Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: 8JH9tOGN/Us7KD3QWfvJVASxQey7Yg73glBYCh6whQ4=
Subject key identifier: 63:0B:54:9D:27:9B:FA:D2:F7:CA:9E:0B:DE:08:2D:EE:7A:33:BE:32
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 019A4F2B1EB34F7C8F88BCF8F85B3813188A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 061D
Signing time: Tue 04 Nov 2025 14:00:17 +0000
Manifest this update: Tue 04 Nov 2025 14:00:17 +0000
Manifest next update: Wed 05 Nov 2025 14:00:17 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: PUawdPsWMclTeiwFBYdKnLXVoB6y1QK8yKigSuMyC7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1e:b3:4f:7c:8f:88:bc:f8:f8:5b:38:13:18:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Nov 4 14:00:17 2025 GMT
Not After : Nov 5 14:00:17 2025 GMT
Subject: CN=630b549d279bfad2f7ca9e0bde082dee7a33be32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:79:01:fa:31:90:ba:f3:9d:b7:9a:cf:c2:
76:3a:03:57:79:ea:89:77:2a:15:25:2a:0e:52:5c:
59:3a:ab:aa:79:98:5d:70:cd:23:0a:67:a5:4b:99:
9c:d6:f4:13:ec:74:68:27:a7:a6:d0:03:5e:cb:d4:
00:39:6b:28:70:41:79:d6:70:13:88:87:7c:75:15:
7d:7a:6f:91:07:31:af:e3:d4:37:0a:3d:bc:b8:d3:
bb:56:19:53:c9:c0:ec:4c:20:f0:25:32:e7:60:86:
a6:5f:f6:0a:0a:30:90:6a:39:47:73:62:1d:0b:dd:
02:cc:37:a6:b2:c1:18:38:f8:2e:29:b6:3c:93:a5:
7f:3b:dc:56:68:91:fd:c3:8d:a2:7e:4a:7a:0b:e0:
d2:91:de:13:54:c8:78:66:8c:93:13:a2:9e:d2:db:
65:9c:cd:42:77:dc:86:1c:dd:58:5d:3c:12:4d:c7:
26:ee:0d:8b:7a:50:a3:f4:dd:06:7f:02:60:41:99:
a1:f5:77:6f:75:a3:3f:05:fa:26:f2:8b:b4:01:00:
1e:2e:1d:4e:ec:81:39:88:f8:09:8d:c2:a8:96:78:
4b:3d:04:b5:d4:55:86:4e:09:a1:32:31:af:e5:61:
91:03:0d:0b:3e:41:21:a8:6a:ab:0d:e9:97:ad:f5:
fb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0B:54:9D:27:9B:FA:D2:F7:CA:9E:0B:DE:08:2D:EE:7A:33:BE:32
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:84:e6:3d:e0:19:32:0c:46:0f:62:ab:99:03:3a:5b:bf:ec:
f5:c1:a4:7f:3f:f2:14:b2:eb:0a:7f:6e:07:2e:e6:13:a6:66:
c0:6f:7e:c0:a7:42:e9:e3:ef:15:34:9c:8b:78:23:3f:72:90:
28:5d:09:19:89:2f:f6:12:6e:88:39:90:d2:03:d9:15:fc:ed:
e8:b8:84:7d:fc:2f:79:ed:6c:80:26:59:23:f0:80:60:ba:7e:
3c:88:39:62:3b:0e:16:0d:98:58:23:01:b4:83:0e:0c:ab:ca:
0e:0c:3d:13:2e:8a:77:65:81:31:b9:74:3e:c1:56:a8:f6:cc:
2f:df:45:e7:19:c5:b4:3c:33:a0:12:5c:b3:fc:7a:df:ab:54:
cf:e2:39:4f:78:69:f8:ba:7e:e6:06:50:9c:c0:c7:54:36:a8:
24:35:bd:53:fa:ba:b3:c4:ae:75:40:91:10:f4:da:77:cc:33:
62:a2:38:84:5f:43:30:1f:a5:d9:20:4c:28:d7:d7:72:71:25:
4b:21:e8:ae:f1:85:1a:3a:f3:30:98:48:ff:5a:c3:a1:df:72:
e2:d4:28:85:66:55:03:58:93:ad:3a:6d:c8:7c:9c:11:ce:1c:
e1:64:3e:12:a4:bc:6e:ef:ee:dc:32:a2:13:ab:de:d8:52:2a:
be:0f:67:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:43 2025 by rpki-client