Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: SaBP8XLqFcxgaJsmynt1Iq0bxEjc4ePJYcnwNjbjh4s=
Subject key identifier: D9:18:A9:DB:EB:BB:3F:42:0E:7A:C2:E9:42:4E:DF:34:1B:80:B4:DA
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 019926D7736BE964EB7AECC00205D07ECE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 160B
Signing time: Mon 08 Sep 2025 01:01:17 +0000
Manifest this update: Mon 08 Sep 2025 01:01:17 +0000
Manifest next update: Tue 09 Sep 2025 01:01:17 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: f2wVnOAjH9jQPhTS8z5J8IAIQxlIFdCzFMoGk59dx6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:73:6b:e9:64:eb:7a:ec:c0:02:05:d0:7e:ce:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Sep 8 01:01:17 2025 GMT
Not After : Sep 9 01:01:17 2025 GMT
Subject: CN=d918a9dbebbb3f420e7ac2e9424edf341b80b4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:01:cf:61:82:6f:57:e7:ac:58:53:f0:0b:26:
d1:d8:e1:7b:12:8a:b5:a7:87:2a:c4:fd:fd:cd:fd:
39:4c:dc:74:4c:bf:96:5f:cc:16:7c:d7:de:bd:44:
17:e6:dd:fc:ab:60:a9:42:20:5c:9d:a3:f9:a0:8d:
82:98:d2:bc:74:8a:d2:da:3e:9c:2b:4e:90:d1:fe:
82:28:1d:6e:5b:fc:f7:45:03:fd:b5:48:1d:4b:e5:
aa:a8:9f:0e:6b:35:5c:03:b4:bf:ba:d1:4d:8a:aa:
7f:56:b0:67:46:fd:42:15:a4:c8:e3:3c:7d:cb:86:
7b:7e:3a:a8:53:ba:67:40:ad:0f:2d:91:7e:14:b0:
d1:85:9d:a1:c3:7b:6b:30:03:e2:7c:e2:71:18:2e:
d5:5a:05:9e:e1:cd:1c:17:c6:0c:a3:27:79:40:b7:
f6:3b:42:30:de:45:0a:03:70:2a:7e:3c:8b:8b:54:
a3:59:63:8b:d4:df:50:72:a8:fe:a2:d0:1e:06:8c:
44:1c:7c:3c:4d:b1:01:32:cf:d4:88:f2:4f:4c:5a:
85:47:7c:4f:fb:71:01:1c:0b:8d:c5:74:24:4c:84:
3a:b3:ee:7a:71:f3:3e:1a:71:7f:1a:20:52:b0:80:
f8:a8:d8:a5:74:cb:55:3b:26:13:6a:3b:75:aa:f3:
5d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:A9:DB:EB:BB:3F:42:0E:7A:C2:E9:42:4E:DF:34:1B:80:B4:DA
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f1:d0:2a:7d:ef:8b:41:e1:1a:e3:c4:09:d9:02:35:b2:0c:
c9:17:c2:c9:93:25:3f:06:ed:17:93:a4:21:a7:56:e6:66:ea:
e0:51:df:ad:78:17:80:d4:fb:61:38:84:e7:43:88:13:76:13:
f3:67:5a:b3:84:98:d0:a8:b4:55:d8:5b:88:a6:fd:8f:9c:8c:
98:7d:80:81:d3:87:9b:bb:53:a9:72:8d:cf:25:83:12:2d:61:
53:8a:30:f0:4a:d0:b4:e9:dd:97:15:cc:7d:07:9b:98:02:20:
b2:4a:21:c0:8f:d2:41:88:15:70:c2:e6:c5:c6:b2:65:a1:1c:
8e:ec:cd:f9:3d:bb:d2:3f:ae:37:ad:b3:fb:4a:0b:0d:4b:6f:
20:df:4b:06:0a:61:60:8c:2f:47:5f:a3:ac:49:81:58:79:82:
63:9f:96:89:b9:51:4d:79:85:9b:ae:57:06:62:8c:ae:f0:5b:
79:53:d4:ec:44:0e:7a:f8:13:4b:34:4e:31:0d:44:f9:54:80:
f9:36:7c:1d:d3:a1:2b:f5:f2:f8:32:aa:74:3b:a6:3e:c2:72:
80:98:8f:10:91:1f:46:73:bf:41:83:85:4d:b3:ba:7f:79:47:
70:6a:41:7d:b8:1f:f0:77:14:2d:6c:c2:3c:9f:43:db:aa:d8:
fd:5e:92:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:04:21 2025 by rpki-client