Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 1s/6LTzz+aZ9M+TtZSkPfjdLwBX0ig/sfR2uN6K1V6s=
Subject key identifier: C0:A5:ED:BA:A6:DE:8C:BD:D2:3A:5E:02:C6:DE:92:01:16:61:E5:20
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019935A58F3CF6B3B80C9D282C35033364E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0BC6
Signing time: Wed 10 Sep 2025 22:01:06 +0000
Manifest this update: Wed 10 Sep 2025 22:01:06 +0000
Manifest next update: Thu 11 Sep 2025 22:01:06 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: fcY8KYJQ1/m/gsXl5GFPp9eLuUOhLqF6BU2GFXU5/yY=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:8f:3c:f6:b3:b8:0c:9d:28:2c:35:03:33:64:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Sep 10 22:01:06 2025 GMT
Not After : Sep 11 22:01:06 2025 GMT
Subject: CN=c0a5edbaa6de8cbdd23a5e02c6de92011661e520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:1a:3b:71:a4:14:f1:84:dd:c4:9c:9c:ee:
e1:51:2b:a4:7d:9d:6b:7f:a8:69:6d:c7:3d:48:42:
2a:83:bb:35:0f:0d:16:fc:2a:04:08:e7:53:4f:e8:
fe:0c:86:ff:11:9f:ef:8c:71:1e:91:9c:8f:d9:f2:
9b:24:e3:dc:6c:20:d1:37:80:ec:bd:2c:64:d3:36:
cf:dd:2e:69:a8:45:d4:3e:90:ba:45:ba:bc:20:1d:
ce:48:c8:c6:21:71:4a:42:fb:33:cb:1d:79:b1:fe:
10:41:4c:51:64:a9:9d:16:80:ad:fa:04:a5:54:fd:
1c:44:cb:d8:71:0e:44:b2:12:14:d8:ca:9a:c5:38:
10:28:2f:17:ee:2c:ce:f2:08:a1:73:c3:31:3a:e1:
61:4d:64:23:1c:ef:0f:f3:53:88:6b:c3:1f:0d:fe:
15:c3:da:6e:71:a8:17:14:c8:8e:7b:31:a3:c7:22:
05:3d:d1:2f:c3:ef:50:8f:7d:44:93:9c:7d:75:f7:
ce:3e:be:d1:9d:c3:4e:ad:10:36:5c:25:89:b7:ee:
66:71:5c:43:f2:94:24:66:f5:c5:8f:a2:d4:92:92:
e0:ab:58:60:40:42:f7:6f:81:32:0a:34:7c:ec:17:
db:6c:b1:09:c6:7b:d8:83:c6:85:34:ce:1e:4b:12:
07:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A5:ED:BA:A6:DE:8C:BD:D2:3A:5E:02:C6:DE:92:01:16:61:E5:20
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:9b:28:47:da:4e:06:4d:2a:40:b5:a8:61:d9:85:d1:fb:a4:
e0:02:ea:7b:45:d6:36:ac:56:18:5e:12:7f:50:ac:42:2b:bc:
dd:dd:36:31:40:21:71:17:f9:16:b6:0d:a1:50:d2:5a:90:b1:
61:a9:dd:65:f2:d3:62:7f:5c:72:b9:2b:e9:78:47:82:ac:4d:
86:1e:5e:78:92:73:44:a3:e6:17:70:6e:e3:a1:0c:bd:30:b7:
91:b8:44:73:fd:b0:02:fe:b0:fe:ed:b5:98:64:03:cf:f1:a9:
7a:4a:14:fe:0d:3d:eb:c6:dc:b2:fc:da:5b:ca:5a:0f:07:d2:
28:60:1d:75:8f:3e:cb:b5:c5:2e:a2:3c:69:d6:38:c9:21:02:
23:db:45:8f:c5:ad:6d:f7:60:19:19:5e:96:bc:90:a4:a2:a1:
69:6e:6f:b9:a6:36:71:99:ee:d5:24:75:40:c5:de:b6:94:3b:
1f:e3:8e:65:65:a6:10:f6:d2:86:ef:77:3b:86:04:1c:f3:82:
3d:0f:d2:e0:82:b8:1e:f4:b0:60:04:f5:08:d2:3a:dd:28:fc:
68:26:dd:bb:53:4a:74:6b:78:ee:05:5e:8d:f9:4b:d1:26:00:
b8:14:92:8d:86:91:73:b5:14:f8:43:c6:d5:86:8b:66:99:b0:
71:c9:8e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:41:01 2025 by rpki-client