
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 5VQzao1BlOjJYm3O00BnIgzFE03i2y2PWhHEy1bjLpY=
Subject key identifier: 62:B3:5B:7C:F1:06:30:0F:40:13:A0:C9:CC:F6:99:86:22:FE:56:40
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 0196409E9CA45FD7D67B90CE287A8E28FDF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0A3E
Signing time: Wed 16 Apr 2025 22:00:58 +0000
Manifest this update: Wed 16 Apr 2025 22:00:58 +0000
Manifest next update: Thu 17 Apr 2025 22:00:58 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: rowyAPavUrNlQna/HamOJ6/udTIFKJeptICKm1g6RW0=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:9c:a4:5f:d7:d6:7b:90:ce:28:7a:8e:28:fd:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Apr 16 22:00:58 2025 GMT
Not After : Apr 17 22:00:58 2025 GMT
Subject: CN=62b35b7cf106300f4013a0c9ccf6998622fe5640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:eb:3b:e0:11:4e:fe:cd:31:8e:18:8e:12:
bc:d5:4e:aa:d5:ae:1d:16:32:27:20:8f:fe:6c:5d:
5d:38:1c:2d:f7:a6:54:8b:a9:1d:8c:59:c3:64:fc:
94:d8:42:71:e4:c6:7b:d5:96:00:d4:c2:b7:33:2f:
b4:41:97:c5:12:d0:20:c9:4d:77:97:4b:69:c9:a9:
c5:64:9d:b9:a1:65:74:cc:4d:ee:7e:ae:c3:7b:95:
33:b5:82:3a:30:f8:73:ad:ef:af:7a:a6:36:2c:bc:
41:62:27:02:9c:04:95:82:4f:4b:f9:bd:6a:a9:98:
8c:c9:e5:ff:2e:3c:8e:0d:4e:b2:5b:5d:70:98:76:
6f:e5:e3:0d:71:9a:6a:c9:f8:c7:41:43:f4:98:d3:
0c:01:7c:b5:30:20:b3:66:50:f0:c9:49:de:64:18:
82:87:f8:fa:02:66:30:9f:79:7d:6f:97:5f:b3:26:
c8:40:ad:c7:9e:5b:db:75:d9:22:d2:96:b5:4d:81:
6d:92:90:b7:e3:0b:af:b9:32:00:60:df:d0:b4:90:
48:02:9a:e0:f9:0b:3d:50:23:df:55:bc:2a:95:f3:
b8:06:51:db:33:15:c1:7f:df:67:32:95:b6:62:93:
82:c3:a7:5f:ab:e0:c2:78:50:ca:9c:65:97:10:d2:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B3:5B:7C:F1:06:30:0F:40:13:A0:C9:CC:F6:99:86:22:FE:56:40
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:da:f4:df:f5:3a:72:6c:55:dc:b3:bf:a1:cb:d1:a3:dd:0a:
e2:80:d8:0f:f9:57:d1:89:5f:fe:de:23:21:79:e0:a4:5d:b1:
b8:c4:ac:83:4a:2f:69:95:0e:74:6c:be:6e:b9:2f:2b:e0:ff:
c6:15:cf:f7:25:cf:32:62:4c:50:80:1e:79:bd:99:80:a2:c1:
8f:66:78:4e:c4:26:a9:fb:c5:27:88:c3:83:92:f7:7a:2d:e2:
a0:ba:f2:45:92:e9:07:9a:ce:1c:f3:ff:33:a7:25:37:57:85:
a1:39:57:c7:b7:ed:60:a9:1f:78:18:34:e3:97:ca:af:21:17:
f7:ee:71:a9:b8:34:5a:48:3c:84:c7:ff:06:06:a8:86:93:e3:
c3:93:a6:4d:87:f0:c4:74:6b:48:9d:3f:d1:e8:b3:72:fa:c7:
e7:bd:c8:16:08:01:a8:3a:81:8f:b9:1f:7c:63:2a:00:05:f1:
cb:1d:3c:50:73:e9:5a:2a:69:f3:1d:a1:2e:04:68:b1:9e:e9:
e2:e0:05:ab:9a:bb:30:e2:76:9b:a4:88:81:26:34:06:20:a6:
b4:e2:a2:29:48:26:de:6a:13:d5:bd:e3:b2:16:74:ba:1b:8d:
7b:10:22:74:24:8f:73:1b:cd:4f:3c:a7:3a:8e:26:3e:56:2e:
16:42:85:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:16:43 2025 by rpki-client