Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: tsqWsq9RZ3VQNFaqJmXrBDr1C99g+uPEY404OdlobBA=
Subject key identifier: 6C:E7:7F:62:66:A0:91:59:C5:E3:01:61:D0:68:0D:9C:8C:30:BD:8D
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 0199228D31D06D0ED93C315226491E702DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: C4
Signing time: Sun 07 Sep 2025 05:01:42 +0000
Manifest this update: Sun 07 Sep 2025 05:01:42 +0000
Manifest next update: Mon 08 Sep 2025 05:01:42 +0000
Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=)
2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: 1Yh/Z+cKUOUMKqrkNWERh9aHcibSetGKl0XdUW1ej/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:31:d0:6d:0e:d9:3c:31:52:26:49:1e:70:2d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Sep 7 05:01:42 2025 GMT
Not After : Sep 8 05:01:42 2025 GMT
Subject: CN=6ce77f6266a09159c5e30161d0680d9c8c30bd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e4:a1:d1:13:2b:d1:ba:3f:70:4e:36:76:b6:
31:4c:3e:2d:60:a6:d4:60:2c:21:d6:1e:41:a1:de:
e9:16:37:70:36:68:27:f2:03:e6:24:e9:da:91:0c:
4d:58:07:94:7f:a8:d1:a1:be:e1:d0:ff:2a:3a:c9:
0d:f5:49:d5:6d:cb:21:7e:00:0f:21:e0:68:e6:ec:
bd:0c:63:45:a2:49:e3:9a:a5:e3:4a:17:e6:c7:1c:
26:64:14:be:10:24:b6:ad:72:bd:c0:4e:34:78:72:
d4:f2:c0:da:3f:64:ec:6a:0b:c5:c6:45:04:83:40:
b2:88:03:2f:48:8a:f2:11:06:a5:8d:0a:f5:68:40:
3c:7b:80:d0:84:78:37:e3:70:ab:e9:8c:71:b8:54:
2c:94:1a:6b:71:e8:32:fc:3e:60:95:a3:05:df:1f:
57:3e:28:93:50:e1:6d:d5:dc:0b:22:d8:f2:9f:0e:
39:2b:9e:28:66:13:7c:59:c3:40:ca:c5:6d:fe:25:
2e:3f:a1:a6:90:cd:4f:a5:f0:fa:79:8e:8a:6b:5a:
ee:e3:17:49:23:50:94:4a:eb:af:bd:d8:d7:57:40:
cd:e0:28:08:77:e0:73:5a:14:6a:57:3e:cb:bc:36:
6f:03:10:43:91:f1:0b:0a:5a:1b:b8:af:35:e2:a5:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E7:7F:62:66:A0:91:59:C5:E3:01:61:D0:68:0D:9C:8C:30:BD:8D
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cd:eb:91:0f:f5:9d:e1:cc:96:59:62:cf:88:38:6b:ad:49:
57:dc:75:90:e8:01:1b:e9:ac:69:a2:d7:0f:8b:91:c8:97:8f:
88:19:bd:3b:12:fa:4e:67:be:4b:9e:f9:ea:cb:bc:97:76:0a:
3b:48:6a:c6:9e:f8:4a:51:fd:89:55:47:35:84:1c:e0:93:fa:
3f:58:ec:bb:fc:ab:0c:59:78:40:76:28:d2:ed:ba:81:83:66:
85:e6:d6:4b:b4:8f:60:66:cb:65:b4:c4:7f:5e:21:ce:54:b9:
30:37:43:61:a6:f4:58:e0:ca:e7:80:12:13:08:55:33:0d:c0:
b2:f6:76:96:df:2d:d2:83:5e:dd:d3:2d:43:39:ae:57:56:55:
2a:b5:f8:a9:90:96:50:e6:7f:25:58:2a:66:a6:91:70:07:f9:
ae:e8:62:f0:67:23:78:0e:c2:97:1b:84:4d:75:1b:6b:67:e0:
e0:34:cd:aa:d3:ae:74:67:8e:11:d1:f0:8b:a8:4a:83:d2:8c:
6c:c7:f0:cf:2d:8d:63:7e:48:dc:28:ec:c5:70:04:88:81:eb:
f9:17:6f:e6:03:52:1c:d2:29:2f:b3:cd:00:35:e8:6a:55:f7:
35:72:fc:db:82:d2:ce:c8:50:94:84:96:96:3f:b5:b8:ac:d3:
3a:48:4e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:57 2025 by rpki-client