Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: 8YInrJllU0kda4BxgDCg5XFYkiwZNq58cfJ3a2y3Ifw=
Subject key identifier: 9C:4F:2F:D6:03:16:14:6A:F9:C8:A1:B7:F6:0D:DA:90:D4:F8:04:A2
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 0199FDD945A83FA2D2C0C89959CD8F06FB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 0ABC
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: YxY+rDYXoYgrXOjuNFqoXzuIyoRaW1W8FDzFEOwwPuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:45:a8:3f:a2:d2:c0:c8:99:59:cd:8f:06:fb:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=9c4f2fd60316146af9c8a1b7f60dda90d4f804a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:14:17:64:b0:ad:13:f9:4a:2b:f0:8d:4b:
bd:1f:9a:51:e3:09:02:c2:bf:66:48:34:62:92:38:
4a:fb:a2:19:08:c5:40:93:b0:91:8a:ed:fe:86:f7:
f3:78:e9:5d:78:c5:67:23:d5:c4:b0:0c:25:48:e8:
f6:ae:b3:58:17:9f:ab:1a:49:d8:38:cd:3f:3e:84:
d2:0e:d4:34:34:89:13:67:94:b9:ed:f5:70:66:ac:
d1:a1:e8:7d:ce:73:f9:6e:85:f9:b5:ca:1e:c0:1f:
0f:3b:c4:2b:11:44:3e:b4:17:78:de:9f:10:05:91:
ac:8a:ba:5b:d3:ab:e7:22:bf:b2:96:bd:39:d0:f9:
c6:75:6c:5b:33:f9:63:ec:6c:99:42:94:2c:96:c0:
e8:c7:b2:25:dd:57:12:dd:05:6a:b6:4d:e5:41:aa:
89:8f:0a:33:1a:66:14:72:40:e8:77:0d:bb:ca:6c:
f8:8e:a6:50:5c:58:54:88:63:b9:a6:2e:46:d8:c2:
dc:fe:de:41:3b:0b:7e:7d:20:99:d0:00:3d:b7:f6:
b4:8b:c5:21:45:df:2f:cc:6c:f9:1d:43:e7:8e:c2:
60:e1:c5:20:4c:a8:52:b9:36:2b:96:d3:89:b4:e7:
99:e1:9f:e1:70:39:f4:ff:b1:b1:94:a6:73:64:4d:
6f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4F:2F:D6:03:16:14:6A:F9:C8:A1:B7:F6:0D:DA:90:D4:F8:04:A2
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:e8:aa:ab:42:60:93:7f:32:c3:a7:92:d8:e6:e2:d4:28:
85:ce:68:62:0b:24:fb:69:c2:64:4a:36:4f:01:bf:6a:b7:db:
f6:07:02:9e:c1:06:31:39:2d:bc:fd:fc:06:27:e5:75:b6:9e:
81:9c:8d:77:a5:f8:81:3b:64:43:c7:3a:bf:57:23:b4:39:a0:
eb:1f:2b:b0:6c:f6:9e:f1:12:a5:33:d7:75:65:64:a8:ee:a7:
89:89:d8:3d:f7:c2:7c:b3:1e:b5:17:00:0f:f0:91:de:a8:6c:
61:46:19:c1:16:ea:0f:60:31:e9:2b:bc:f0:9e:c5:8e:d1:c2:
cd:d2:a4:84:9a:f5:73:c8:c0:ee:8d:88:de:d9:ab:a3:9e:28:
11:1d:ba:0a:dd:7f:e3:77:e1:e7:11:28:e2:c6:89:6d:5d:1d:
1e:56:7c:7f:63:e5:be:2f:2e:84:b7:04:b7:cd:71:dc:bb:54:
66:72:0a:aa:e9:c0:71:22:a8:22:c3:2d:c3:f9:88:a1:36:8f:
a9:1e:a3:56:87:d8:2b:3c:08:72:77:60:91:80:f5:7e:c7:b0:
58:2d:d0:f9:e4:5b:ab:a1:18:a7:09:be:3a:97:bb:34:c4:20:
83:23:83:32:c1:11:a4:aa:65:63:7d:99:90:5c:2d:3f:d2:95:
c6:5e:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:39 2025 by rpki-client