Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: Q+b2VSU4ldhEsotv8CY2Gj3iJnVLRj4hfxtNQFSXVhY=
Subject key identifier: 0E:E3:07:A3:58:A4:F6:BF:0A:37:43:F9:0B:55:1E:03:DA:C5:18:B4
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 01976D742F7BAF956B50A2C35B1969F9181C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 049F
Signing time: Sat 14 Jun 2025 08:00:20 +0000
Manifest this update: Sat 14 Jun 2025 08:00:20 +0000
Manifest next update: Sun 15 Jun 2025 08:00:20 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: 31ecDdWqVAlBJ+6ouNAzKMmHMaHj3IQyNwCmHyAZUHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:2f:7b:af:95:6b:50:a2:c3:5b:19:69:f9:18:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jun 14 08:00:20 2025 GMT
Not After : Jun 15 08:00:20 2025 GMT
Subject: CN=0ee307a358a4f6bf0a3743f90b551e03dac518b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:4e:f6:36:a6:ae:96:d0:ff:de:b6:da:7c:
be:d3:89:ad:ce:99:8e:f9:5d:56:73:b4:dd:d4:d7:
58:11:c1:d9:94:3a:0c:82:3e:22:0d:8f:f1:2d:5a:
f2:32:e5:44:5d:ca:ea:66:00:1e:61:47:dd:4e:c6:
11:24:f8:6e:ce:89:0d:fd:81:5a:98:04:2a:5d:98:
61:b5:2d:7b:7e:ae:3c:ba:e6:8f:85:95:2e:c9:5a:
a6:2d:cd:13:65:12:37:37:0b:e4:09:e4:b0:87:b9:
c1:4f:b7:ab:db:22:45:55:07:b0:13:5c:c9:70:18:
b9:12:04:a5:23:27:0a:a9:ba:dc:c3:4d:85:ee:da:
2e:c3:f8:36:96:44:f4:26:49:85:c2:6e:d4:2d:b1:
b6:83:19:f7:c3:c8:69:fc:d9:45:a0:de:a1:dc:99:
48:34:d3:f0:ab:d0:0d:8b:af:97:28:c5:74:81:49:
6e:28:68:11:84:54:20:48:fe:84:a2:15:ff:03:a8:
3c:3c:21:5f:7c:36:c9:a6:ea:59:f1:d0:f3:c3:88:
8a:17:fe:61:a2:93:50:de:08:5f:d4:b9:cd:6e:3e:
5e:4e:db:15:f3:1c:f4:0e:f5:cd:4a:1d:b5:08:f8:
2f:02:5c:c6:fa:26:2e:03:78:46:2e:31:33:09:70:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:07:A3:58:A4:F6:BF:0A:37:43:F9:0B:55:1E:03:DA:C5:18:B4
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:d8:39:8a:04:b2:a6:84:2e:95:9b:20:8d:15:87:1d:5d:
e5:26:46:7a:82:7f:5a:09:5e:ed:8b:ee:5f:7d:0c:7e:0c:f8:
d2:12:40:71:91:b2:da:a6:82:09:e2:27:d8:33:e5:89:83:c1:
e5:10:d9:2b:71:71:b5:64:47:80:b2:a4:61:8f:ce:7a:5c:90:
c4:b5:d7:ce:47:9f:d1:d9:87:a3:03:ad:c3:59:11:3b:75:3c:
c8:d0:3b:52:fc:21:aa:9b:88:46:96:65:62:54:60:27:50:5f:
97:fd:42:3a:40:21:ed:cb:cf:5c:77:d1:ed:bd:ac:50:73:59:
c3:f9:39:d8:18:d2:65:b2:64:44:ed:59:51:96:be:61:47:37:
3b:5d:a4:ba:4e:69:09:ab:fd:df:96:ef:52:48:ac:9d:fd:ce:
d9:a7:1e:ed:d3:15:75:3e:24:09:80:d0:03:af:bb:b3:e9:81:
62:b0:52:3c:c0:1a:8b:68:92:ca:db:48:36:f0:6e:5a:12:eb:
eb:38:eb:89:2e:08:6b:46:42:dd:aa:3f:25:89:dd:d2:8a:11:
4c:61:2e:15:e3:30:1b:54:ef:85:c8:e6:d8:5d:ab:41:d0:7a:
d6:4e:4c:86:91:cb:78:33:9b:41:6f:3f:28:64:f6:31:74:33:
57:19:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:54 2025 by rpki-client