Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: KFlrgo5kPh5kil+gKttA3gHE9oIGps7lkGRKxCacdWY=
Subject key identifier: 20:87:E1:F4:00:11:D8:AA:E7:7A:67:B7:87:2C:8B:DD:8D:B3:9A:09
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 019873E22C356DFB2BCC1581525E6462BC6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 09F0
Signing time: Mon 04 Aug 2025 07:00:58 +0000
Manifest this update: Mon 04 Aug 2025 07:00:58 +0000
Manifest next update: Tue 05 Aug 2025 07:00:58 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: An5dPg7s12Wdci0+RKZjl4oEmSr8JqfzwGb5L63HKSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:2c:35:6d:fb:2b:cc:15:81:52:5e:64:62:bc:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Aug 4 07:00:58 2025 GMT
Not After : Aug 5 07:00:58 2025 GMT
Subject: CN=2087e1f40011d8aae77a67b7872c8bdd8db39a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:9c:9f:4e:e8:ea:60:da:3c:3c:27:f5:6d:
36:7a:1b:be:58:84:c3:ca:cc:48:a5:7e:eb:76:76:
34:4c:46:63:41:e8:20:c7:8b:68:00:92:eb:ef:01:
a6:8f:d9:56:dd:e6:33:3f:c4:7f:76:86:d3:76:d0:
d6:5a:ec:4f:c3:7c:b9:db:75:3b:5d:f0:42:d4:98:
cf:58:e7:69:89:90:6d:97:87:ea:b3:10:03:3e:a3:
ee:1f:d5:c4:c9:68:72:68:ad:4e:de:09:94:19:8f:
39:b5:0e:25:bd:fd:aa:c1:15:eb:b9:ea:c7:9a:f1:
ac:9b:b9:c5:8a:68:ea:56:a8:e6:07:0c:b8:f6:04:
cd:f2:1d:56:0d:0f:a7:6e:61:9a:d5:f4:d5:a0:14:
f7:38:23:cf:30:99:38:f6:d5:96:6b:f7:4f:84:ea:
0a:45:89:4e:55:c6:40:72:bc:92:76:33:af:6e:5c:
a0:58:04:7c:97:e5:17:c5:24:25:52:ec:f1:c9:40:
54:fd:a4:0a:01:e7:05:23:8a:e7:a1:14:a1:1b:98:
3a:ed:bb:8b:8f:c0:80:b1:f1:de:90:f2:97:a0:3b:
57:47:6f:9c:cf:2d:f9:4e:4b:c2:8a:14:52:5b:d1:
d3:07:aa:c4:7f:9f:74:15:ae:00:83:73:4a:46:33:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:87:E1:F4:00:11:D8:AA:E7:7A:67:B7:87:2C:8B:DD:8D:B3:9A:09
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a2:01:d3:d6:d9:2e:ac:b5:2a:b5:d0:d7:18:c7:60:b9:4e:
ca:61:ff:f5:d5:29:ea:2e:d3:8d:46:89:21:f2:46:2d:3b:d8:
28:ce:b4:08:4f:7f:3c:8f:aa:18:d4:fb:4b:b7:e1:53:c8:31:
3b:62:67:cf:e0:1c:74:ff:e4:e5:c6:9c:46:18:8d:ae:44:98:
a3:85:33:67:ec:2a:65:ab:05:f2:e8:5e:63:46:bd:b4:e4:ef:
b1:ed:f5:8d:fa:34:33:d3:d5:1d:69:cb:9d:23:5e:d0:d1:29:
c5:7d:d9:e8:ee:64:fe:ea:1d:0d:f2:46:a4:ed:4d:3b:17:1a:
ed:31:e5:a0:5b:99:ca:02:5b:b4:9d:3d:46:06:c4:34:ca:6a:
69:2d:aa:a4:66:19:2a:3d:7b:d4:75:d4:3a:1a:b7:e6:1b:48:
62:9c:42:dd:80:9b:06:74:8a:9b:23:c5:d9:82:65:ad:6c:97:
d0:25:6d:58:3f:3b:ca:6b:21:4c:3c:de:b7:20:9e:03:3b:e6:
04:84:f2:19:61:fc:5c:f4:5e:b0:19:34:fb:97:8f:1f:c8:c8:
d4:ea:fe:ec:0b:ac:ff:90:bb:b9:e3:90:c0:ef:d1:b8:12:fe:
c7:0f:8c:d3:a1:a6:6e:b9:34:02:80:88:c4:7d:aa:9d:01:3d:
5d:94:3b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:21:56 2025 by rpki-client