Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: 7IGwNr54oUP280jyTHwwuVo5ujQxqJHqTHeBV3+x6z0=
Subject key identifier: 8C:2D:47:78:EB:1D:57:82:67:F7:B5:66:BF:22:1A:0A:69:D7:9A:9A
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 019922FAB7DF25FFC513D593B2C4DEDEFB3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0E3C
Signing time: Sun 07 Sep 2025 07:01:20 +0000
Manifest this update: Sun 07 Sep 2025 07:01:20 +0000
Manifest next update: Mon 08 Sep 2025 07:01:20 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: 1LkncHNhnhAYcV03JS4ykP+bnv7abhWrdQ3N8A1Eqrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:b7:df:25:ff:c5:13:d5:93:b2:c4:de:de:fb:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Sep 7 07:01:20 2025 GMT
Not After : Sep 8 07:01:20 2025 GMT
Subject: CN=8c2d4778eb1d578267f7b566bf221a0a69d79a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:bf:cc:ff:22:17:49:97:4c:88:ad:f1:38:
75:2b:98:54:4d:c4:8c:55:21:b3:5d:d4:db:44:1b:
63:e8:84:da:ff:60:5d:e1:85:dc:96:94:67:44:42:
ad:5d:0e:0e:7c:f0:d1:b6:8d:37:92:f5:25:c8:29:
62:a2:5f:48:c6:b0:1f:34:78:14:86:03:47:e5:47:
18:01:fc:f7:f4:c7:c7:a0:43:94:2b:48:62:b9:4d:
ff:45:93:b8:42:22:cd:05:fa:7f:77:49:9d:98:d1:
db:0f:7d:01:be:80:00:a5:6e:04:2b:d1:bf:21:58:
6c:fc:91:31:22:07:34:47:a4:31:65:42:5e:e3:70:
b8:16:ee:1d:38:18:b1:f3:53:34:78:e8:78:5b:12:
bd:26:84:1a:38:d5:7a:88:40:df:5b:33:a3:53:9e:
41:42:a2:ec:c8:71:ad:24:73:ba:82:fe:7f:6e:d5:
69:48:e0:a0:9f:43:5e:79:57:41:03:bd:d3:10:ba:
f7:78:84:70:86:72:2c:32:11:07:9d:f5:14:e0:95:
1e:de:5c:10:69:d0:7f:2d:72:4c:ea:40:0c:b3:83:
ed:fc:b3:a4:da:e9:9f:90:4b:a2:38:19:1b:39:c8:
7d:f3:b5:bc:42:13:3b:1e:fc:05:cf:fe:cc:cb:2b:
ac:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2D:47:78:EB:1D:57:82:67:F7:B5:66:BF:22:1A:0A:69:D7:9A:9A
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:89:ef:16:48:62:6e:90:60:ef:3f:3e:cd:a9:ff:c8:0f:b8:
2f:6e:5a:10:49:6b:36:9e:a9:cf:0b:83:74:6f:ce:f9:11:f4:
95:af:1a:e2:e1:cb:61:eb:73:2b:fc:58:1f:7d:1e:bc:59:5a:
1f:1a:53:52:4b:d0:40:c1:5f:ab:d2:9c:fd:b7:d2:c9:12:96:
20:5f:3e:09:ee:79:19:ce:28:9c:03:68:50:9a:29:37:91:9e:
36:77:a9:0c:ab:ec:80:96:93:51:25:34:ab:7a:8b:de:14:6d:
0b:30:ac:2c:d8:06:3d:cc:7c:37:b9:53:49:22:09:05:06:96:
04:32:d2:c4:0e:61:46:8d:79:bf:b7:e2:48:57:5d:1d:98:0e:
cf:12:02:ed:55:b1:4f:24:53:fa:6f:27:93:ce:e0:43:f3:e6:
9c:f8:1e:65:dc:83:ee:9f:32:66:bb:f3:da:ee:e5:73:3d:a9:
ac:0c:ee:d6:7f:43:cf:11:1d:7a:1b:7e:81:65:08:da:5a:a1:
cb:27:a2:a2:a6:ac:45:29:f2:eb:5d:84:55:e7:46:0a:48:b4:
a1:bd:36:9b:cd:78:cf:f6:9f:a7:83:6c:f8:a7:d9:ee:eb:43:
80:8b:1c:5a:c0:09:eb:96:f9:f6:4a:ad:b8:82:e9:57:53:d6:
3c:e1:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:49 2025 by rpki-client