Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: bNurTyLKgS/h1XwVW72HQH5iflzKvvVvPkP5JOfUPqI=
Subject key identifier: B0:D5:F6:63:3E:62:59:C2:53:83:05:49:CA:C1:4B:45:C1:A8:7A:BD
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 0199C5D7AA64B616F16B1B9AA33F182FDF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 064C
Signing time: Wed 08 Oct 2025 22:01:09 +0000
Manifest this update: Wed 08 Oct 2025 22:01:09 +0000
Manifest next update: Thu 09 Oct 2025 22:01:09 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: wIDIg44aYQLTGOkjeHcFj/k8ZFpEEcR3Rv2iMRxQl6g=)
2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d7:aa:64:b6:16:f1:6b:1b:9a:a3:3f:18:2f:df:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Oct 8 22:01:09 2025 GMT
Not After : Oct 9 22:01:09 2025 GMT
Subject: CN=b0d5f6633e6259c253830549cac14b45c1a87abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:06:8f:09:7c:2f:e8:ab:a5:cc:16:d5:31:15:
27:c8:6e:7c:f2:69:78:f3:71:39:16:1a:d3:16:d9:
71:38:84:84:35:6d:b7:b1:2d:11:f2:76:f9:1f:97:
e6:a7:9d:ba:1a:dc:32:fe:55:be:22:07:25:37:39:
5a:b5:b5:42:4d:30:48:cc:9d:c1:3d:40:e0:60:88:
8f:c6:df:82:ec:f2:89:f3:20:ad:64:dd:b0:89:2f:
b5:d9:15:70:bd:1f:f6:7d:cf:d7:bf:eb:eb:3a:5c:
6f:9c:39:9e:e1:da:e0:39:14:ec:47:fd:28:59:60:
67:2d:11:db:6e:dd:7e:40:c7:e0:e3:1b:33:47:c4:
73:2f:82:ca:04:09:99:11:93:5d:b6:cc:66:e8:33:
d4:71:2c:0c:8d:c8:70:ad:6f:c7:3e:08:0a:89:cf:
25:a7:57:d9:78:e7:56:5c:12:08:f3:59:90:77:79:
b4:bf:bb:b6:36:35:42:fb:93:65:81:22:57:09:df:
fc:bc:b7:a3:ea:20:c5:b9:85:34:46:2d:5e:ec:47:
fc:e3:03:3c:cd:65:b3:81:02:15:6c:7d:99:d8:61:
8e:df:93:08:30:55:5b:f7:7c:7c:13:d1:a8:70:d1:
a7:8f:1f:40:f7:2e:57:0d:70:bc:b3:1a:1a:60:17:
62:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:F6:63:3E:62:59:C2:53:83:05:49:CA:C1:4B:45:C1:A8:7A:BD
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fa:99:5f:21:cd:87:a9:52:46:89:21:0d:1f:2e:cc:f2:99:
cd:b5:8d:d4:52:c4:f7:0f:4c:14:ac:69:33:96:be:f7:55:d6:
82:ad:cc:e4:27:c2:77:84:4b:1b:23:dc:b3:e4:4a:99:a1:c8:
71:3f:c4:8e:f3:0d:7a:46:3b:ff:1e:33:b8:87:62:7e:51:32:
18:f5:52:cb:0c:61:0e:32:8a:49:50:41:d5:4b:af:67:81:e3:
ae:58:36:a9:6e:b6:de:c9:68:0f:9d:c7:f7:41:0f:63:b8:81:
01:42:41:c0:ec:69:fe:ff:01:e4:20:1f:1e:4c:17:70:64:d2:
e9:80:a0:f0:90:d1:3f:af:3a:8b:a0:ea:1a:42:52:3d:44:94:
37:65:13:2e:da:8a:aa:82:27:b8:27:9f:18:8c:05:de:b5:63:
85:64:68:29:5c:18:a3:d3:44:35:b7:60:0d:77:82:a9:42:30:
2a:64:6e:9d:24:40:ba:8f:55:29:21:f4:0e:3d:3d:16:d5:95:
30:ea:ac:20:59:16:e1:f1:f0:48:a4:29:3f:60:83:20:8e:3f:
67:f9:82:e3:c8:73:7d:0b:3f:1a:a5:f5:9c:bc:6c:4e:34:c0:
a2:59:bb:98:4b:96:b4:f9:66:68:3a:d9:37:a0:5a:36:5d:73:
43:b8:b4:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF16pkthbxaxuaoz8YL98nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjUxMDA4MjIwMTA5WhcNMjUxMDA5MjIwMTA5WjAzMTEwLwYDVQQD
EyhiMGQ1ZjY2MzNlNjI1OWMyNTM4MzA1NDljYWMxNGI0NWMxYTg3YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAaPCXwv6KulzBbVMRUnyG588ml4
83E5FhrTFtlxOISENW23sS0R8nb5H5fmp526Gtwy/lW+IgclNzlatbVCTTBIzJ3B
PUDgYIiPxt+C7PKJ8yCtZN2wiS+12RVwvR/2fc/Xv+vrOlxvnDme4drgORTsR/0o
WWBnLRHbbt1+QMfg4xszR8RzL4LKBAmZEZNdtsxm6DPUcSwMjchwrW/HPggKic8l
p1fZeOdWXBII81mQd3m0v7u2NjVC+5NlgSJXCd/8vLej6iDFuYU0Ri1e7Ef84wM8
zWWzgQIVbH2Z2GGO35MIMFVb93x8E9GocNGnjx9A9y5XDXC8sxoaYBdiVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDV9mM+YlnCU4MFScrBS0XBqHq9MB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPqZXyHN
h6lSRokhDR8uzPKZzbWN1FLE9w9MFKxpM5a+91XWgq3M5CfCd4RLGyPcs+RKmaHI
cT/EjvMNekY7/x4zuIdiflEyGPVSywxhDjKKSVBB1UuvZ4Hjrlg2qW623sloD53H
90EPY7iBAUJBwOxp/v8B5CAfHkwXcGTS6YCg8JDRP686i6DqGkJSPUSUN2UTLtqK
qoInuCefGIwF3rVjhWRoKVwYo9NENbdgDXeCqUIwKmRunSRAuo9VKSH0Dj09FtWV
MOqsIFkW4fHwSKQpP2CDII4/Z/mC48hzfQs/GqX1nLxsTjTAolm7mEuWtPlmaDrZ
N6BaNl1zQ7i0RQ==
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:59:30 2025 by rpki-client