Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: fBX3z2pYviUXRcKxEButVLhcm/9do9Xy5lmG5H6gDSo=
Subject key identifier: F2:A3:1A:F1:55:1B:14:14:93:81:84:B6:AE:5C:42:C8:B4:D3:3F:51
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 01974D0E2762FE505D658FD7BE496BBD05DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0AC9
Signing time: Sun 08 Jun 2025 01:01:02 +0000
Manifest this update: Sun 08 Jun 2025 01:01:02 +0000
Manifest next update: Mon 09 Jun 2025 01:01:02 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: 4APPs8dZ7nRr5G2C1pWnxlXkqAoI0Nwal8GlsBama7o=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:27:62:fe:50:5d:65:8f:d7:be:49:6b:bd:05:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Jun 8 01:01:02 2025 GMT
Not After : Jun 9 01:01:02 2025 GMT
Subject: CN=f2a31af1551b1414938184b6ae5c42c8b4d33f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:b2:89:24:8a:56:ad:5f:03:39:56:5a:5a:
44:a2:f3:ef:0c:66:80:5a:7b:42:fe:b5:3c:58:b8:
93:65:f3:4b:0f:41:bb:d7:00:d2:39:79:ed:50:93:
42:17:7d:25:f2:27:9e:71:53:a1:7d:4d:a4:a7:e8:
db:90:d4:25:47:0b:42:e7:58:f7:21:5a:a4:32:78:
8a:79:ef:2c:28:ae:9d:db:de:6f:94:52:b9:3f:f7:
32:ee:d3:cb:1d:97:47:89:52:da:ed:a4:95:06:19:
77:c3:e6:73:44:60:3d:b0:c1:ea:68:fe:b1:2f:9d:
f8:04:1d:c6:00:ee:8c:cc:eb:8d:53:09:ff:fc:79:
2d:2c:f7:06:b4:b4:1c:d7:db:1c:34:ac:9e:da:b4:
8b:1c:6d:9c:a0:c0:0b:31:60:87:3c:b2:22:75:b8:
dc:00:b8:5b:c3:4d:e1:b4:ca:f4:ff:b6:61:03:19:
83:91:20:a3:13:ba:3f:48:37:f5:44:b9:5c:d3:e5:
e0:08:dd:b8:b6:5b:fd:85:dc:25:f6:2a:13:e6:44:
9b:99:6e:da:0c:66:35:95:b5:c0:1a:5f:3e:39:99:
37:dd:85:6d:44:d3:09:8e:b4:92:04:af:40:a6:44:
f9:6f:a5:ae:fa:19:f8:00:ae:55:58:63:68:4e:0d:
2b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A3:1A:F1:55:1B:14:14:93:81:84:B6:AE:5C:42:C8:B4:D3:3F:51
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:21:78:85:57:99:24:97:b4:5e:7d:06:c8:b3:d5:64:53:d5:
b9:6b:e7:fe:8a:90:ac:2d:6c:02:5d:fe:65:5b:2c:ba:03:11:
ac:9e:9d:a5:84:59:1f:46:62:59:18:6b:6a:30:3d:c4:08:bb:
aa:52:ce:fe:51:a6:6a:bf:f4:90:97:17:29:78:fa:3f:09:66:
d5:34:49:be:2c:07:33:a4:fa:9a:02:f8:94:a3:df:d2:1d:8e:
60:53:34:10:33:22:11:19:a4:25:83:9c:ba:10:13:71:51:fb:
34:a7:80:23:4d:97:f5:52:11:54:9f:86:09:65:c5:04:3d:c0:
c5:d5:21:a7:08:da:e7:92:65:75:f5:a3:b1:35:08:f0:1e:8d:
68:c4:03:c7:54:0e:2e:2f:f6:7d:29:57:a0:5f:61:1d:b4:a2:
20:9c:7e:0d:d7:50:3f:34:4b:56:af:7f:67:91:17:c1:3e:b4:
7f:de:64:ee:b7:4c:20:1f:1c:b8:d2:67:df:40:de:59:23:c3:
96:44:4d:c0:68:ba:ac:c9:87:1f:1b:4f:1e:02:2d:77:a6:d3:
53:ba:bc:fa:74:ee:92:da:78:fb:18:41:d6:c0:70:1c:11:c9:
b1:91:7f:51:f4:c4:02:34:c4:71:97:a0:81:c5:b9:06:ba:42:
f9:11:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:31:37 2025 by rpki-client