Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier: 9YI55i6J8UnzNUIuvCCN9seeIXwSb8jdodrlBbYhYic=
Subject key identifier: 4A:05:02:ED:6D:95:57:4F:3A:FD:4A:E5:0E:5C:DE:31:34:FF:BC:64
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0197B632A54CCC8DDEB15054E2ECBFE94C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number: 0EBE
Signing time: Sat 28 Jun 2025 11:01:01 +0000
Manifest this update: Sat 28 Jun 2025 11:01:01 +0000
Manifest next update: Sun 29 Jun 2025 11:01:01 +0000
Files and hashes: 1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: b6JlDWq9dj0MAQ5RNhCLQoEMHIRzP4+DjcWzZC3VQ0g=)
2: 7mmdjWWJmGS-vmCt9zKLVanQOig.roa (hash: v3B4itYx8bwIEJo8vTH9R8LfCusaaVboh9GULcqhFv0=)
3: 84x3PaWcAMu4m9T5fa870PeiheE.roa (hash: a/9oxv4KvgEVgoCDMjJiyZ098edxxir4zBlBcmgb+Nc=)
4: 8oVnFmnZQ6g3DgOCU4fa-xXKM0M.roa (hash: WAgABCVYzqzdS7ih7BzGE2XubSeh6oG7CHudT5s6okI=)
5: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (hash: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=)
6: LRBNHwJVIe5U-tx5ltJlZ1Y5Wnk.roa (hash: sNwZNLHLrboe1P+i7NUkF9wqk+vWL2VdAj76ljlm25k=)
7: funJ0mIYmkKs_8uVGo-vQCokonQ.roa (hash: qmb7QHLfc2zdqb0CIdCWUFtYQRPCloznt/XeNxyA8CI=)
8: z_xjUJTiEKv8bjMjchy_X7D7OCQ.roa (hash: BG1R3SjDVfF87nLXGEYo43+Amx8QhcAgHlV3s9chlbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a5:4c:cc:8d:de:b1:50:54:e2:ec:bf:e9:4c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jun 28 11:01:01 2025 GMT
Not After : Jun 29 11:01:01 2025 GMT
Subject: CN=4a0502ed6d95574f3afd4ae50e5cde3134ffbc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:4e:6f:34:d6:3c:3b:27:bd:64:0e:6f:b5:
64:c7:b1:09:58:2a:36:53:31:10:46:02:fc:12:e4:
e2:fb:7f:69:14:15:c1:89:95:77:74:9a:1e:3f:90:
61:7d:1d:be:26:9d:b6:57:73:0b:33:86:0b:ca:97:
71:4f:25:c8:eb:fc:51:6b:a3:56:83:03:d4:73:63:
4c:52:ae:01:50:3d:90:f4:21:8b:e8:13:51:f4:33:
ad:33:95:99:3b:f0:b3:00:2f:50:1d:ce:cb:76:ba:
37:a2:fc:c3:8c:13:e8:fc:9e:05:31:3e:60:c7:31:
7d:21:bc:30:6a:be:42:49:30:2e:86:e2:80:74:94:
65:94:8b:f9:77:16:27:aa:8d:e2:d8:5d:29:93:91:
35:83:90:0a:92:e9:c9:3e:7e:1a:39:cb:87:bb:2b:
c3:a6:a8:8c:5b:48:3f:94:ad:5e:6a:56:0a:83:af:
0b:20:13:69:37:ed:d4:0f:15:a3:6b:4e:bf:2e:8a:
a3:a4:80:7c:7e:9c:29:bc:db:cb:2b:3b:00:b1:04:
cf:00:7f:6a:a1:06:6c:46:2d:a6:66:e7:98:e7:59:
4c:0e:87:20:77:36:1c:2f:7e:98:16:22:69:1b:ce:
41:d7:e8:2e:53:4b:60:d5:e7:12:da:27:0f:a7:4d:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:05:02:ED:6D:95:57:4F:3A:FD:4A:E5:0E:5C:DE:31:34:FF:BC:64
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e7:f9:ad:51:d2:d6:e1:fc:ff:a9:79:aa:14:2a:55:aa:05:
c1:09:d3:fc:c6:3a:46:d9:39:0b:ea:90:b9:45:37:f2:9f:1e:
e2:88:38:ab:be:23:55:be:38:e1:59:ec:43:10:80:49:c8:4b:
b3:42:63:f9:92:5f:8b:0c:c9:cd:e0:0e:1e:47:ec:27:9a:ea:
8e:35:bd:d7:a3:be:10:82:d8:db:a0:7a:10:40:c8:93:16:bd:
88:a3:ce:37:3b:d7:14:31:e5:d2:eb:96:4b:74:13:c8:af:f4:
49:2c:11:83:d4:cf:7f:ef:51:fb:cd:41:c6:af:dc:fa:86:1b:
b3:85:e8:24:3e:d6:61:ab:5f:84:b0:0f:4a:24:29:c3:29:7b:
32:20:64:22:15:09:39:f0:c0:36:6a:5b:67:3a:43:5a:27:2b:
8d:32:ec:43:78:62:89:0e:c2:e8:f5:09:be:cc:f6:77:32:a5:
69:28:6b:e5:6d:e3:09:9a:e8:d4:dd:9d:fa:99:08:ee:0d:9c:
85:b4:f7:46:6c:3d:84:92:c8:3d:d5:c0:ad:d4:5f:c2:ea:bf:
10:5f:9f:69:38:55:fd:84:0a:f5:56:8e:01:72:82:8d:a9:a3:
15:22:ee:1a:57:2a:af:56:d5:fc:3e:5a:1b:16:e5:d4:d1:3b:
50:c0:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:45:20 2025 by rpki-client