Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: +CZobXf7g/X0+j4Et8Vdbboc0CvmANJgrD3N8V1ZtxQ=
Subject key identifier: 6C:90:63:54:DC:4E:1C:B9:4E:C7:A3:39:E1:2A:EF:92:A9:26:CA:71
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 019A0C01E194CAFDE21B5B6A2ED1083DF433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 0FF4
Signing time: Wed 22 Oct 2025 13:00:41 +0000
Manifest this update: Wed 22 Oct 2025 13:00:41 +0000
Manifest next update: Thu 23 Oct 2025 13:00:41 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: p7pshtMuc6HsMLg0m34j9O71obFY3rm6wNVlk0SvvYM=)
2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
4: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
5: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
6: YuG9z5M1XNs-bczHtpGOR8X7WYo.roa (hash: 9MEXkKrN+WhBMnvEE9wPkLraLpoTptX9TwNbpyCp4SU=)
7: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:e1:94:ca:fd:e2:1b:5b:6a:2e:d1:08:3d:f4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Oct 22 13:00:41 2025 GMT
Not After : Oct 23 13:00:41 2025 GMT
Subject: CN=6c906354dc4e1cb94ec7a339e12aef92a926ca71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6e:fa:1b:2a:76:8c:fe:09:fd:13:53:c0:4e:
9f:36:48:37:2f:1b:14:42:13:72:98:18:96:46:8e:
ca:5a:47:79:62:d7:d2:67:0f:96:33:e0:1b:e9:fd:
38:51:4e:4b:66:c0:2e:02:59:24:48:81:d0:72:1e:
bd:79:c2:8b:7e:cd:c6:89:6a:08:bd:ee:a4:c7:b3:
a8:44:f0:32:b6:89:68:e4:4f:c9:04:70:af:02:eb:
a6:eb:b8:69:b4:4e:77:b6:d6:cb:2d:e2:8c:95:73:
ff:24:72:4b:c6:ff:da:38:b2:a1:21:c2:0b:15:64:
50:21:97:28:22:07:7e:8d:a2:f0:9c:6a:2b:9a:1f:
55:ec:31:65:7e:dc:b7:b9:03:95:75:27:50:a0:51:
52:a8:c1:0d:39:73:c7:82:45:e1:92:48:3a:6e:ed:
55:42:db:6c:51:46:e5:fe:7b:d8:75:66:d8:62:d0:
59:c7:bb:17:6f:c7:5f:aa:3a:f2:cf:20:79:94:3f:
77:b5:4f:e4:6a:8d:05:c6:dd:86:1d:6f:c4:98:8f:
7b:81:1f:45:fd:05:83:bc:24:9f:2b:15:08:7f:1a:
c7:c4:d1:85:46:9d:00:ed:67:2f:a0:c9:79:5e:a6:
af:1e:22:06:8a:28:71:1d:c5:48:94:73:d8:bf:b7:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:63:54:DC:4E:1C:B9:4E:C7:A3:39:E1:2A:EF:92:A9:26:CA:71
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:d7:ee:b9:8e:89:19:bf:a2:33:0f:ed:2d:6e:16:ed:af:10:
48:d7:90:e7:28:13:8a:87:08:0b:03:74:1a:1f:8f:07:9b:f4:
e6:6c:09:10:49:1a:61:0d:57:42:ad:b6:f8:04:f6:30:fc:46:
2e:dd:a6:f0:10:f5:d8:c1:83:13:1d:75:a7:27:47:5a:03:93:
d2:1f:76:f1:b3:1d:10:6b:88:ca:14:06:18:81:b6:97:2e:cc:
13:b2:8c:d3:32:cd:bf:d8:80:53:12:1b:e6:d6:c2:f5:3f:32:
fd:b1:03:ed:d6:9b:bf:0b:a3:d8:8d:e7:e0:23:31:36:62:a5:
48:7d:48:1f:54:48:a1:c6:12:23:bc:a8:c8:78:d2:f0:f8:a7:
c5:86:19:37:3d:21:a1:91:5b:7e:6e:d9:10:07:c5:89:b4:81:
02:4b:8e:97:3a:1c:e8:eb:e2:5c:e2:17:d4:35:8d:2b:12:8b:
46:52:2e:2d:50:e3:fd:83:06:cf:48:53:ae:2a:af:c9:57:b7:
24:ad:be:3f:8c:a5:4d:38:5a:a7:ee:07:2f:60:42:0d:1c:40:
60:8c:fa:2f:61:50:de:30:9f:6b:e4:1b:87:2d:62:f6:46:8b:
c3:ed:66:b4:5f:09:c5:9c:12:0b:d0:ac:25:a5:04:f1:72:be:
46:aa:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 18:59:09 2025 by rpki-client