Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: PsJbEsxitK6xAjZPR7KT8VGxFMr7MspkQbEjkUykMaQ=
Subject key identifier: B1:91:D3:E7:83:CA:AA:62:C6:BD:BB:D8:C1:E8:11:14:71:E9:39:CA
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01993726258DA83137B6BC4736A73D8FAA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 058C
Signing time: Thu 11 Sep 2025 05:01:10 +0000
Manifest this update: Thu 11 Sep 2025 05:01:10 +0000
Manifest next update: Fri 12 Sep 2025 05:01:10 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: OZYXmOUs64VJZ/Q8Idcr1jqA60aCHt2Ez4hzAdhwRnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:26:25:8d:a8:31:37:b6:bc:47:36:a7:3d:8f:aa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Sep 11 05:01:10 2025 GMT
Not After : Sep 12 05:01:10 2025 GMT
Subject: CN=b191d3e783caaa62c6bdbbd8c1e8111471e939ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b8:10:ee:89:5b:bc:7e:be:2d:2f:5f:cd:bc:
9f:8f:8b:14:77:65:08:7a:e3:02:30:d9:06:31:5b:
61:78:55:13:24:4b:b8:b0:a5:d6:96:25:7c:70:fa:
d0:91:a3:a1:1d:ab:75:09:7e:ab:9f:79:34:38:ff:
6d:2e:59:9a:f2:69:3a:eb:30:3f:6d:4e:da:3d:96:
dc:f8:20:a9:66:15:56:34:72:d0:ce:dd:f8:8a:98:
4b:83:bf:33:65:d5:1d:ec:f6:22:24:47:1b:08:19:
a5:4a:e9:c0:87:8b:92:3a:20:26:ae:97:57:2f:4b:
d2:1b:f3:e7:b0:01:59:ea:56:df:4a:28:fa:0c:8d:
ec:4c:84:38:69:8d:14:3a:29:09:b8:30:c6:c1:8f:
ff:6e:8e:4f:7a:bc:73:ce:59:59:49:03:4d:ac:ca:
f8:37:0c:ab:80:5b:9d:35:5a:63:69:34:62:d9:ff:
da:5e:9a:52:7f:ba:c2:b9:ed:3b:8d:47:15:7a:51:
32:4e:05:30:01:8f:61:df:af:4c:29:95:b3:c4:37:
c1:2b:98:7f:e1:a3:c1:bd:82:6c:a1:72:63:12:55:
c4:38:4e:28:3d:28:1f:8b:95:19:7c:2c:2b:19:b0:
e9:1e:d1:8b:38:bd:76:9c:b2:70:35:17:be:f2:04:
9d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:91:D3:E7:83:CA:AA:62:C6:BD:BB:D8:C1:E8:11:14:71:E9:39:CA
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:4f:23:26:12:24:a4:49:cf:1e:54:86:eb:2e:36:f0:0b:ba:
89:27:ef:5c:dd:70:18:bb:54:84:cb:11:10:e7:74:d4:86:e0:
6f:b5:54:e4:32:41:80:14:f9:89:c6:53:aa:6e:de:9b:de:ef:
63:0b:df:33:ec:d9:6f:24:3c:8a:ed:04:c8:5a:83:1f:3f:b5:
48:cb:ef:b3:e9:38:82:b0:98:34:a4:73:90:02:61:1f:af:f1:
35:51:38:e6:40:35:fb:e8:9c:45:00:3f:f1:1d:ed:8f:f0:e9:
21:aa:de:b9:a8:62:7b:21:f3:33:3e:3f:48:ca:8b:1f:17:af:
6b:65:3f:e6:3e:bf:e6:51:0d:f1:7d:ba:7a:83:cb:24:47:d2:
8a:54:8f:fb:16:bb:85:2e:bd:89:d1:22:66:b8:57:d6:46:72:
be:91:ce:60:f3:05:dd:16:01:38:4e:2f:25:82:c7:ab:20:c1:
fa:20:e2:4b:8c:61:e5:18:9c:88:f6:d1:b7:76:da:ce:cc:e2:
31:16:68:5c:8a:41:b8:ac:72:29:a8:a2:09:29:2c:2a:49:6e:
94:73:3a:30:38:52:37:37:43:dc:a6:96:21:60:8d:ec:60:76:
2f:62:42:3e:c4:ba:2e:bc:7c:3d:ac:60:32:7f:74:da:ca:e5:
d1:56:5c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 15:14:45 2025 by rpki-client