Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: bsMABQ8MA8sLTvdyfiSoN4e1RHji/Q2tC2NzPX5HCr4=
Subject key identifier: FE:D6:80:EC:CD:7C:1A:29:41:1C:33:12:19:FD:8A:E3:21:72:72:89
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 0198D4A7E544E946B2E710A335D5B4D82F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 0559
Signing time: Sat 23 Aug 2025 02:00:29 +0000
Manifest this update: Sat 23 Aug 2025 02:00:29 +0000
Manifest next update: Sun 24 Aug 2025 02:00:29 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: cE98dpgCniCcVEvY9+QQAwcZoH7Wi9POU2mhC7nzfSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:e5:44:e9:46:b2:e7:10:a3:35:d5:b4:d8:2f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Aug 23 02:00:29 2025 GMT
Not After : Aug 24 02:00:29 2025 GMT
Subject: CN=fed680eccd7c1a29411c331219fd8ae321727289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:12:a0:28:b4:d7:79:a3:e9:e4:fa:74:93:4c:
8a:47:47:31:56:13:0c:68:94:e0:34:71:12:5f:10:
0b:64:8d:df:93:1d:b8:fb:84:b0:eb:6e:33:92:cc:
93:11:47:67:d8:ca:b5:6b:20:61:7d:6a:04:33:b9:
f7:a2:9f:29:16:70:aa:c2:8b:61:ad:fd:df:43:85:
83:59:fe:d3:73:07:94:4a:e6:be:8d:68:05:a3:9f:
2f:90:bc:bc:97:6d:ee:b7:0d:17:03:44:b8:11:73:
f4:67:22:a6:9f:ca:27:71:cb:94:03:b6:d8:e6:65:
85:74:e2:6d:9e:d9:49:c1:5a:f8:60:eb:63:6b:85:
6e:6a:33:13:a4:c6:70:c2:1d:69:06:bd:60:55:2c:
4d:ae:17:1b:1e:87:a8:59:8a:31:44:77:c4:49:63:
f8:75:74:c6:7a:f5:15:93:ee:2a:36:bb:3a:62:27:
65:44:f8:57:bb:48:1a:c5:89:0f:64:09:21:94:bd:
bf:36:28:da:80:b4:a4:8b:92:30:9c:01:57:e1:90:
73:2a:c3:1b:b4:29:0a:15:e0:8b:33:c1:85:64:6a:
c6:c5:f6:f6:83:5c:bb:de:5e:e5:00:e1:69:50:16:
50:20:e8:88:ea:98:4a:16:d4:3d:a7:69:e8:b1:53:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D6:80:EC:CD:7C:1A:29:41:1C:33:12:19:FD:8A:E3:21:72:72:89
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b1:83:35:98:81:09:12:a6:e5:2a:62:dd:98:03:e8:86:31:
aa:92:a6:f8:51:34:b4:14:89:4a:35:dd:cf:7c:09:14:92:4b:
4d:87:ef:da:28:54:ca:50:d6:69:55:5f:f7:18:79:6d:cb:17:
e1:c3:1b:e4:41:4b:47:db:3a:ca:f6:53:c8:0b:c2:64:45:92:
98:21:0e:ff:81:0a:0a:a0:35:5d:c4:53:b8:a8:be:1e:19:37:
6e:ee:3b:6a:83:1b:8a:05:3d:1d:03:ea:c2:50:c4:68:4e:de:
c2:db:56:01:0a:96:c7:fd:30:75:9a:fb:7e:b8:eb:68:47:85:
2c:5e:c1:ab:05:a6:5f:6c:e6:96:76:0f:8d:db:86:5a:9b:e5:
4d:9d:01:92:5d:da:25:b4:a4:9b:90:13:ad:d4:33:2e:09:3c:
ff:a3:84:f1:94:04:cb:4e:fd:48:57:44:80:a9:21:d5:17:40:
e1:9d:8e:00:c9:04:be:db:60:6d:d3:16:6e:a5:87:0e:e2:5c:
97:ff:78:d4:b4:72:d3:88:9d:fc:28:06:6f:e1:e9:3a:21:81:
b5:cf:d3:96:cb:58:4d:76:76:07:21:55:61:ee:85:46:ad:85:
ea:52:99:16:ea:5d:e2:0d:38:30:7c:7f:9c:04:a8:e0:e7:d1:
87:64:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:15 2025 by rpki-client