Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: UcnjQ+AUy7yihspSiYSVoaDkxHpufr7qhwLKPKifpPY=
Subject key identifier: 6A:3D:52:7A:52:C1:23:CB:D2:AE:22:0A:81:5F:36:1C:44:21:36:3F
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019A5187338155AD72A70B5ABB1E5A89E3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 1018
Signing time: Wed 05 Nov 2025 01:00:05 +0000
Manifest this update: Wed 05 Nov 2025 01:00:05 +0000
Manifest next update: Thu 06 Nov 2025 01:00:05 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: gXGrcJ6/beA72vbTwfcDy/Xg5oLFHnDnwFCuSrprkjk=)
2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
5: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
6: YuG9z5M1XNs-bczHtpGOR8X7WYo.roa (hash: 9MEXkKrN+WhBMnvEE9wPkLraLpoTptX9TwNbpyCp4SU=)
7: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:33:81:55:ad:72:a7:0b:5a:bb:1e:5a:89:e3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Nov 5 01:00:05 2025 GMT
Not After : Nov 6 01:00:05 2025 GMT
Subject: CN=6a3d527a52c123cbd2ae220a815f361c4421363f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:8d:a5:36:80:44:00:35:8f:f4:99:61:b9:
37:92:0a:9a:ab:6d:ff:a9:95:71:ac:1f:45:4a:7e:
50:06:e1:2d:99:21:02:63:b9:27:b8:39:b2:ce:5c:
9b:a6:f8:91:7f:82:f2:41:92:94:b1:0c:35:af:87:
b4:d4:d4:68:d1:2f:b3:55:72:d4:c3:34:f0:31:6b:
fe:33:88:15:1d:ae:48:95:f1:17:0f:0d:17:a4:98:
9b:71:26:f8:01:b9:37:45:72:1c:de:08:95:2d:16:
cd:47:58:66:05:e5:52:42:bc:9c:e0:7f:41:13:5e:
0c:5b:02:8b:a5:25:ba:cd:0a:75:0b:bf:07:39:0d:
1b:99:14:1b:6c:0e:8a:14:0e:cc:e8:7e:63:ed:40:
25:5f:a0:45:e8:3d:1a:16:94:14:bc:00:0e:68:4b:
cd:58:f8:eb:31:dc:fe:fd:75:18:0c:14:6c:ea:07:
a9:f1:0f:8a:72:5d:78:aa:49:34:67:23:54:ec:32:
1c:65:75:d6:e9:b5:35:d0:8f:55:7f:97:5f:4b:a9:
7e:87:ee:a6:52:fa:69:49:58:52:6d:fc:df:c3:5a:
02:f4:6f:f6:f2:90:2b:90:5f:0a:e1:05:43:12:04:
86:3d:66:e9:74:a1:39:63:53:ce:26:21:d4:14:52:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3D:52:7A:52:C1:23:CB:D2:AE:22:0A:81:5F:36:1C:44:21:36:3F
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:80:1d:27:4f:d0:69:94:a8:e7:b1:9a:c7:f3:a7:3b:da:95:
e6:c2:2c:1a:2c:d9:22:d3:cc:4d:78:a4:7b:89:78:0f:fb:99:
22:7a:72:a5:1a:9c:f9:3f:5a:7e:a8:21:14:d8:47:ff:83:79:
e6:12:03:4d:8d:b8:d7:43:2c:b6:58:b9:d4:de:02:26:5e:58:
dd:fb:db:4f:c8:66:d2:f7:44:45:90:1f:57:b9:20:bd:c6:11:
41:d2:ee:e0:7c:a5:c0:e6:ab:27:b8:ff:92:0c:50:ad:88:56:
fc:40:5a:d9:ed:90:85:c7:a2:36:8f:21:a1:20:64:a0:a8:0e:
57:ae:97:8c:1c:df:83:a6:03:d3:d5:6d:00:da:f3:43:ab:10:
6c:b9:c3:ab:56:b1:06:ee:42:8f:79:72:37:41:13:cc:46:23:
c9:65:f7:18:9d:58:c7:1a:31:1b:c9:27:09:b1:5e:a4:2e:5a:
08:df:f4:62:c9:99:aa:0f:ed:6b:31:a6:43:88:2d:59:f0:0c:
56:cd:e6:06:39:cc:34:e2:9b:55:30:84:61:e3:9d:b8:4f:a2:
82:c1:d4:5e:37:c3:bc:60:13:66:6f:51:81:4e:7d:dd:03:7e:
f6:f7:30:50:95:6f:bb:46:b0:78:5c:ec:2b:a9:8c:cc:5a:99:
e5:f9:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:12:31 2025 by rpki-client