Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: byY8ghKZ/DjRMNfpRO250abcNOrK6pRqa0jNHNg14MU=
Subject key identifier: 6A:E8:04:21:FE:6D:1F:02:F1:C4:DB:B6:97:43:A5:D2:1C:C5:70:43
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 01988CFD4A08A213A987BB6822ABEE3DCE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 05AA
Signing time: Sat 09 Aug 2025 04:01:06 +0000
Manifest this update: Sat 09 Aug 2025 04:01:06 +0000
Manifest next update: Sun 10 Aug 2025 04:01:06 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: TTi66v65VykfUX+UuzYnQw9lXyeV9KXpKDeOv5il1Gs=)
2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:4a:08:a2:13:a9:87:bb:68:22:ab:ee:3d:ce:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Aug 9 04:01:06 2025 GMT
Not After : Aug 10 04:01:06 2025 GMT
Subject: CN=6ae80421fe6d1f02f1c4dbb69743a5d21cc57043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:9b:24:b2:ea:de:4c:ab:83:e4:9d:a0:99:
d8:38:c2:e4:51:52:d2:1d:c8:b1:4c:26:7b:87:d7:
7f:15:2f:22:18:46:6d:50:8c:af:f8:8d:c8:b3:e1:
2e:cb:59:17:9a:1f:0f:bb:0a:92:43:a0:69:16:02:
d5:f2:12:58:8c:6b:d8:14:2c:2f:0e:f0:e8:e2:dd:
2e:72:34:72:9c:38:b6:3e:14:25:d4:b7:0c:ce:b9:
cd:66:64:c6:2d:38:16:44:a7:ce:91:0c:fe:b2:90:
12:e4:5a:89:65:d0:6c:06:df:d1:29:38:36:44:32:
b8:b0:2f:19:ec:31:1c:69:f2:94:87:1b:d3:f4:08:
5a:c8:65:79:82:df:bd:20:5d:97:b6:dd:15:21:17:
a0:8e:97:9a:ff:13:04:60:7e:cd:b0:3c:b0:b0:00:
54:1d:5f:27:24:80:90:c8:57:cc:a0:3b:c2:cb:e8:
ee:1e:09:d3:2e:0b:fe:d7:7c:59:c5:85:12:b4:21:
ae:d3:c2:ca:c3:0a:58:42:0a:fa:bc:af:7e:20:f1:
85:c5:3f:58:97:34:13:5f:c5:48:03:f0:c1:dd:ab:
48:64:38:c2:93:7e:d2:11:64:f0:3a:4d:a4:44:ac:
73:14:44:d5:87:6f:a5:1d:98:d1:37:ac:f3:17:46:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E8:04:21:FE:6D:1F:02:F1:C4:DB:B6:97:43:A5:D2:1C:C5:70:43
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:4b:f1:86:ce:aa:2b:eb:48:dc:49:78:1a:e9:3a:96:49:
e3:d2:49:b3:e2:6c:76:81:04:3a:2a:30:0a:b5:dd:61:fe:dc:
41:97:0e:73:3e:fb:be:38:80:25:7c:bc:46:1e:89:9a:8a:84:
f7:19:09:5d:45:ed:46:c3:e8:26:bf:1a:62:d0:68:2c:02:6e:
c5:6f:be:02:57:b8:89:0b:11:82:23:43:b9:05:93:65:9f:95:
45:5e:00:91:a5:ea:ea:a0:d9:7f:f2:5d:08:23:55:db:68:6a:
49:0b:96:32:e1:b2:51:e2:43:59:ea:0f:f2:c0:92:ea:e0:e2:
88:ee:69:8e:05:8d:84:76:81:c9:a0:22:b6:91:54:0c:4d:0c:
74:e6:67:78:0e:81:fc:85:ec:94:6d:e5:07:d7:f9:c2:16:b9:
50:8b:84:86:f7:55:17:10:cb:ec:2a:fa:56:5a:79:36:81:a1:
bf:f7:fa:39:8b:8a:20:45:a6:4e:89:dd:a0:2e:a2:95:cb:d6:
fd:d9:c8:46:5d:30:22:61:8c:af:a7:ff:89:64:c7:51:a3:fc:
56:8d:98:62:88:b0:00:73:3d:ab:38:03:3c:b7:3a:0c:cc:94:
ab:5c:44:c7:d7:2e:c8:bc:9a:d5:5c:65:d5:e4:2f:fe:16:39:
43:c5:6b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/UoIohOph7toIqvuPc46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjUwODA5MDQwMTA2WhcNMjUwODEwMDQwMTA2WjAzMTEwLwYDVQQD
Eyg2YWU4MDQyMWZlNmQxZjAyZjFjNGRiYjY5NzQzYTVkMjFjYzU3MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnCbJLLq3kyrg+SdoJnYOMLkUVLS
HcixTCZ7h9d/FS8iGEZtUIyv+I3Is+Euy1kXmh8PuwqSQ6BpFgLV8hJYjGvYFCwv
DvDo4t0ucjRynDi2PhQl1LcMzrnNZmTGLTgWRKfOkQz+spAS5FqJZdBsBt/RKTg2
RDK4sC8Z7DEcafKUhxvT9AhayGV5gt+9IF2Xtt0VIRegjpea/xMEYH7NsDywsABU
HV8nJICQyFfMoDvCy+juHgnTLgv+13xZxYUStCGu08LKwwpYQgr6vK9+IPGFxT9Y
lzQTX8VIA/DB3atIZDjCk37SEWTwOk2kRKxzFETVh2+lHZjRN6zzF0bdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGroBCH+bR8C8cTbtpdDpdIcxXBDMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmatL8YbO
qivrSNxJeBrpOpZJ49JJs+JsdoEEOiowCrXdYf7cQZcOcz77vjiAJXy8Rh6JmoqE
9xkJXUXtRsPoJr8aYtBoLAJuxW++Ale4iQsRgiNDuQWTZZ+VRV4AkaXq6qDZf/Jd
CCNV22hqSQuWMuGyUeJDWeoP8sCS6uDiiO5pjgWNhHaByaAitpFUDE0MdOZneA6B
/IXslG3lB9f5wha5UIuEhvdVFxDL7Cr6Vlp5NoGhv/f6OYuKIEWmTondoC6ilcvW
/dnIRl0wImGMr6f/iWTHUaP8Vo2YYoiwAHM9qzgDPLc6DMyUq1xEx9cuyLya1Vxl
1eQv/hY5Q8VryA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:34 2025 by rpki-client