Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: 0hjk/OLWxGaymPwuUcmJFB17Rh+GfMGd2ip+8MgJ1wU=
Subject key identifier: 43:D2:22:9F:28:3B:04:61:09:24:ED:A4:17:9A:DB:D1:1D:73:CD:C9
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 0198530E0C266A8FD64C54763E65A9AB69E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 0E88
Signing time: Mon 28 Jul 2025 22:01:26 +0000
Manifest this update: Mon 28 Jul 2025 22:01:26 +0000
Manifest next update: Tue 29 Jul 2025 22:01:26 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: fIx/VQsZudzlBNyZ3dVwNPBQdcBUQhIjMAhub6GIWZw=)
2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:0c:26:6a:8f:d6:4c:54:76:3e:65:a9:ab:69:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Jul 28 22:01:26 2025 GMT
Not After : Jul 29 22:01:26 2025 GMT
Subject: CN=43d2229f283b04610924eda4179adbd11d73cdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b8:23:33:8c:43:7e:c0:e8:10:0f:d5:2b:4f:
ec:42:54:dd:47:cc:e8:08:55:96:79:1c:f0:ff:89:
b1:28:f4:31:1e:17:ba:33:aa:64:5d:99:98:f1:2b:
5f:e6:70:8b:b5:7f:41:bb:68:f3:70:19:cc:59:08:
6f:d0:b1:ca:db:a6:b2:d8:bd:53:93:a1:84:d9:72:
d9:94:80:f6:ab:09:e0:46:65:8d:b0:a5:3d:54:6b:
53:28:65:0c:fe:f8:ad:46:d9:1d:fb:02:d4:0b:ef:
08:ba:dd:ee:ef:dd:67:8e:1a:b4:aa:77:6e:ea:5e:
24:65:63:86:e5:9a:62:ea:31:d4:f0:e2:b7:35:c9:
9d:47:c4:9d:4a:11:16:66:c1:85:a5:de:25:93:dd:
71:7b:a3:39:9f:8d:12:b4:47:9c:3c:84:d6:12:2f:
71:35:ec:db:90:39:bb:1b:55:5a:e4:52:7f:43:fc:
8d:62:37:b2:d3:01:5a:f1:55:c1:ee:25:69:e5:ad:
38:e7:d0:34:a5:fa:b5:85:85:dd:f0:04:12:87:13:
62:ab:f7:f7:51:92:b6:71:9d:f0:74:fd:82:0e:db:
ca:c3:a0:39:40:bc:37:ad:8f:ee:21:25:bf:7b:10:
74:65:96:88:1d:ca:74:de:fe:13:fe:3d:c9:92:5f:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D2:22:9F:28:3B:04:61:09:24:ED:A4:17:9A:DB:D1:1D:73:CD:C9
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:52:db:c4:19:8b:a7:42:79:77:4a:f1:2c:94:4b:54:08:37:
8b:1d:79:00:5d:f8:66:01:fd:fa:52:02:df:a2:48:8f:0c:2e:
a7:b1:95:40:b3:b0:e7:b3:4a:c8:a2:a4:bc:2f:91:05:08:38:
49:19:05:26:55:fa:28:dc:19:b0:9e:7e:5b:74:2a:ef:e0:63:
e1:89:c6:57:93:fe:b7:ee:3c:43:57:30:52:76:eb:f4:82:ba:
ae:42:e4:07:73:4a:c7:d0:a2:c6:3e:6a:63:bf:d9:12:79:c9:
db:46:7a:ac:61:65:76:23:da:a4:d0:11:84:34:23:05:04:31:
ed:cd:fa:e1:b9:b2:38:ce:ac:c1:f2:2b:77:6d:66:5b:99:01:
11:ed:2d:48:b0:7f:25:92:f4:91:28:61:3c:f8:a8:6a:aa:6a:
d1:17:c7:cd:a2:ea:37:0f:18:d3:30:2f:83:ce:87:e6:3e:97:
bc:39:59:e1:c8:b3:5a:35:0c:e5:99:fc:98:dd:39:3b:10:f1:
3d:59:89:0b:e4:4b:fc:f9:cc:fe:25:33:06:ab:fb:c7:0a:90:
7b:a0:64:72:1c:39:22:52:34:7b:b1:12:d5:b5:f7:e2:9d:55:
81:60:b1:40:1c:b6:57:b8:98:c0:15:9d:9f:2e:6b:08:fd:1d:
f6:36:aa:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:44:09 2025 by rpki-client