Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: gZrrLAcGuamSv9wT6qfZkxVKMS9DrO9twXM1x3hj6RA=
Subject key identifier: 32:72:A0:D4:2F:1F:BC:E0:2F:7A:F1:AD:24:F8:03:30:B9:58:D1:AF
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 019873E3D7C193B8446A7A5C1482A78D1BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 0E99
Signing time: Mon 04 Aug 2025 07:02:48 +0000
Manifest this update: Mon 04 Aug 2025 07:02:48 +0000
Manifest next update: Tue 05 Aug 2025 07:02:48 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: 9rdVF1iMSxRWlHNvVGLhSW/ck6kVYIMfv2j2/tQdKUY=)
2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:d7:c1:93:b8:44:6a:7a:5c:14:82:a7:8d:1b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Aug 4 07:02:48 2025 GMT
Not After : Aug 5 07:02:48 2025 GMT
Subject: CN=3272a0d42f1fbce02f7af1ad24f80330b958d1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:84:31:ee:76:94:6a:95:b1:2f:f5:83:cc:
1c:5c:d7:17:26:6a:6f:50:8a:6b:4f:72:49:8f:0f:
44:d4:6f:a9:1a:50:f0:fd:30:18:4b:34:15:5b:d9:
1e:ed:d1:b2:9a:ef:ca:1c:fc:f8:c2:ea:ea:64:1d:
e9:20:b6:cf:77:e7:60:01:5d:5e:dd:eb:76:a4:0c:
45:3e:b1:5d:30:41:a6:dc:9f:bf:a5:b1:f9:32:b3:
9f:83:68:ce:55:59:4f:f0:15:c1:75:57:dd:c4:b0:
4d:8b:04:4c:01:cf:e0:7b:f6:54:8e:54:40:a6:0a:
18:f4:59:31:02:13:d1:03:f3:21:15:6b:26:95:53:
0b:fc:a1:a8:ea:02:4f:ad:29:d0:65:d7:dd:46:5d:
07:69:40:12:9d:4f:f8:53:91:dd:af:db:d8:49:9c:
80:85:e8:18:d6:bf:5a:9e:bb:ac:57:3f:ca:25:0f:
65:15:c0:68:a8:26:a1:14:07:d2:69:3b:4d:00:9e:
c3:60:21:be:b0:d2:b8:8b:95:df:bf:84:a7:8a:c1:
2f:d5:0d:d7:14:87:ce:29:ec:8e:c3:8b:a3:3d:fb:
99:a1:a4:2d:5e:8a:8d:38:9b:9e:d5:05:85:c7:5c:
10:b2:c2:18:fe:5b:31:f0:59:82:d6:2d:a1:de:2c:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:72:A0:D4:2F:1F:BC:E0:2F:7A:F1:AD:24:F8:03:30:B9:58:D1:AF
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ca:6a:63:06:5f:c0:c1:40:5a:74:ee:58:90:c1:55:cf:14:
85:fc:86:95:81:ae:9a:f4:19:80:a1:ee:f6:a8:6e:54:fc:d9:
08:cc:e7:ad:3a:50:2b:0f:37:97:dd:99:78:a0:1e:44:3d:53:
e4:87:91:b6:1c:22:63:0e:94:ff:8a:41:53:c9:21:76:c6:78:
33:5a:b5:3f:38:ae:6c:0a:d5:87:83:df:46:d8:07:d0:2b:1e:
2d:97:d8:ff:e7:42:21:1b:0c:e6:51:95:ef:b7:80:eb:9e:04:
26:29:4c:32:35:ce:13:30:3e:44:32:c3:57:ee:16:38:f4:7d:
3f:7c:3d:f7:ac:2d:00:b6:c0:08:98:60:b0:24:41:10:7f:67:
61:d9:77:73:38:d8:57:f9:ba:c8:16:69:07:49:79:7d:46:6e:
c7:40:ac:c4:58:4f:e1:32:90:70:25:76:6a:10:db:d7:75:f4:
a6:dd:94:6a:08:b8:4b:69:b3:ed:2b:ec:b1:52:5a:5e:f6:0e:
e8:31:85:1d:fb:50:81:d1:ce:5e:24:41:c9:82:96:f3:03:81:
28:2e:90:00:06:c5:27:aa:b6:4a:02:ec:c6:38:09:3a:2b:e5:
42:47:3a:15:4e:99:96:95:18:23:3e:d1:3e:8c:f7:c1:d2:6c:
88:64:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:03 2025 by rpki-client