Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: c8nSx02iskeVBYokTTV9eKnTHSp0GmyykbjvrKN5of0=
Subject key identifier: A6:83:B3:AD:29:5C:64:58:45:1A:60:A0:76:93:D3:54:05:92:AB:2A
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019847AE069A967DF950E720B54C9FF3C250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0510
Signing time: Sat 26 Jul 2025 17:00:43 +0000
Manifest this update: Sat 26 Jul 2025 17:00:43 +0000
Manifest next update: Sun 27 Jul 2025 17:00:43 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: guFtjCvCTBabqS+2UMbTQJzbm9W+0H3UTOQnKF2n12k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ae:06:9a:96:7d:f9:50:e7:20:b5:4c:9f:f3:c2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jul 26 17:00:43 2025 GMT
Not After : Jul 27 17:00:43 2025 GMT
Subject: CN=a683b3ad295c6458451a60a07693d3540592ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:67:8d:c7:37:74:cd:f1:01:d8:7a:f0:02:
10:ed:bf:7f:b8:35:6e:b9:5f:8c:38:a6:55:2e:ce:
5b:88:89:50:0a:5b:66:51:24:9c:ee:4e:2f:df:a6:
0d:a8:79:72:4f:c9:a2:09:eb:6a:48:2c:25:7c:61:
0a:53:d0:ba:10:ba:a7:e0:80:fb:8c:77:40:fb:2b:
ab:d1:ef:87:a9:ef:5d:e3:99:16:36:55:69:cc:35:
0c:1a:ff:b1:dd:1b:5f:2b:ff:e6:f7:b5:e1:40:8b:
27:f8:47:ed:34:f9:e9:47:fb:59:24:c3:98:8d:11:
31:4f:aa:ff:d1:cc:e6:1e:1f:c3:d3:e7:d3:d2:42:
01:6b:1a:87:c5:75:60:36:89:70:6b:db:d8:e3:f3:
ac:cd:39:cd:65:57:53:d4:cb:74:9b:ae:74:71:8a:
d3:48:44:c1:b6:9b:3c:85:ea:79:a3:ec:5a:60:97:
84:10:65:84:80:46:dc:d2:14:ad:14:d9:5f:34:35:
7b:54:1c:9c:7f:de:d8:93:51:d3:9e:42:9a:02:af:
7d:a2:4a:91:3e:0b:2c:f7:d3:23:11:76:90:f5:73:
5d:56:1a:47:bc:e7:33:7f:ff:97:5e:3d:33:0e:6a:
c8:46:f2:63:25:e4:19:f7:61:de:73:e3:8e:8b:6a:
94:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:83:B3:AD:29:5C:64:58:45:1A:60:A0:76:93:D3:54:05:92:AB:2A
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:7b:ad:d0:5f:42:1d:e3:f8:bb:59:47:29:fa:18:6d:43:
cd:ef:7b:05:d2:9a:14:e7:19:ec:51:37:4a:97:23:01:1d:2d:
69:ae:48:8e:26:0c:32:20:53:8f:84:5e:4c:df:6d:ec:92:79:
df:25:4a:4a:00:16:29:d3:44:b0:bb:a4:33:cf:e7:a8:39:0c:
7d:13:0a:8e:1d:78:5f:ae:48:17:99:92:54:da:67:e9:86:f6:
ed:05:fc:71:1c:c3:2f:5c:fc:ef:10:48:50:e6:94:47:4e:a2:
9c:36:43:3c:03:2f:2e:46:ce:24:56:db:ee:2d:74:84:4e:fb:
3e:81:8d:cf:1d:52:8b:7f:5a:7c:6e:a1:86:67:69:c0:6f:d9:
8a:2f:cd:d5:2e:e9:9d:fc:14:b0:8e:4b:99:a8:1e:7e:af:ba:
1e:39:ce:ee:b3:56:ad:2f:05:b0:a3:88:31:d8:78:fa:65:af:
87:60:48:08:81:75:3d:5e:4a:0c:1d:f3:a4:7c:71:ca:95:7f:
00:55:df:51:cd:22:e1:54:0c:b5:e3:18:9a:08:d1:ec:0a:fd:
38:d0:59:c3:69:75:b8:d5:90:e8:a5:5a:cc:2f:87:23:f3:2d:
ea:cb:d5:12:09:27:57:12:a9:ed:44:aa:a2:fd:76:75:ab:c0:
df:a5:7d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:31:17 2025 by rpki-client