Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: BP6OFMVwFeYzIZSHWzjUGWvk8HMPhAoaKrpHwL9OhvI=
Subject key identifier: 4C:FD:3D:1E:03:17:68:F6:8C:CC:93:65:30:FD:9D:E9:45:A3:6B:E8
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 01984B54F0862849597E4C3AAB53DD223B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 09DB
Signing time: Sun 27 Jul 2025 10:01:54 +0000
Manifest this update: Sun 27 Jul 2025 10:01:54 +0000
Manifest next update: Mon 28 Jul 2025 10:01:54 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: R8phxy6PSkyY7X5/ZAXzOKw5CAd73WnNaX3DRI9lMMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:f0:86:28:49:59:7e:4c:3a:ab:53:dd:22:3b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Jul 27 10:01:54 2025 GMT
Not After : Jul 28 10:01:54 2025 GMT
Subject: CN=4cfd3d1e031768f68ccc936530fd9de945a36be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d7:a9:97:3e:0a:9d:d4:59:69:80:32:2f:fa:
34:bb:86:3a:c6:a7:41:39:d4:50:49:81:03:9a:9b:
35:47:0b:39:59:d9:c1:1d:60:69:ed:50:85:be:73:
a7:ac:70:35:a9:a2:22:85:d5:80:5f:eb:c7:58:0e:
34:ca:78:0e:25:21:0d:fb:d4:64:d4:06:50:5d:48:
36:38:18:eb:55:d4:22:13:80:1a:76:d0:c7:85:ee:
f5:79:5d:c7:0c:fa:4e:05:dc:63:32:34:da:74:2a:
b6:72:20:7c:a6:0c:4d:2e:9e:ef:f0:d1:9e:88:e4:
f6:28:03:b8:21:90:5b:c2:bf:76:13:c6:1d:df:19:
c6:66:af:0b:90:45:98:f9:f2:87:a1:d2:a7:3c:d9:
38:fc:42:6c:88:c6:8e:a7:39:b7:36:66:1a:e1:fc:
32:f1:12:f8:2e:2d:0d:07:c9:6b:4d:a9:c4:57:90:
0b:b9:39:f2:0e:13:72:46:db:af:12:15:bb:ed:17:
72:f7:d8:c6:77:87:2b:fa:65:68:13:7d:79:91:fb:
71:1f:00:36:96:4d:eb:cd:2b:5d:4a:6b:18:7a:7f:
61:3a:8a:0b:bc:7d:a3:e4:d4:44:4a:4b:80:e3:7a:
55:9d:35:57:75:96:65:df:1b:cf:06:4f:88:32:22:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FD:3D:1E:03:17:68:F6:8C:CC:93:65:30:FD:9D:E9:45:A3:6B:E8
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:22:82:03:6d:41:85:f3:3c:5e:4a:0a:91:94:fe:4f:ff:58:
ac:46:80:42:4f:42:0b:fb:f0:c2:2c:68:34:f3:9f:07:02:dd:
b3:dd:4e:93:34:84:49:ba:33:4e:71:05:d4:bb:34:58:f2:b9:
47:b6:5a:84:19:52:03:d8:4d:e3:18:08:df:ee:0c:9d:ce:62:
bb:a9:1e:db:40:ec:ea:d5:c3:b6:5d:87:72:fb:54:1a:17:14:
33:10:37:33:e6:9d:98:6a:dc:0a:00:ac:41:44:4c:a4:71:83:
fe:ff:60:58:de:21:61:9d:24:78:e1:cf:78:18:72:2c:48:27:
67:06:b2:40:5e:e0:85:a3:6a:8b:e6:f9:ce:b1:0c:c5:08:7c:
66:f2:48:72:18:82:3d:c6:1b:36:04:74:0c:32:fd:1e:58:65:
13:47:05:61:5f:8f:b3:ad:2c:05:ba:c3:e5:6a:60:6a:98:69:
e5:93:43:1b:c2:36:8e:60:b1:68:0e:bf:53:3f:6b:21:88:b9:
df:e1:47:59:09:35:4b:f8:0d:5e:ab:e8:9e:8b:46:45:25:af:
eb:2c:b1:f7:ff:50:b6:6e:c9:09:59:e2:d6:a7:70:96:aa:e1:
d4:e3:e9:6b:c6:4b:16:12:1d:4d:41:95:5d:83:1e:ea:5c:94:
d0:57:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:02:16 2025 by rpki-client