Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier: plC7Gcrkc8/yu9D6mczFdnCRmqpQtWFq+emAOoK3WrM=
Subject key identifier: 6F:30:EF:A2:F9:21:5C:0D:70:EF:7D:90:B0:82:00:EC:BE:48:CE:A6
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer: /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial: 019923A0BB31CB0A7E787CD031BAF394EEF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number: 03F0
Signing time: Sun 07 Sep 2025 10:02:39 +0000
Manifest this update: Sun 07 Sep 2025 10:02:39 +0000
Manifest next update: Mon 08 Sep 2025 10:02:39 +0000
Files and hashes: 1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: HycQkuyYFBjRi/rkJtCchCnF/znbVKsaN8wEbfcnpbY=)
2: oVHqW7Znx3iXeIApvzhLphsAfTQ.roa (hash: yQWVz29tvYoHHrEUjXDJ9Ko8ioxivLXZFSUPJ/+r9ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:bb:31:cb:0a:7e:78:7c:d0:31:ba:f3:94:ee:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Validity
Not Before: Sep 7 10:02:39 2025 GMT
Not After : Sep 8 10:02:39 2025 GMT
Subject: CN=6f30efa2f9215c0d70ef7d90b08200ecbe48cea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:4f:30:58:e0:f8:fe:01:29:af:49:ae:cc:
f3:fa:b2:72:7e:39:4d:50:23:0c:f5:95:2b:8e:d9:
0b:09:a4:d8:f3:89:10:8f:74:a4:c6:c9:73:e7:f2:
9c:9a:4d:85:d0:db:39:ff:4c:69:cc:dc:bb:c5:7c:
22:74:22:aa:2e:37:7f:a9:77:32:44:7e:80:97:74:
96:9d:cb:37:0f:b8:30:e1:75:f6:f6:f0:22:56:ab:
5c:87:0d:24:1d:e0:b3:aa:fb:9d:6f:ca:9d:17:38:
59:32:e7:09:e8:26:3e:2f:33:64:c9:85:2d:c0:52:
22:97:de:1b:9c:07:4e:78:57:82:2a:57:81:db:27:
e9:de:d8:3d:f9:9c:e6:62:92:bb:f4:64:3d:11:2c:
46:e7:a9:ea:3e:15:65:0a:cc:40:d1:b0:6e:bc:4a:
aa:f6:eb:f3:08:62:d2:5f:48:fd:63:43:08:ed:7b:
f5:6f:8f:42:f6:2b:dd:d2:aa:ca:4f:5b:56:31:b4:
07:f6:97:36:f7:e3:b1:27:d7:e0:2a:ec:ef:5d:34:
5e:89:6b:25:1d:a6:fe:6e:8a:3d:bc:03:ea:ee:ed:
9f:2c:9f:df:4b:a3:32:f0:ca:14:89:de:f8:73:64:
38:b9:53:d5:d0:0d:ca:8d:b3:cb:b8:a1:97:be:00:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:30:EF:A2:F9:21:5C:0D:70:EF:7D:90:B0:82:00:EC:BE:48:CE:A6
X509v3 Authority Key Identifier:
keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3b:56:8e:de:30:ae:f1:29:c8:96:ac:aa:a3:4d:35:34:ac:
8e:f4:26:7b:34:85:c0:ee:fa:60:b8:8c:b1:5d:90:9d:0d:9d:
58:8d:06:95:4c:f6:85:a4:a1:ef:98:a1:24:b9:6c:68:2a:f2:
a9:be:ec:11:f9:16:f1:fd:15:0f:c0:6e:b0:ce:ba:e7:e2:c8:
01:74:b0:87:93:e9:12:57:b6:45:ed:ae:4e:89:5f:2e:3e:21:
db:6c:ed:13:17:08:d6:72:24:c9:3d:21:20:fe:10:50:7b:f1:
d4:16:dd:bc:50:c1:ac:1a:fa:0d:b1:30:26:43:bd:7c:84:cf:
c6:38:c3:87:15:18:96:5c:51:06:d5:31:52:37:8d:af:11:d3:
27:14:6e:fc:04:2d:1d:62:d0:29:b1:02:9b:27:d6:2a:a0:bb:
50:a9:d7:67:ca:7d:75:37:76:a3:cb:e3:af:3c:d4:4a:01:d5:
40:a7:8b:50:bc:16:29:ec:0b:77:49:b2:c4:99:8e:f4:97:15:
cd:cf:b1:04:e2:52:48:4e:72:d6:1c:a8:e6:73:08:57:c6:7c:
08:77:cf:6c:6b:36:87:ae:b1:eb:32:78:25:2c:2c:b2:e1:4b:
a8:e9:8c:72:55:2c:b7:ef:03:2b:57:1e:df:fd:de:6f:ed:af:
fb:9b:af:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoLsxywp+eHzQMbrzlO72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw
YzcyMmEwHhcNMjUwOTA3MTAwMjM5WhcNMjUwOTA4MTAwMjM5WjAzMTEwLwYDVQQD
Eyg2ZjMwZWZhMmY5MjE1YzBkNzBlZjdkOTBiMDgyMDBlY2JlNDhjZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+1PMFjg+P4BKa9Jrszz+rJyfjlN
UCMM9ZUrjtkLCaTY84kQj3Skxslz5/Kcmk2F0Ns5/0xpzNy7xXwidCKqLjd/qXcy
RH6Al3SWncs3D7gw4XX29vAiVqtchw0kHeCzqvudb8qdFzhZMucJ6CY+LzNkyYUt
wFIil94bnAdOeFeCKleB2yfp3tg9+ZzmYpK79GQ9ESxG56nqPhVlCsxA0bBuvEqq
9uvzCGLSX0j9Y0MI7Xv1b49C9ivd0qrKT1tWMbQH9pc29+OxJ9fgKuzvXTReiWsl
Hab+boo9vAPq7u2fLJ/fS6My8MoUid74c2Q4uVPV0A3KjbPLuKGXvgB2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8w76L5IVwNcO99kLCCAOy+SM6mMB8GA1UdIwQY
MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt
NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl
LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDtWjt4w
rvEpyJasqqNNNTSsjvQmezSFwO76YLiMsV2QnQ2dWI0GlUz2haSh75ihJLlsaCry
qb7sEfkW8f0VD8BusM665+LIAXSwh5PpEle2Re2uTolfLj4h22ztExcI1nIkyT0h
IP4QUHvx1BbdvFDBrBr6DbEwJkO9fITPxjjDhxUYllxRBtUxUjeNrxHTJxRu/AQt
HWLQKbECmyfWKqC7UKnXZ8p9dTd2o8vjrzzUSgHVQKeLULwWKewLd0myxJmO9JcV
zc+xBOJSSE5y1hyo5nMIV8Z8CHfPbGs2h66x6zJ4JSwssuFLqOmMclUst+8DK1ce
3/3eb+2v+5uvxA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client