Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: /PSvTRR7aAQZi0lK+3BYVZE8C7WN7RmHw6DlnaHI0A4=
Subject key identifier: 7F:0E:D9:A6:07:12:F0:DD:29:49:0D:77:53:27:4F:E3:AD:2A:B2:2B
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 019A71B8DF74CE521ECDB18A3E761586C5E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 0AF8
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: CPFgkrelhPu5EbCS5DoT0lhPK3TyXJW5OOmVnlGSyrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:74:ce:52:1e:cd:b1:8a:3e:76:15:86:c5:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=7f0ed9a60712f0dd29490d7753274fe3ad2ab22b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:e1:7f:59:10:24:61:d1:c0:19:a0:45:f4:
a5:35:5a:76:9e:14:a1:91:0b:64:8b:32:9b:92:07:
47:55:f5:74:60:83:b0:a8:b9:b5:24:4e:21:aa:64:
a3:89:e6:59:d7:3e:f7:19:bc:cf:c0:53:46:cc:83:
01:99:ed:fa:56:a5:58:db:21:61:62:8e:fe:70:d3:
e1:c4:b9:e6:a6:a0:a9:0f:e8:7f:20:8f:52:6b:78:
b5:e2:ce:5c:36:79:a8:e8:bd:d6:ee:68:e6:6f:86:
7d:ca:7d:46:c8:75:14:18:80:f9:d4:a1:9d:2e:24:
59:99:5f:8c:ed:3d:21:c2:37:4d:ee:e6:2c:1d:82:
34:8b:7d:af:43:e6:06:9b:3f:04:52:8c:64:92:a1:
f6:ee:7f:d5:b4:2b:7f:d5:4a:24:b5:03:8a:dd:d9:
f5:ad:7c:c2:b2:79:f6:db:dd:3e:0f:13:ab:f3:ed:
46:94:35:20:60:66:14:58:98:e7:9b:89:4e:96:28:
ce:57:33:d3:28:a5:21:ed:42:74:c2:ec:72:bb:7a:
10:64:9b:f8:4b:7f:19:8d:02:5d:6c:4a:17:4a:27:
6f:50:b0:c8:82:38:cb:94:69:6e:8e:b7:a3:55:9e:
af:3e:40:da:c7:87:c8:d9:e3:fe:05:ae:44:80:69:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:D9:A6:07:12:F0:DD:29:49:0D:77:53:27:4F:E3:AD:2A:B2:2B
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:44:ab:39:25:8e:87:a8:5d:8f:aa:85:96:1d:8c:8e:bf:c1:
c1:09:69:1e:f9:e3:ea:d3:ca:aa:58:6b:42:db:ed:e9:12:17:
72:76:4a:e9:27:82:e0:1a:44:09:17:ea:a7:d8:5e:40:00:55:
43:9e:fe:54:20:62:e3:01:b0:d4:1e:c9:ca:4a:c9:41:84:f4:
8a:e2:55:b2:fd:d6:37:58:64:cd:70:c9:00:88:8d:94:30:a4:
ec:9a:d2:0f:c0:e8:ce:29:1d:ec:06:e4:1a:4e:bb:30:3b:da:
56:a7:34:cf:27:db:91:a5:f0:84:68:62:07:39:75:8e:c5:e6:
86:de:ae:33:2c:29:5c:4e:d5:23:19:00:12:d3:fd:3c:99:b2:
73:23:40:8f:7c:64:f1:6d:41:f3:db:d3:50:0a:a8:6d:48:2e:
7d:02:31:5c:a9:9e:8b:2d:ba:56:c9:fa:c2:47:89:22:91:3d:
6c:dc:83:91:1b:e0:d6:a7:c6:a0:83:09:0e:10:6b:80:b6:5e:
8a:94:8a:49:bb:4d:e2:44:ae:1c:48:0b:bc:0f:7b:d4:03:35:
db:27:cb:84:50:1a:98:65:bd:7a:66:b1:92:14:9c:0f:df:85:
8d:11:f7:e8:14:62:ff:fa:83:6e:e5:6a:2b:c4:e5:95:15:0c:
ee:3f:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:49 2025 by rpki-client