Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: t7m982BJE/VlBq8bnQTt0UPZBk5NeIDRkWEhtMYbKnc=
Subject key identifier: 07:CF:CA:FA:E9:8D:5F:A1:F8:3A:41:43:F5:97:24:F1:11:24:67:2D
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 019923A0B72284086768E844C65B667EF968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0F24
Signing time: Sun 07 Sep 2025 10:02:38 +0000
Manifest this update: Sun 07 Sep 2025 10:02:38 +0000
Manifest next update: Mon 08 Sep 2025 10:02:38 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: UN3V7hPSd5MLT+8u+qvzTkFQrL2yk241TrjpjpisqCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:b7:22:84:08:67:68:e8:44:c6:5b:66:7e:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Sep 7 10:02:38 2025 GMT
Not After : Sep 8 10:02:38 2025 GMT
Subject: CN=07cfcafae98d5fa1f83a4143f59724f11124672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:9e:50:bc:39:61:05:6f:58:1e:6b:6b:df:
59:39:44:e1:d0:07:37:ab:b8:01:93:d3:e0:ce:ba:
67:24:4d:e6:ea:71:d6:4f:c5:dc:14:32:a4:ce:41:
a1:52:c3:05:a1:da:a1:89:ea:94:02:66:d8:5e:30:
30:0b:16:a5:f6:90:b2:b9:ec:d9:9d:bf:10:2f:ec:
1b:04:75:ae:3a:9c:97:da:69:b8:2c:bb:9d:75:d5:
ae:45:b4:4f:b4:4c:7c:da:d6:ce:2c:9e:97:3a:33:
ec:5c:6c:85:02:5e:a1:4f:8c:c7:c7:b8:28:d9:8d:
05:99:16:00:d4:a6:2d:55:3b:7f:5b:d4:77:07:10:
5d:f6:d5:50:e3:ea:2f:8d:98:5c:d3:0a:4c:31:e4:
78:47:a1:34:1b:dc:52:b6:13:c9:02:44:31:85:28:
f2:89:0d:42:78:29:ae:68:55:b9:39:87:e7:e5:61:
09:1c:6d:0a:50:15:94:f6:57:d5:ae:a1:c6:4b:49:
3a:c7:b8:65:5d:07:58:de:53:53:4f:e4:04:21:46:
99:32:25:86:a0:53:c6:30:bf:4a:6f:60:50:32:06:
5a:2e:fa:7f:f0:ef:f8:bb:7c:a0:e7:53:8c:13:8f:
96:71:23:36:79:85:e3:6f:56:da:4f:1c:86:d2:8b:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CF:CA:FA:E9:8D:5F:A1:F8:3A:41:43:F5:97:24:F1:11:24:67:2D
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:3d:f3:cf:23:22:26:36:51:93:18:cd:ab:0d:37:18:12:
d9:54:41:f3:e0:49:6f:01:c3:97:5d:16:24:26:45:de:96:3b:
c5:cf:86:db:da:35:02:9d:51:ea:3d:3d:66:c6:5c:74:42:83:
79:ef:5a:ab:39:05:e7:96:5d:b8:b6:bd:da:e3:f2:c5:e2:ac:
38:eb:15:fd:cb:a7:20:a9:d2:88:7c:de:e7:89:7d:98:f6:c9:
84:05:d6:62:3f:58:f9:60:21:2c:53:b2:d5:cf:df:72:eb:56:
67:ae:5e:da:62:7a:0c:06:13:c9:ef:29:d2:55:66:41:e9:63:
01:75:32:17:cd:42:4f:38:69:4a:75:ec:d4:ec:3e:6f:f6:47:
c1:10:2f:cd:90:4e:da:4c:fa:07:a7:7b:33:2e:d2:59:83:5f:
44:cb:ec:9d:82:0c:2b:fe:9e:f5:21:1c:7d:95:93:51:e2:c8:
33:44:04:7a:31:ce:31:e7:cf:8d:a9:10:45:10:6f:a8:88:d1:
a3:20:f7:fc:09:7f:a2:b1:c9:e3:cd:23:cf:a8:f9:67:3e:b5:
eb:36:c0:0f:83:33:96:1d:46:1a:9a:bb:4e:98:0f:80:29:33:
ce:da:dc:e2:05:28:20:5f:88:22:d5:ea:50:7c:e3:b5:56:2c:
ad:9c:4d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:14 2025 by rpki-client