Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
File: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft (raw, json)
Hash identifier: MZaZ2aZHxMzYM4PfKejnChYrbfqWtX906IqVhhTJeWY=
Subject key identifier: D3:04:5E:E1:D0:4E:68:F4:DD:3F:E7:D1:82:72:DA:B6:B0:1C:70:02
Authority key identifier: D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
Certificate issuer: /CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Certificate serial: 019A05FF76907D2D3E79950B00AD5E352FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
Manifest number: 01A9
Signing time: Tue 21 Oct 2025 09:00:19 +0000
Manifest this update: Tue 21 Oct 2025 09:00:19 +0000
Manifest next update: Wed 22 Oct 2025 09:00:19 +0000
Files and hashes: 1: 0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl (hash: j4mnyEXExCOpn/nHhFISs528dJnIkSUyPmyvPOhKsPE=)
2: DAA3V7Ny77Nbi0lJGzYJGKYt6DI.roa (hash: 4vAYVdqW5eeQyGEWdrdX8a/OlxlAumaL/LiPR4Uozdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:76:90:7d:2d:3e:79:95:0b:00:ad:5e:35:2f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00f0e0a8e00f1a6d8c1c266e3f436d46e71e877
Validity
Not Before: Oct 21 09:00:19 2025 GMT
Not After : Oct 22 09:00:19 2025 GMT
Subject: CN=d3045ee1d04e68f4dd3fe7d18272dab6b01c7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:5f:18:7c:58:32:9c:1c:ee:21:37:09:ca:
a3:f3:46:7f:cd:28:92:e3:2e:93:31:8c:1f:35:98:
10:5e:0b:f8:83:f3:6b:19:8f:20:25:71:0d:e2:ce:
4b:6d:b3:07:b2:d5:86:03:5d:ab:f2:6c:ba:0d:20:
b2:4f:31:47:2b:9b:08:45:c2:77:5c:6b:15:4b:fe:
98:ea:33:70:1d:e4:a4:6d:e8:36:0c:e2:d9:60:6f:
de:97:52:ad:93:1f:fd:f6:49:0f:ed:78:ba:5c:5b:
12:38:96:c2:b9:ff:5e:66:e3:e7:df:68:ad:8e:2c:
50:85:eb:65:29:1c:f5:a7:07:c1:b8:83:e9:b7:ee:
a5:ee:f5:0d:68:d5:a2:77:41:32:79:60:1f:dd:2a:
d2:99:e1:8d:be:5d:16:cf:bc:7f:e6:39:51:da:1d:
8d:10:ad:79:1f:05:b5:f1:77:1d:8e:cc:43:9b:0f:
ee:96:af:1d:42:a9:f4:ef:ea:78:16:91:2d:49:0b:
f4:9c:6d:80:2d:06:cb:5e:e6:6e:9d:78:b4:2d:da:
de:03:27:42:43:f7:96:1a:33:a5:c7:8e:c5:8c:4c:
66:de:16:a1:ef:e6:f6:29:55:7d:a2:11:87:14:91:
d6:e7:f3:cd:f2:4a:3a:2c:5d:49:b5:ca:47:cd:72:
69:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:04:5E:E1:D0:4E:68:F4:DD:3F:E7:D1:82:72:DA:B6:B0:1C:70:02
X509v3 Authority Key Identifier:
keyid:D0:0F:0E:0A:8E:00:F1:A6:D8:C1:C2:66:E3:F4:36:D4:6E:71:E8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0A8OCo4A8abYwcJm4_Q21G5x6Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/3d4b40-ca7e-4472-b740-65ab0d351f27/1/0A8OCo4A8abYwcJm4_Q21G5x6Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5a:1c:7a:96:5e:9b:cc:48:4a:ad:79:8e:d2:95:d1:69:72:
85:e1:6f:63:61:a7:df:50:6b:01:d0:a1:c0:22:af:96:cc:73:
0d:f8:b7:1a:df:25:74:9e:38:34:86:1a:3c:2a:61:32:e8:6c:
fe:93:19:f0:dc:2b:c7:44:bd:8d:25:42:29:63:c4:bc:77:71:
0f:59:5f:e6:1b:ac:3b:a0:4d:04:1d:b8:31:d0:df:6e:a9:7a:
ac:21:05:e6:d1:3f:1b:97:2f:34:f8:60:b8:fc:ba:f3:5b:5b:
56:60:4c:81:a0:18:5e:e6:70:28:af:cb:53:1b:42:e8:bb:e2:
d9:35:9c:1b:61:91:09:f0:da:2e:56:57:3f:d2:66:d9:e1:7e:
f6:10:27:77:6e:20:02:fb:ce:55:73:cf:9f:04:58:ec:a7:d4:
60:41:c9:3e:83:50:ee:03:50:f0:19:9d:5d:6c:86:cf:58:c1:
5c:13:d9:8b:2a:a5:e6:cd:64:39:55:6c:55:76:be:b6:e1:7b:
42:08:b4:4f:9e:40:92:6a:a4:6c:e0:6a:4a:0b:09:e7:91:5c:
fe:7b:c9:4f:51:79:d6:c6:4a:8c:89:8e:f7:81:69:6e:c7:78:
8c:18:18:a7:49:86:fa:14:1a:c5:bb:16:68:cf:5d:f8:44:c9:
73:b4:78:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 18:19:42 2025 by rpki-client