Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: plab94vEgJy1xOhb/XSL3hPiFbrTHcaEcKxaCQwT1Cw=
Subject key identifier: 69:08:C3:B2:39:2F:E7:66:A0:00:75:CD:7D:60:D0:39:F9:0F:FE:E0
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 0197B6D74FB8144B4C9A883F2AC5132BB051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 04C5
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: 4I+smMUlshdimdd4jzh5u/vA9tNaG1A3F9LkfXrJHcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4f:b8:14:4b:4c:9a:88:3f:2a:c5:13:2b:b0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=6908c3b2392fe766a00075cd7d60d039f90ffee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:8b:a6:1f:fa:25:3f:7a:5c:a5:53:29:6e:
2a:6a:b1:d1:a9:57:69:6b:1c:ba:51:53:cd:f2:7e:
32:ad:cd:c8:82:48:f1:e3:00:a1:d3:9d:b5:f5:50:
5a:b4:66:ff:c4:a0:af:cc:1f:19:6e:4b:c2:83:d2:
98:3f:d2:60:71:06:2b:88:63:73:11:31:8f:66:74:
d4:ce:0c:ac:c1:40:01:d9:d0:fb:2e:36:00:3f:e0:
33:6e:11:f6:ee:f1:8c:3a:79:ba:bb:31:49:fc:ed:
55:1a:df:91:03:65:25:05:ce:d1:8e:ab:ff:bc:78:
9b:38:5f:b9:cc:52:f7:8b:f1:ee:13:26:5c:58:59:
75:cc:d7:fe:3b:95:22:e1:b1:7c:97:c9:15:83:12:
30:cc:c3:69:1f:c5:ad:86:d3:20:c2:0a:8c:f3:00:
e9:8e:78:81:87:d0:fb:fb:85:f6:c6:b9:0d:e1:9f:
91:ef:4c:20:f2:06:0a:42:ac:38:23:af:aa:53:bf:
44:4a:39:3e:66:37:e5:95:9d:7b:5e:37:6e:6f:cd:
4d:b4:9f:a6:24:e4:1b:27:ae:a0:fd:0f:a1:f7:8e:
55:35:c2:d2:c7:44:34:7a:b3:39:e1:11:45:1a:ed:
a9:d7:b0:cd:bb:e8:27:20:2a:f8:43:b8:8c:41:95:
20:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:08:C3:B2:39:2F:E7:66:A0:00:75:CD:7D:60:D0:39:F9:0F:FE:E0
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:e3:49:b7:fb:52:bf:2e:7c:f1:a1:52:dc:ae:bd:4f:0a:
f1:13:d3:6b:8a:f7:64:57:2b:3c:3c:4b:64:7e:9f:cc:55:3d:
9a:3f:66:a1:b8:8c:5c:b2:b5:b7:f7:6c:0a:4c:8b:4a:1c:cb:
1a:39:2f:1a:6e:6b:3e:21:29:cd:f5:2c:45:27:4c:28:5e:15:
cc:a7:4f:7e:89:f4:13:b2:9c:16:f8:92:cb:e9:e3:aa:c0:a9:
b2:87:c3:b4:fe:21:86:b2:6f:ae:f2:79:ca:dc:65:6c:b3:7a:
29:b5:e1:28:6f:54:a3:dc:ee:fd:27:69:cc:48:7e:78:de:4a:
18:61:57:f8:ad:7f:b0:00:5d:6a:3f:9e:98:88:e9:75:97:a4:
87:5e:06:92:0f:df:1f:f4:7b:06:b6:80:a0:d7:1e:b0:55:d8:
1f:64:d1:79:b2:19:43:10:5c:90:16:e5:83:2e:ad:85:f2:66:
56:c2:2c:a7:8d:b8:74:f6:4a:0c:ef:ec:11:75:f9:4f:3a:0d:
8a:89:17:a3:c7:00:ff:b2:37:b1:7f:2a:39:71:2b:7f:81:2f:
ca:66:e0:77:aa:ac:b2:01:ee:ac:a3:1a:cc:4a:71:8f:d8:82:
e2:fd:16:bd:87:f3:2b:c5:69:af:f1:69:f6:df:f2:1f:d7:2e:
e2:e8:b9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:05 2025 by rpki-client