Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 8cmjBykEJjewzC1//9Z6csbyDTJDdfYfZBJwIcEcZqA=
Subject key identifier: CB:ED:1C:AD:99:4F:2B:50:05:CA:4C:4E:6B:0C:50:4A:47:BB:BB:22
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019A232E0DCB991F58738E12482FCAA6E127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0C41
Signing time: Mon 27 Oct 2025 01:00:12 +0000
Manifest this update: Mon 27 Oct 2025 01:00:12 +0000
Manifest next update: Tue 28 Oct 2025 01:00:12 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: qggTyqYQsVIakOLBjz0yRF1KawLHP5luE4EzOiCzaMc=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:0d:cb:99:1f:58:73:8e:12:48:2f:ca:a6:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Oct 27 01:00:12 2025 GMT
Not After : Oct 28 01:00:12 2025 GMT
Subject: CN=cbed1cad994f2b5005ca4c4e6b0c504a47bbbb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ea:10:97:2a:2c:40:bb:94:16:af:ee:36:ce:
c1:c4:78:31:c3:8a:36:08:97:9e:59:66:d8:5f:85:
13:f5:c2:44:5e:03:ac:70:63:66:eb:e5:0f:d3:13:
c1:7c:97:4b:10:06:3a:ad:ad:8e:5f:be:34:cc:d5:
1f:bb:de:ba:7b:f3:1f:68:09:09:43:ed:0e:53:0c:
ea:a4:5f:eb:ce:9a:4a:f8:b8:51:4d:8f:25:e5:64:
21:76:d8:4d:e5:e6:b6:6d:72:0a:53:48:e7:ae:2e:
4f:f4:4d:d5:ac:aa:40:09:d0:84:70:29:b1:d3:c0:
a6:64:b1:44:0d:25:c6:26:51:9b:99:f7:78:25:f5:
6a:47:22:f9:eb:3e:c9:66:52:51:8b:d9:cb:d0:85:
ac:ee:44:fd:04:4e:b5:86:fe:bc:c6:2b:07:46:ce:
88:3c:f3:0a:d5:b2:00:85:a8:08:f1:f0:7c:12:49:
52:d0:dd:bb:12:72:f6:a5:74:8c:46:43:3d:c1:f6:
30:ec:bf:9d:cc:4d:9b:4c:40:94:bc:ac:ea:3f:41:
ea:a4:c9:0f:ed:b8:c7:7e:3f:e4:9e:dd:c1:bd:11:
f4:85:ce:29:51:c4:a8:26:2d:68:61:0f:07:ce:70:
93:62:1c:7b:68:d6:00:23:dc:10:f5:f4:72:65:71:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:ED:1C:AD:99:4F:2B:50:05:CA:4C:4E:6B:0C:50:4A:47:BB:BB:22
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:15:09:4a:4a:de:08:05:34:0b:2a:d8:b6:1a:7e:44:08:e7:
d8:e1:9c:79:76:18:7e:96:a0:65:69:83:99:5f:34:7d:b7:24:
b3:81:53:3b:2f:38:6b:3b:02:06:12:55:f9:dd:ce:ac:96:f9:
aa:cd:53:4e:6c:fd:35:74:a2:65:69:21:41:03:ce:06:7a:c3:
d4:36:a8:99:79:05:78:ce:bc:6f:c4:37:c6:9a:c6:27:ba:96:
42:aa:e5:88:d9:e0:e1:70:d1:dc:51:fb:09:b0:6c:d7:4b:8c:
75:7c:d4:43:3f:d0:49:0d:29:2a:47:80:3d:22:aa:b6:e7:ff:
48:04:87:af:93:ce:0c:bb:07:c6:c9:34:32:71:16:b0:05:8b:
be:85:13:16:b3:1f:a6:ed:2f:0b:07:57:73:1b:2e:d7:7d:47:
60:5c:04:ad:a2:f7:13:ef:d3:db:66:70:d5:dc:0f:3f:34:92:
5a:74:1a:14:86:cb:89:79:62:10:af:2d:24:b9:06:48:0a:95:
c8:d6:6f:8e:65:25:f7:19:b0:e7:54:f2:67:87:a9:d7:6d:dd:
69:6a:0c:12:32:89:5a:e0:6f:d3:54:25:f8:9b:29:31:57:54:
3d:42:89:05:a3:39:d9:0b:24:a1:6e:5b:ff:3b:4b:9e:8d:d6:
4f:6d:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:25:21 2025 by rpki-client