Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier: rSMjgAVrHaGhuNjLY4/uyYpDcDvedkzoUwGAK9AU53E=
Subject key identifier: 06:A5:80:3E:5E:93:7A:19:65:AE:E5:3D:92:03:75:1D:49:CD:F0:4C
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer: /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial: 01974EFC8B507A0DE620FF68F0F878E7C3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number: 0FB7
Signing time: Sun 08 Jun 2025 10:01:02 +0000
Manifest this update: Sun 08 Jun 2025 10:01:02 +0000
Manifest next update: Mon 09 Jun 2025 10:01:02 +0000
Files and hashes: 1: 52xBRd0Cpm32rkzicMEfVARVH28.roa (hash: e84fKpiCRXQdUvqGrCa/+TSU8WPFq/LDxWaFoQdgyEc=)
2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: o7Gk/HYoFw8miUVLwk0g9XMcf2dGB3qNj6ULui5c2GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:8b:50:7a:0d:e6:20:ff:68:f0:f8:78:e7:c3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Validity
Not Before: Jun 8 10:01:02 2025 GMT
Not After : Jun 9 10:01:02 2025 GMT
Subject: CN=06a5803e5e937a1965aee53d9203751d49cdf04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:58:ab:5c:a7:2b:b2:46:f3:61:a7:79:6f:
3c:8f:43:f4:2b:7c:a7:72:52:fa:ba:d1:15:e6:77:
04:83:8e:8f:70:c4:52:81:c1:b2:72:4d:ff:0d:8a:
ab:38:3f:98:91:52:07:f4:e3:ca:81:8e:1b:b4:9f:
ae:8d:f2:20:ee:eb:2b:3b:95:58:a2:90:3e:d1:aa:
bb:de:c5:7e:97:7c:df:cd:6c:c8:ec:de:1a:52:ba:
fc:b6:9e:a6:f9:72:2e:90:ed:00:26:2d:07:28:4a:
fc:5a:23:d4:51:db:1c:02:66:92:e2:7b:06:b7:98:
66:ea:13:15:e1:34:4c:64:ac:80:fe:0f:e6:ca:cc:
35:f7:18:19:1c:07:9c:8d:a8:d3:6b:c8:09:1c:92:
b8:fb:29:ff:db:c5:97:b5:f6:5a:41:07:7e:f0:66:
5d:ad:38:b4:69:43:4c:7b:94:b9:c6:fc:f3:14:d2:
dc:5c:c2:ca:1e:03:00:02:b8:ab:a9:ea:77:da:da:
b0:2d:e7:f9:4e:e4:ae:d9:8d:d8:ac:c6:40:38:5b:
e1:3a:b9:8b:f4:cf:05:df:91:ec:fb:a0:a4:83:5b:
b9:91:66:e2:6c:ed:0e:8e:b1:b0:77:2b:73:5c:c4:
bd:20:04:52:b4:7f:4c:0b:0b:9a:1a:98:8c:bb:3c:
30:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:80:3E:5E:93:7A:19:65:AE:E5:3D:92:03:75:1D:49:CD:F0:4C
X509v3 Authority Key Identifier:
keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4d:df:8c:e7:f7:90:6e:67:c6:e4:90:99:c5:53:cb:cb:52:
05:0d:18:ee:c7:dc:85:f8:42:be:0d:ad:77:55:15:e4:c7:de:
52:39:a6:b6:46:5d:f9:13:07:79:3d:2f:53:ac:73:95:31:76:
7c:ce:0f:74:16:cc:79:45:37:97:54:ea:6f:de:84:b1:28:5e:
1b:27:68:62:bd:82:6c:b5:eb:d8:ec:38:cd:c3:55:be:2a:c1:
51:b1:fb:66:a6:f6:0f:9e:0a:b0:04:b9:ed:ac:7f:ca:49:9f:
36:a8:85:6d:46:cb:78:fc:36:45:28:18:0a:39:b7:76:ad:8b:
9f:01:87:c0:cc:e6:6b:f0:60:f6:87:ed:35:1e:14:1a:f7:b7:
48:69:c7:ab:39:74:9e:04:2f:a6:a5:27:7f:21:d2:79:d3:81:
64:b7:da:91:b8:c4:f9:45:51:16:2a:19:31:18:92:fc:a6:85:
37:27:eb:ac:68:55:1d:52:7c:67:4f:ab:ed:f2:02:7e:8f:d5:
39:67:91:74:d0:88:5a:ce:c3:62:37:50:86:0b:cb:f2:fc:3e:
a7:d0:62:1c:20:fd:3a:cb:52:60:53:a7:2c:27:d8:9f:e2:72:
fd:8a:3c:45:3a:9c:ab:8c:62:17:3e:75:18:94:b9:a1:79:e2:
7b:cc:be:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/ItQeg3mIP9o8Ph458OiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWNjYzQ4MjAwY2VmMDIxNmMyY2U1Mzg2OWZkMTkyYjRh
MjNmNTQwHhcNMjUwNjA4MTAwMTAyWhcNMjUwNjA5MTAwMTAyWjAzMTEwLwYDVQQD
EygwNmE1ODAzZTVlOTM3YTE5NjVhZWU1M2Q5MjAzNzUxZDQ5Y2RmMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0pYq1ynK7JG82GneW88j0P0K3yn
clL6utEV5ncEg46PcMRSgcGyck3/DYqrOD+YkVIH9OPKgY4btJ+ujfIg7usrO5VY
opA+0aq73sV+l3zfzWzI7N4aUrr8tp6m+XIukO0AJi0HKEr8WiPUUdscAmaS4nsG
t5hm6hMV4TRMZKyA/g/mysw19xgZHAecjajTa8gJHJK4+yn/28WXtfZaQQd+8GZd
rTi0aUNMe5S5xvzzFNLcXMLKHgMAArirqep32tqwLef5TuSu2Y3YrMZAOFvhOrmL
9M8F35Hs+6Ckg1u5kWbibO0OjrGwdytzXMS9IARStH9MCwuaGpiMuzwwQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAalgD5ek3oZZa7lPZIDdR1JzfBMMB8GA1UdIwQY
MBaAFPDszEggDO8CFsLOU4af0ZK0oj9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAt
YmI2NWM1OTAwZjc1LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAtYmI2NWM1OTAwZjc1
LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdk3fjOf3
kG5nxuSQmcVTy8tSBQ0Y7sfchfhCvg2td1UV5MfeUjmmtkZd+RMHeT0vU6xzlTF2
fM4PdBbMeUU3l1Tqb96EsSheGydoYr2CbLXr2Ow4zcNVvirBUbH7Zqb2D54KsAS5
7ax/ykmfNqiFbUbLePw2RSgYCjm3dq2LnwGHwMzma/Bg9oftNR4UGve3SGnHqzl0
ngQvpqUnfyHSedOBZLfakbjE+UVRFioZMRiS/KaFNyfrrGhVHVJ8Z0+r7fICfo/V
OWeRdNCIWs7DYjdQhgvL8vw+p9BiHCD9OstSYFOnLCfYn+Jy/Yo8RTqcq4xiFz51
GJS5oXnie8y+yg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:37:42 2025 by rpki-client