Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
File: o8-bZGUWkotdBsKoGestvA_pkgo.mft (raw, json)
Hash identifier: KRgFZGgZqBaFzCtsrkv9UfXRdAnrV8+y6iAd+KMZHU8=
Subject key identifier: 7D:A4:63:54:19:FA:AD:DF:22:23:E7:D0:0F:E8:8F:AE:5F:A4:9A:3B
Authority key identifier: A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
Certificate issuer: /CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Certificate serial: 019A29305583A1D68D9DDB262991410B0C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
Manifest number: 014C
Signing time: Tue 28 Oct 2025 05:00:24 +0000
Manifest this update: Tue 28 Oct 2025 05:00:24 +0000
Manifest next update: Wed 29 Oct 2025 05:00:24 +0000
Files and hashes: 1: X-QlQ7J2mkMQ7aCqISeZm-0GPp8.roa (hash: tcckn5v078MeQtwYD02YyKajWXUMPOWsBI1IguOQcTI=)
2: o8-bZGUWkotdBsKoGestvA_pkgo.crl (hash: uhUzC87s9R5TSHZ710hVCO6uGb8a3Dg/ADYzNWfI+tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:55:83:a1:d6:8d:9d:db:26:29:91:41:0b:0c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3cf9b646516928b5d06c2a819eb2dbc0fe9920a
Validity
Not Before: Oct 28 05:00:24 2025 GMT
Not After : Oct 29 05:00:24 2025 GMT
Subject: CN=7da4635419faaddf2223e7d00fe88fae5fa49a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:2b:23:53:35:93:c9:77:57:a9:68:a6:c2:
70:0d:02:69:3b:de:a1:71:2e:85:a8:3d:2d:fd:28:
19:24:c7:44:d5:ca:c6:24:fb:e0:fb:1f:90:6b:79:
b9:1f:04:61:51:4a:4a:74:b9:2d:52:37:fb:1e:e9:
47:77:10:f4:06:0f:73:cd:2a:a3:61:36:8b:92:ac:
4e:b3:45:80:c3:db:33:c1:1f:b8:59:8f:f1:33:9a:
8f:7e:e4:5f:bb:bb:6d:59:c4:72:81:1a:04:62:b5:
9e:64:ca:dc:9c:be:ec:5e:91:8f:5a:c8:6e:08:55:
55:e9:30:ad:45:08:b1:b4:c7:c2:0b:95:61:d3:5e:
2d:51:d3:07:a2:ee:06:1a:dd:67:98:6a:a1:30:19:
26:9a:62:ae:d6:a1:81:3a:f1:14:b7:ce:43:ae:41:
76:b2:05:ca:c8:75:d6:55:85:90:e7:4e:cf:c5:15:
55:a8:f6:f4:b8:a9:97:d3:df:b6:e2:d6:f2:66:fc:
19:6d:da:96:5d:60:fe:93:99:48:ff:e7:4c:30:ec:
36:92:96:88:db:c4:b2:9a:a7:9d:0f:ae:3c:f0:22:
0e:30:df:2b:54:42:e6:1f:ae:bf:20:25:5a:d6:3c:
db:bd:1a:8c:c4:3d:6c:82:4d:6a:dd:b8:1d:98:ef:
5a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A4:63:54:19:FA:AD:DF:22:23:E7:D0:0F:E8:8F:AE:5F:A4:9A:3B
X509v3 Authority Key Identifier:
keyid:A3:CF:9B:64:65:16:92:8B:5D:06:C2:A8:19:EB:2D:BC:0F:E9:92:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8-bZGUWkotdBsKoGestvA_pkgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/394d07-05cc-4f72-bd46-289696cc99b9/1/o8-bZGUWkotdBsKoGestvA_pkgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ad:26:6d:4c:7e:59:8a:7c:05:87:4b:81:38:8d:de:3c:ec:
35:7d:38:89:38:7a:17:c0:41:1e:2b:0b:d8:7c:cf:2c:ca:8a:
2b:0b:dd:94:16:6f:57:d1:7d:0c:6f:53:35:19:5d:3f:c3:dd:
3b:c6:0e:46:bd:92:0b:38:89:32:44:0c:89:d7:d4:47:d1:9d:
5c:e0:d5:5f:97:de:af:4c:20:5c:19:cb:5e:ad:3c:4c:00:d2:
eb:5c:0c:53:f1:d3:c7:5a:89:48:bf:99:ff:b7:4a:43:28:b7:
8f:e1:4f:7b:6a:32:82:8b:dd:d5:bc:4e:31:2d:96:b7:b0:c6:
c5:0e:ef:50:49:58:82:ae:39:51:34:06:d2:5c:e3:cd:30:c9:
a4:01:51:e6:ff:ca:6e:3c:11:6b:4b:cb:e8:0a:63:f5:d7:c1:
3e:a8:90:36:9d:86:e6:3c:58:2c:0a:dc:78:04:4d:c5:c4:cd:
7c:48:5e:f8:02:41:af:fa:99:a9:b7:d5:9f:3e:19:cb:46:67:
4b:cf:69:ec:b1:28:d2:ca:2a:8c:8f:41:d9:26:01:0a:98:ed:
75:5f:0f:b2:d2:e3:ef:71:fe:bb:0b:a4:e3:0d:fb:69:eb:f3:
14:9f:1a:d7:ec:52:ea:df:e3:34:44:16:b2:2b:1d:3c:33:3d:
87:1b:00:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:38:20 2025 by rpki-client