
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
File: 8OFRCDov84DRcllDS2S0_LBqhe8.mft (raw, json)
Hash identifier: a/rvcsJ1Vky15bjhRP8FqKtuNtzu5UKFqZTr1vazc0k=
Subject key identifier: 83:0F:B1:AF:85:56:6D:73:AA:86:C4:92:68:EF:60:9B:81:D4:7C:52
Authority key identifier: F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
Certificate issuer: /CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Certificate serial: 0199FC213AB41F68277B36BACF225D781E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
Manifest number: 05F2
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: 1-L-JDC3WGOZA5twynjFnC7YtGIo.roa (hash: zVRNbVcQozH8al78fGXQUKnWEO8gs0JQUcFnFpNO9u0=)
2: 8OFRCDov84DRcllDS2S0_LBqhe8.crl (hash: PIlK+5STIbpJZnIMLI8U5TtuMuzr/51Is0qxrteI1Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3a:b4:1f:68:27:7b:36:ba:cf:22:5d:78:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e151083a2ff380d17259434b64b4fcb06a85ef
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=830fb1af85566d73aa86c49268ef609b81d47c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2c:f1:2a:75:8a:9f:5f:9b:09:8c:a5:af:3c:
1c:cb:2b:90:f0:ec:c8:a8:b9:a2:94:3b:05:cc:20:
95:6c:85:80:21:69:ba:5f:41:29:c6:be:d7:e8:aa:
69:38:e2:11:45:40:82:05:c0:44:61:28:72:73:ea:
9a:33:67:78:86:b1:89:b1:72:d0:5d:25:ad:9a:22:
d9:79:df:65:d7:38:33:94:09:da:fa:08:1a:1d:f5:
ff:0d:7f:bb:61:2d:1d:9b:03:8b:ed:92:9a:4a:e9:
bc:d4:71:e2:a3:4d:ec:9e:cc:19:3b:f6:00:a4:d3:
28:2d:af:03:c1:84:98:eb:90:33:7a:0c:4a:67:e1:
e0:d2:0c:ba:1a:94:c5:53:b5:a3:b8:2e:ba:a4:71:
08:59:df:0b:7b:1e:7c:30:c2:c6:61:73:75:3c:0f:
d5:12:fe:9b:92:db:e1:cd:05:4b:4d:54:aa:ff:e6:
f7:b3:e4:18:55:cf:a2:69:06:ee:3a:49:05:b0:d6:
07:48:70:21:13:ff:51:30:00:cc:fa:20:6c:00:67:
3f:2c:16:03:c8:9d:15:1d:79:71:e4:c0:86:64:bf:
dd:92:38:5a:70:11:f4:cf:f0:db:2a:74:b7:dd:83:
07:7b:2e:4c:66:cb:51:f1:8d:5f:f3:1c:a3:fc:3b:
1d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0F:B1:AF:85:56:6D:73:AA:86:C4:92:68:EF:60:9B:81:D4:7C:52
X509v3 Authority Key Identifier:
keyid:F0:E1:51:08:3A:2F:F3:80:D1:72:59:43:4B:64:B4:FC:B0:6A:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OFRCDov84DRcllDS2S0_LBqhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/96ebbf-09a2-4972-ab7d-c7ef8682d67d/1/8OFRCDov84DRcllDS2S0_LBqhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fc:b8:17:cd:1c:90:c6:16:31:05:76:4e:13:07:c8:fb:75:
5c:87:8d:34:d2:88:44:0a:5b:7c:d2:8d:ce:98:71:8a:e8:03:
69:2b:28:d8:23:06:7c:07:88:5b:58:86:2d:1a:ec:5a:f0:32:
81:69:36:6c:d1:ae:d2:15:d1:30:c5:98:9a:91:29:b1:02:49:
f6:b3:58:6a:d4:5c:08:80:85:a1:17:e3:4d:06:0e:e0:6d:dd:
5d:ee:ed:c2:a4:bf:b4:b7:25:7f:33:62:1a:17:1e:67:63:5f:
03:b4:4e:52:3d:e1:4d:b8:bb:b5:c0:52:84:ba:da:34:f4:67:
da:5a:89:a6:c4:3d:8f:e4:65:2d:66:00:b5:7e:0c:fe:1f:09:
97:fb:e7:5f:84:b7:c6:aa:46:fd:91:8b:a4:37:33:2a:f2:53:
e3:cb:2a:2f:08:84:26:d4:1c:52:f9:2d:f0:ac:59:ad:82:50:
d1:a1:ab:6b:7c:fd:cb:02:18:a5:c1:b0:ea:3c:5b:a8:8a:6b:
8d:88:3e:11:10:c3:38:ad:58:1a:f9:6c:4a:9a:34:52:43:e5:
ce:50:2c:04:1b:03:6f:51:64:06:58:55:64:cb:6e:12:14:95:
16:79:58:bf:1e:0b:7f:06:49:b6:a8:5a:0c:bf:8e:37:d0:1a:
9c:40:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:32 2025 by rpki-client