Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: g1OrGPryNKHKSjr6Jf2w2rYsnVGlq4ME44lITyucsMo=
Subject key identifier: 83:FA:09:9E:F7:0F:1A:28:3E:B1:41:0E:8D:EF:75:B8:64:E6:F4:2A
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 019A4EF492A1D78FBDDC87C3256C8D5ADD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 0F8F
Signing time: Tue 04 Nov 2025 13:00:42 +0000
Manifest this update: Tue 04 Nov 2025 13:00:42 +0000
Manifest next update: Wed 05 Nov 2025 13:00:42 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: D4YTZvOIiKESjIRut0Lt5zQgxy5uuVnU1LL/7gW66GM=)
2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:92:a1:d7:8f:bd:dc:87:c3:25:6c:8d:5a:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Nov 4 13:00:42 2025 GMT
Not After : Nov 5 13:00:42 2025 GMT
Subject: CN=83fa099ef70f1a283eb1410e8def75b864e6f42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:c8:74:c4:64:65:9f:84:31:9d:65:b5:8d:
27:0d:fc:50:9a:f7:68:b4:fd:ad:ea:dc:2f:8e:e8:
1a:9e:92:61:e7:30:36:0c:c6:78:68:ad:c0:d5:52:
53:90:8e:4f:f8:f3:76:86:fa:55:34:48:8f:32:98:
93:99:b6:1e:ab:c6:8c:e2:e4:71:80:3f:1d:c5:55:
e9:e5:15:53:ac:a4:b2:8a:58:87:51:3c:27:77:23:
0f:06:d0:d3:8f:1a:10:ce:92:48:10:63:8e:bb:c0:
84:a6:c6:6e:01:9a:94:ee:64:9b:1f:ef:0c:ca:3b:
ee:b5:bd:bb:62:7d:7e:e0:0c:f2:1e:d9:10:6e:4f:
94:93:42:d0:cd:8a:3b:49:15:cc:1f:f0:d7:e6:dd:
7d:a6:5a:26:72:32:d3:6e:11:f9:60:a6:fa:94:ec:
1f:6e:e0:ca:77:60:8f:fd:ee:83:00:a3:d5:b2:1c:
ad:1b:1a:a4:8d:82:dc:90:55:8e:18:4b:62:16:a7:
6d:e5:d0:17:18:d7:8b:63:91:c4:3b:af:af:38:47:
91:dd:5c:b4:21:1e:df:ea:47:8a:ff:22:17:ed:ca:
15:0d:f3:12:59:4b:25:88:bf:8a:64:e0:e8:dd:c1:
94:07:8a:17:b2:a7:02:7a:3b:cb:9c:82:94:be:34:
07:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FA:09:9E:F7:0F:1A:28:3E:B1:41:0E:8D:EF:75:B8:64:E6:F4:2A
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ac:15:55:bf:a1:64:62:2c:e4:b5:80:57:58:d0:83:0c:6a:
99:81:ca:fd:5a:b4:0f:ad:07:58:3c:1c:93:5f:8a:ad:2f:e4:
e8:01:2d:78:fb:f9:46:02:97:f5:51:99:7e:ea:fa:dd:66:3a:
ac:bf:66:1c:0b:ff:b8:84:53:7e:72:b2:1c:7d:db:83:fd:bb:
30:6e:c0:98:36:3d:47:f2:c3:d1:80:fe:da:a0:29:56:d5:5d:
f7:18:5a:22:51:c7:2b:f6:d6:cd:bc:d9:fa:33:53:42:3c:5d:
e1:be:84:4d:38:44:3c:13:5d:d5:04:1f:15:d6:3b:b3:5f:2b:
cb:32:14:5b:bf:b5:8c:6a:f6:06:d0:34:f1:fa:6f:f4:73:09:
17:04:7d:e8:65:1b:74:5f:ab:53:ec:c1:7e:0f:7d:fb:78:ba:
81:c0:a7:0e:d1:75:2d:53:8b:ab:77:55:02:f1:13:d9:1f:d7:
cb:52:38:9a:e6:c0:77:e6:6c:27:4d:21:24:69:bb:6e:28:a5:
8f:6d:e7:d9:7b:a0:71:a0:a6:dc:46:be:0c:f7:9b:86:56:fc:
fd:cf:22:42:68:34:58:5a:fe:ad:6c:9b:ad:dc:ad:a1:dd:e0:
4d:50:fe:ea:9c:47:d1:91:49:5d:a1:66:5e:6c:c0:7f:0f:b9:
eb:bf:32:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:41:58 2025 by rpki-client