:98:af:e4:23:f3:40:61:7e:b9:df:6b:
4e:69:61:82:5f:17:b0:f6:27:ab:e4:64:af:1a:ec:d6:f0:4d:
3b:2a:14:8a:14:fb:1b:e8:5a:ae:4d:89:f8:63:89:ca:93:ca:
d2:3d:2a:cf:8b:69:1d:de:35:fd:79:9b:49:ec:99:75:25:49:
9d:e7:cc:4a:c3:dc:92:04:fa:53:89:ac:32:19:c0:90:e3:1b:
c2:16:52:68:f9:a3:ec:33:ff:25:e7:8a:4b:dd:4a:01:54:95:
76:c8:50:60:d2:41:9b:67:2a:2d:d8:31:bd:45:b2:de:77:04:
ab:cd:bc:0e:c6:5f:ef:d9:e4:0c:b1:4c:3d:63:8d:c2:4f:aa:
3b:96:ad:ed:c8:dc:a6:01:35:0b:d6:e7:76:d4:e1:01:50:74:
f0:f7:0f:08:0c:e9:f8:56:83:79:43:e3:2e:41:2a:13:8d:65:
cf:dc:a9:a2:d9:29:c0:90:75:0c:ec:16:e2:fc:a3:bf:e2:03:
1f:3a:9e:64:83:2b:d2:1e:45:0c:23:de:ab:44:98:d6:66:61:
ad:72:f0:98:ca:eb:58:e1:64:2f:7e:1d:ec:85:ac:7f:3b:99:
f7:6c:e9:fa:c5:e1:f5:6f:5c:ae:3f:0c:f2:18:e1:9c:3d:a8:
8c:87:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:26 2025 by rpki-client