Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: mwWxLY1JnaGh2k51kohisBkE/xd9feZn6cpIe/JwHzw=
Subject key identifier: 4E:47:14:42:71:42:EB:C2:42:EE:E8:DE:69:69:31:31:DE:AE:A5:D1
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 019931C8BB92B9300D8EB7B27AF23F7C1AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 10B1
Signing time: Wed 10 Sep 2025 04:01:02 +0000
Manifest this update: Wed 10 Sep 2025 04:01:02 +0000
Manifest next update: Thu 11 Sep 2025 04:01:02 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: SGwmjSLiZ9ssxT2l40UuBZZ7u1ReXfFLs5LTECIU+AU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:bb:92:b9:30:0d:8e:b7:b2:7a:f2:3f:7c:1a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Sep 10 04:01:02 2025 GMT
Not After : Sep 11 04:01:02 2025 GMT
Subject: CN=4e4714427142ebc242eee8de69693131deaea5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:b9:b3:be:76:65:50:cc:08:a6:8d:51:3a:
6f:cd:b3:4c:ec:6c:b7:95:09:18:a3:96:f4:be:b0:
c8:fb:fb:b2:fb:fe:00:f5:3a:73:9f:ed:51:db:b4:
39:57:6f:2c:94:3b:ec:fd:46:f3:00:95:55:86:47:
79:48:cf:05:0c:2c:f8:5d:ed:6e:ee:b1:79:fc:69:
9d:ce:42:59:80:7e:b5:3a:f5:9e:6e:58:d1:ac:01:
5c:7b:70:ab:9b:aa:4b:16:8d:c5:9a:87:bb:fe:3b:
56:86:eb:e7:f8:e9:59:0e:1c:55:4a:15:b5:ba:9b:
b9:a0:4d:5e:c3:26:a3:14:42:ba:c7:5a:84:66:6b:
29:c9:ef:e5:61:ac:1b:74:31:00:c0:39:c2:6e:24:
e9:e9:ae:05:d2:cf:79:5c:ca:61:43:27:8e:24:7d:
f7:d2:94:08:d2:32:3c:2b:cd:30:b3:92:76:8e:53:
19:2e:ea:d8:74:23:95:99:87:29:76:85:87:20:a5:
99:85:f0:59:19:30:94:3e:1b:e1:7f:7a:6c:6e:d2:
c1:40:df:f6:96:28:79:dd:51:1a:58:af:30:43:31:
b1:cc:0d:b6:7b:db:bd:99:56:8c:98:1b:05:45:5c:
16:bc:6f:23:78:86:8a:53:5d:d0:72:27:d1:43:59:
d8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:14:42:71:42:EB:C2:42:EE:E8:DE:69:69:31:31:DE:AE:A5:D1
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:aa:e3:db:5c:92:00:fe:68:19:c8:d9:3b:ea:af:36:5e:48:
59:b9:b6:ab:62:17:d3:84:d2:43:ab:07:7b:a8:54:0d:c3:c1:
f6:1f:6e:b3:70:e8:1b:04:45:d8:1d:10:31:90:77:ec:97:a0:
64:f8:b6:46:b0:5b:e5:b5:93:70:f3:92:53:c3:73:27:22:84:
5b:40:82:7d:54:48:10:37:b5:bc:b1:aa:62:5b:26:1b:e1:47:
4d:3d:b7:14:4c:60:7a:c6:80:86:b7:7c:f3:c4:27:a2:fb:d1:
ae:d9:9d:f7:4d:8d:d3:1b:b1:48:e8:72:0b:97:b8:8c:19:ca:
93:21:e3:9a:68:0a:32:8b:0f:1e:13:ae:f9:8a:58:39:d3:86:
ed:2c:02:e9:bb:33:6f:d6:b7:b6:a4:6a:13:37:33:fd:d4:51:
e1:82:37:c9:af:9a:5d:e0:68:64:b3:1d:be:b2:3a:1a:21:b0:
6a:cc:53:49:6e:fe:d2:d0:29:8f:78:f8:3a:5e:4d:03:d7:e0:
25:9f:29:ca:84:1d:a0:97:3b:68:6f:fe:db:f6:56:ab:82:e0:
e4:bf:9b:62:cd:b8:dc:ff:1d:ec:25:a8:0b:6b:2a:07:36:fb:
eb:43:6f:f6:d1:10:5f:23:78:4b:9b:b6:a1:4f:26:61:6c:11:
0c:5c:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:22:11 2025 by rpki-client