Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: 7cdGsWaS9qyHjVonzC7iaI2w/cwKzkBi0VfbfRinI4w=
Subject key identifier: 59:F2:4E:C5:F3:86:46:70:ED:4D:82:09:4C:B8:00:0A:4D:47:8C:4E
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019A269D518E4DD5A766F02A2736535C8D7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0608
Signing time: Mon 27 Oct 2025 17:00:35 +0000
Manifest this update: Mon 27 Oct 2025 17:00:35 +0000
Manifest next update: Tue 28 Oct 2025 17:00:35 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: c7YPPoxEMfvUIUtMDAAt+x8xOO/vVLNFIBfWI1ILmNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:51:8e:4d:d5:a7:66:f0:2a:27:36:53:5c:8d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Oct 27 17:00:35 2025 GMT
Not After : Oct 28 17:00:35 2025 GMT
Subject: CN=59f24ec5f3864670ed4d82094cb8000a4d478c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:14:af:c0:37:95:16:b3:b0:db:66:45:c6:
78:ab:d0:7c:68:8a:9f:54:da:01:c4:5d:9f:10:55:
9b:23:51:61:92:71:21:a7:8f:2f:50:aa:95:a5:a8:
c1:53:ba:b8:74:81:82:34:09:9e:a0:2c:03:64:20:
7a:ba:dd:c5:d5:15:1e:a6:61:b7:80:35:89:1d:54:
b4:1c:e0:39:e8:69:9f:a7:c5:4e:d8:13:4a:fc:f6:
d2:11:90:39:64:df:d1:fa:ce:70:27:55:44:95:49:
9b:fd:da:74:c2:42:ff:36:da:78:8d:b4:28:0d:28:
9a:72:f1:41:fa:6f:f1:1c:40:22:cd:7d:05:b5:1d:
68:c1:21:61:13:a0:84:45:d3:12:b8:a7:4b:c3:1d:
17:02:f0:b7:0c:4b:b9:c3:32:c7:cc:6b:c5:ef:1f:
fd:c7:09:81:81:0a:4f:62:6a:f1:86:1a:8c:41:a9:
d2:30:b2:8d:ce:a9:b7:5f:98:17:05:bd:e4:43:4f:
c7:32:b0:8c:20:4a:ee:7b:ac:e8:07:0e:2f:d1:4f:
78:8d:5e:8a:97:41:8a:f0:7c:50:10:34:bb:01:c5:
4f:00:67:9c:88:e8:4b:0d:5a:66:5e:94:0b:f5:06:
e0:d7:1c:0e:09:31:80:d3:d8:24:94:db:10:7d:a4:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F2:4E:C5:F3:86:46:70:ED:4D:82:09:4C:B8:00:0A:4D:47:8C:4E
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:30:8c:28:1d:b9:6c:1f:3c:82:1e:f9:d1:f5:b2:89:c8:86:
21:b8:ec:89:5a:12:6e:aa:d6:09:84:f5:ce:10:80:fe:36:3d:
0b:d0:9e:de:2c:ef:4b:ba:b0:65:a1:df:d2:ba:73:b8:bd:4a:
d0:09:6c:67:19:3e:20:98:9c:38:97:ab:9a:4d:42:81:6b:13:
d6:9e:7e:e7:65:82:24:15:aa:94:e2:94:7f:28:d2:c6:18:fe:
fa:7b:da:2b:5a:35:9a:75:4d:2f:15:64:3e:2e:a6:dd:99:6a:
c3:28:0b:a8:fd:ba:e1:2c:47:13:0c:02:88:9f:50:53:2f:0b:
83:01:f8:d2:b1:de:a8:11:72:cb:a0:8f:7e:bc:28:3d:44:04:
82:f8:c4:b6:3c:cf:10:ed:96:ae:82:2d:a1:3a:5a:f8:3d:65:
e7:27:e1:72:fa:cd:86:19:9f:44:0a:77:62:34:c8:b7:b4:8f:
84:6b:82:51:97:51:e2:9e:4f:59:7b:fb:9e:ab:b4:50:b9:7d:
4c:53:fb:87:4d:93:04:59:cc:8c:29:c7:13:07:e6:97:0b:59:
cd:34:fb:a3:42:09:af:5b:f6:df:d8:93:8f:22:40:43:59:4f:
a7:75:64:c5:e5:61:a8:d3:cf:f4:28:0f:0a:e1:15:72:b8:b5:
02:c7:57:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZomnVGOTdWnZvAqJzZTXI17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZTE1MTA4M2EyZmYzODBkMTcyNTk0MzRiNjRiNGZjYjA2
YTg1ZWYwHhcNMjUxMDI3MTcwMDM1WhcNMjUxMDI4MTcwMDM1WjAzMTEwLwYDVQQD
Eyg1OWYyNGVjNWYzODY0NjcwZWQ0ZDgyMDk0Y2I4MDAwYTRkNDc4YzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovcUr8A3lRazsNtmRcZ4q9B8aIqf
VNoBxF2fEFWbI1FhknEhp48vUKqVpajBU7q4dIGCNAmeoCwDZCB6ut3F1RUepmG3
gDWJHVS0HOA56Gmfp8VO2BNK/PbSEZA5ZN/R+s5wJ1VElUmb/dp0wkL/Ntp4jbQo
DSiacvFB+m/xHEAizX0FtR1owSFhE6CERdMSuKdLwx0XAvC3DEu5wzLHzGvF7x/9
xwmBgQpPYmrxhhqMQanSMLKNzqm3X5gXBb3kQ0/HMrCMIErue6zoBw4v0U94jV6K
l0GK8HxQEDS7AcVPAGeciOhLDVpmXpQL9Qbg1xwOCTGA09gklNsQfaShmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnyTsXzhkZw7U2CCUy4AApNR4xOMB8GA1UdIwQY
MBaAFPDhUQg6L/OA0XJZQ0tktPywaoXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2Qt
YzdlZjg2ODJkNjdkLzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny85NmViYmYtMDlhMi00OTcyLWFiN2QtYzdlZjg2ODJkNjdk
LzEvOE9GUkNEb3Y4NERSY2xsRFMyUzBfTEJxaGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzCMKB25
bB88gh750fWyiciGIbjsiVoSbqrWCYT1zhCA/jY9C9Ce3izvS7qwZaHf0rpzuL1K
0AlsZxk+IJicOJermk1CgWsT1p5+52WCJBWqlOKUfyjSxhj++nvaK1o1mnVNLxVk
Pi6m3ZlqwygLqP264SxHEwwCiJ9QUy8LgwH40rHeqBFyy6CPfrwoPUQEgvjEtjzP
EO2WroItoTpa+D1l5yfhcvrNhhmfRAp3YjTIt7SPhGuCUZdR4p5PWXv7nqu0ULl9
TFP7h02TBFnMjCnHEwfmlwtZzTT7o0IJr1v239iTjyJAQ1lPp3VkxeVhqNPP9CgP
CuEVcri1AsdXcw==
-----END CERTIFICATE-----
Generated at Tue Oct 28 03:09:31 2025 by rpki-client