Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: JoKuWm64yr88k/RbWcK36c32ydTdv3baKrkG3JvpO74=
Subject key identifier: 48:BB:1A:13:5D:D1:D4:6C:D6:E9:1B:57:39:0B:73:36:CA:F9:96:4D
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 019A4FD03E6C501F62F363BC0EB691CDA26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:38 +0000
Manifest this update: Tue 04 Nov 2025 17:00:38 +0000
Manifest next update: Wed 05 Nov 2025 17:00:38 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: YOUeHV+zV8F4orCGgCdThyV7k1Hsf0ZxcQVCNj2Yt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:3e:6c:50:1f:62:f3:63:bc:0e:b6:91:cd:a2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Nov 4 17:00:38 2025 GMT
Not After : Nov 5 17:00:38 2025 GMT
Subject: CN=48bb1a135dd1d46cd6e91b57390b7336caf9964d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:f1:13:55:4d:88:8c:21:c6:37:a1:df:e1:
54:01:12:a6:ce:18:c8:75:c7:53:e9:06:58:0f:a2:
f1:87:9d:44:b9:14:f3:0e:8c:3e:0d:9c:a4:b1:f8:
fd:d2:0c:32:8f:df:14:8c:68:b9:41:17:ab:8b:63:
67:3d:c6:0e:b9:82:66:0c:b5:01:3d:54:85:d5:10:
06:89:eb:4f:13:a1:b5:35:13:6f:9a:7a:d2:6d:cf:
11:fb:46:d7:99:0f:26:ec:b1:b0:f6:18:bd:65:6b:
a4:a3:ff:c7:55:37:58:51:db:03:21:27:9a:8e:35:
1d:b2:8d:ae:b2:f5:e1:89:4a:02:07:91:ac:e5:4a:
14:f2:3a:c2:f8:27:7e:73:45:27:81:16:89:24:f7:
98:4a:32:67:72:f9:1b:22:b8:0f:fb:52:7d:70:d9:
c0:e6:c4:53:d8:b7:fd:87:7e:1a:56:bc:ef:a6:75:
f8:91:63:5c:f2:e8:ad:4d:da:9a:f4:f8:e4:5f:3a:
22:65:dc:f2:0c:c6:94:2b:df:28:6d:f2:ac:0b:bf:
f7:26:10:fa:40:6a:f4:60:5b:21:7c:10:fd:c8:6f:
5f:90:b7:21:51:85:5e:bd:58:fc:79:7b:1d:4a:73:
44:37:bb:cf:36:36:68:9f:ec:c4:03:0b:ef:68:b6:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:1A:13:5D:D1:D4:6C:D6:E9:1B:57:39:0B:73:36:CA:F9:96:4D
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2c:df:34:5b:20:4a:36:6a:15:6c:7e:1b:10:11:72:4e:2e:
e8:db:95:6f:6c:f1:0a:65:14:26:7f:92:3b:69:52:4f:2e:bf:
9b:45:ec:05:31:cd:21:51:1b:12:84:2b:65:35:55:62:64:9d:
d6:4b:b5:de:62:49:f9:65:16:97:a6:80:30:df:f0:c9:ca:57:
ba:56:c1:66:65:6c:cf:08:ac:7c:42:9e:ac:7b:ff:38:e6:63:
57:57:64:ae:e3:86:63:47:46:68:a1:27:ae:74:19:52:13:89:
52:59:b6:77:23:4b:f5:2a:6c:9d:f1:b4:91:d5:1f:4c:b2:f6:
88:53:f3:84:b3:a7:c9:02:90:8a:75:f7:b0:70:9e:e7:65:f0:
ab:1c:7e:dc:3e:8e:6b:79:b1:3c:5d:aa:83:b2:28:a8:37:c5:
3e:d0:d6:f1:4d:5a:9f:bb:f7:9f:b7:d1:41:33:43:c0:e6:60:
fa:9e:be:19:bb:a4:8b:6e:df:70:76:6f:e0:ec:8a:ce:e2:25:
77:c8:46:db:ca:34:e6:94:24:b5:46:8f:9c:4e:0f:61:4f:87:
07:86:45:ea:33:76:eb:98:c8:03:75:13:77:5f:a2:5c:d0:31:
57:6b:be:4e:ab:ab:03:ac:91:76:ca:00:1b:9a:4e:5f:9c:27:
c4:0e:04:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:34:25 2025 by rpki-client