Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: AIefXl6oXsHzhOV9Ur0t2orRJ5nT17wfmfGfKBwdKP4=
Subject key identifier: 88:BB:11:31:CB:94:59:63:B0:FB:D1:00:20:6B:FC:24:18:D2:F9:5C
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 0198D660355FEC2CC82C27263E543F87E1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 0A23
Signing time: Sat 23 Aug 2025 10:01:25 +0000
Manifest this update: Sat 23 Aug 2025 10:01:25 +0000
Manifest next update: Sun 24 Aug 2025 10:01:25 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: FQpAVJRSlxy3koJluUf/voR+coU5IVNOjFTKitC3WIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:35:5f:ec:2c:c8:2c:27:26:3e:54:3f:87:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Aug 23 10:01:25 2025 GMT
Not After : Aug 24 10:01:25 2025 GMT
Subject: CN=88bb1131cb945963b0fbd100206bfc2418d2f95c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:00:96:9b:ac:77:d2:9a:a7:46:68:5d:8d:
b9:d8:a6:77:05:5e:8d:c5:88:f4:ff:cd:9e:33:3f:
01:b1:1e:70:38:95:70:26:2d:5f:f6:e4:82:a9:7f:
70:04:46:8f:63:51:46:48:db:73:2b:5e:43:cd:43:
8f:7b:20:93:4e:b2:37:4f:bc:18:e0:9a:e6:d8:26:
11:d2:55:f5:65:fe:2a:e5:dc:08:b5:3a:44:e0:38:
80:87:3b:0f:a6:0a:9e:dd:dd:94:c5:c0:fa:b6:23:
7a:f2:4f:45:4f:be:35:fd:f8:78:58:33:00:6a:0e:
42:f8:c3:c7:d2:11:8f:62:a9:3e:de:de:00:94:51:
0e:4e:f6:bc:e1:40:8c:60:cc:76:b1:d8:99:74:8d:
5c:24:4e:a5:60:bc:3b:c4:1c:9a:44:5c:d2:7c:8e:
c9:49:76:7b:95:41:96:7b:67:56:67:d0:b2:6e:35:
b1:a6:bf:a4:61:c2:95:ab:ab:16:99:ac:db:50:03:
5b:53:23:b4:0a:00:62:cb:78:fe:82:06:a5:e0:dd:
1b:9e:ba:77:44:31:1e:05:fc:64:72:6c:a2:0e:be:
29:b7:58:60:dc:7d:d7:bc:79:15:68:ed:fc:08:ec:
12:97:ec:2f:08:51:3b:c2:a1:12:8c:a1:cb:a2:ed:
a4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:11:31:CB:94:59:63:B0:FB:D1:00:20:6B:FC:24:18:D2:F9:5C
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:88:2a:e2:c0:5e:b8:b1:b9:47:78:c0:b4:81:67:3f:c4:c9:
1b:82:b5:76:65:27:b8:aa:5d:22:90:04:96:5a:9e:ba:95:59:
74:53:27:ae:00:64:2c:10:3a:98:fd:96:83:de:f0:49:b5:ee:
ae:16:0e:46:4e:01:1b:24:5f:8e:1e:11:4d:58:28:d4:3e:ce:
b6:06:b6:13:02:a0:cc:2d:30:5c:0e:45:1a:4a:7b:2c:6e:5b:
3c:08:bf:b9:7b:2a:58:06:43:51:3e:ec:cf:94:12:54:12:83:
6d:5b:bd:5e:16:e2:0e:34:fb:82:ec:a4:e2:cd:c1:8f:80:e0:
4f:13:f6:e0:78:84:a8:47:82:85:cc:46:37:61:ed:c5:26:f7:
c6:0e:60:62:2e:e3:49:e2:71:33:3f:67:f0:a0:67:95:f5:55:
82:2f:78:69:46:18:40:57:4f:6b:e0:18:7f:0a:4f:7c:80:2b:
a7:66:c6:fa:fe:4a:66:0c:fc:36:41:f6:e6:f3:9b:7e:f5:95:
9c:e4:6e:2c:a1:35:c3:8d:7b:82:0d:67:a2:41:7c:b3:75:c6:
70:f4:0e:e4:84:b1:1a:ba:96:1f:4e:28:31:e6:1c:04:b7:7e:
a3:d4:8f:ee:ff:cb:b7:dc:c2:04:8b:70:38:63:a3:fb:13:8e:
95:8c:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:29:00 2025 by rpki-client