Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: yWCMO5zO/P+lBS/F+WMStLSVEsZDbWFm9r01tIF6Luk=
Subject key identifier: 14:BE:57:A3:3C:F6:14:AE:CB:E3:DC:6D:7B:36:99:61:01:39:6A:3C
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0198D5F11B373AA2FE4847482819A01A1045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 0F53
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: /x6wFWs4+yO6Eq2yUy5niOaaVxj4mhgpd2Gw456AR0M=)
2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
4: 8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa (hash: WAgABCVYzqzdS7ih7BzGE2XubSeh6oG7CHudT5s6okI=)
5: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
6: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
7: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:1b:37:3a:a2:fe:48:47:48:28:19:a0:1a:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=14be57a33cf614aecbe3dc6d7b36996101396a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:ad:b7:73:f0:f0:bc:55:1b:b4:39:43:75:
f8:27:47:03:95:71:15:c7:60:cb:e7:a0:f7:05:61:
63:03:f6:2f:eb:29:c8:4f:4f:fa:e5:dc:a7:a7:02:
67:5a:7a:7c:fd:dc:de:c7:c6:92:63:ba:cd:e4:78:
e6:6f:5d:b8:d3:07:38:86:da:37:c4:f5:d5:18:7e:
9b:44:34:ff:1a:da:4d:0b:49:7c:68:05:13:3d:84:
91:1e:49:56:5b:53:e4:cd:67:f8:30:6b:12:fd:df:
fd:4b:da:a5:ef:5a:66:ae:21:81:e4:fd:cc:38:ae:
59:b8:9f:6a:15:38:82:53:04:bc:ae:10:0d:cf:ee:
89:3c:a4:55:35:6f:4c:4f:d8:cc:3d:7d:12:cf:97:
53:28:4d:d9:08:dc:55:ca:f9:78:e7:d7:d4:6b:e4:
6e:c7:68:67:ef:04:25:a7:38:c9:0a:eb:94:27:e2:
ed:39:96:d3:ae:e3:d5:64:44:b0:87:89:aa:b7:f5:
75:c6:9b:62:c6:15:85:98:31:dc:3f:03:0f:12:be:
e2:ca:72:b9:0b:6a:a9:ec:9b:e4:49:88:21:db:e7:
57:b8:45:f9:4a:2e:e8:a0:81:00:1b:a1:02:64:a0:
bc:97:29:fc:97:7f:23:db:ef:80:83:7c:0d:1f:86:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:57:A3:3C:F6:14:AE:CB:E3:DC:6D:7B:36:99:61:01:39:6A:3C
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e2:06:22:b0:df:e6:ed:04:19:9e:11:37:4d:53:60:4c:0f:
45:2f:0a:2b:b1:82:e6:79:14:76:ca:d8:53:af:7d:7e:cb:88:
2f:2d:b8:ab:a1:4c:ef:d9:8a:fa:3f:c9:f4:1a:be:de:a7:6d:
ab:e9:d3:98:c2:fe:b5:65:60:e8:04:da:75:0a:50:86:5e:e9:
c1:74:86:2c:0c:f3:2c:cd:c1:b4:e4:15:2d:db:4d:7a:6e:03:
70:e6:59:a1:bc:aa:c4:ec:cd:91:66:49:18:17:4b:a1:3d:c0:
4d:9a:1e:12:70:45:c4:07:92:f7:5f:66:17:01:ee:67:63:ef:
4f:1f:5f:94:1f:bc:b0:48:3f:16:73:1b:b4:3b:7b:17:5f:a9:
b6:d7:e3:fd:47:25:cb:a7:2f:b7:92:ba:af:82:e3:60:db:e5:
e3:be:dc:10:65:8d:48:d6:7e:bd:dc:61:8c:13:70:dc:aa:ce:
d4:78:e8:16:b7:1f:0c:41:c9:94:0e:02:24:3e:7c:08:ca:0b:
9d:d7:62:0c:1d:2f:88:96:52:55:8f:a8:6f:65:b9:be:31:75:
59:8c:90:2a:83:5b:9a:96:63:18:74:fb:a9:62:e7:bf:c2:71:
78:55:f1:50:a6:50:77:cc:9c:5c:91:7d:50:14:c8:29:78:52:
06:dd:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:02 2025 by rpki-client