Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 2Ncyne0ZJuWbuZekAw52V1G9n85rcyr4MUxBsJ+Kwv4=
Subject key identifier: E2:10:41:C5:4F:F8:6F:61:96:AB:79:B7:F9:3E:85:50:1B:3F:10:D4
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 0199FC8F6FF9A0143CDC90B868406B5A5E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0C2D
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: DCHYZc27nxdfWlImVakbnfOcit9/D9xcisX//lxTGmI=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6f:f9:a0:14:3c:dc:90:b8:68:40:6b:5a:5e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=e21041c54ff86f6196ab79b7f93e85501b3f10d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:f2:54:96:f9:08:60:36:6b:00:df:05:52:
e0:ce:fd:97:c0:c1:41:1e:8e:b8:e8:e1:44:d7:8b:
63:f9:fe:ce:a6:0f:c8:5d:56:07:19:00:0c:e4:4a:
c4:b9:e4:50:d4:c5:51:ea:06:ad:29:4b:cf:35:b1:
c9:a0:a8:81:08:fc:7b:e6:3c:82:c5:bb:a1:ff:ae:
43:4f:7a:5d:c2:ab:6b:5e:ff:e7:e0:69:32:20:45:
67:8d:45:19:44:f9:08:91:28:db:72:29:d1:c6:23:
78:59:fe:15:c4:9f:ca:b1:57:59:c9:75:60:6c:9d:
64:e1:22:92:9c:6c:d9:b9:8c:cc:d4:41:3f:96:14:
72:e8:a3:d0:d1:43:96:63:2e:71:93:e7:31:85:6e:
6d:6f:65:a4:c6:df:6e:41:f1:c9:0a:3e:3b:64:bd:
72:66:57:62:53:86:74:a1:d9:68:2b:a9:d6:71:82:
2b:dc:24:a5:31:5a:b9:85:2b:39:86:b2:20:14:3e:
d8:31:fa:55:79:9f:bf:76:80:7d:77:8e:ed:51:51:
00:98:e2:f0:25:45:ae:31:07:93:b4:92:f4:84:4d:
fd:34:76:db:d7:68:19:52:09:a3:32:d1:ca:c1:e1:
6e:a2:2d:a9:fd:cc:32:c7:a2:ea:c1:4e:bf:e4:2b:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:10:41:C5:4F:F8:6F:61:96:AB:79:B7:F9:3E:85:50:1B:3F:10:D4
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:ff:5f:23:97:e1:3d:02:dd:d7:e1:8b:25:c3:0a:7f:5a:
61:a8:1c:5d:39:33:99:85:33:fa:2e:49:fc:b4:0f:60:fb:b6:
90:2f:01:f1:9c:59:5e:45:f6:80:41:20:60:fe:81:15:df:f3:
e2:14:c3:4f:1a:58:c1:19:fc:7a:d7:6e:f4:88:50:1d:83:6f:
68:d6:0a:ea:e4:46:17:47:70:be:88:42:58:56:ed:4a:88:b0:
5f:28:52:52:80:77:ce:96:a0:5d:11:94:3a:44:3a:4c:37:4d:
c2:0e:8c:e2:02:b5:fd:66:5f:51:93:c3:43:c9:d7:99:bd:bc:
d6:70:3e:24:af:e2:13:15:9d:fc:ca:05:3f:8a:fe:45:c7:f3:
9f:34:44:99:28:54:e1:e8:b8:fd:99:9c:de:ab:1f:84:73:fb:
5a:92:42:9d:8c:5d:f3:1e:f5:3b:aa:b0:0e:90:83:41:5e:f7:
cc:e0:fa:e0:50:bd:23:c5:b9:54:35:20:ed:bd:22:b2:23:0d:
1f:b6:8f:9e:83:29:a0:ff:37:0b:3c:c3:d2:41:31:12:57:b4:
9a:47:f6:ab:b0:a1:58:f1:a4:05:df:52:36:a5:c2:f9:76:f9:
c1:dc:9d:e0:ca:3d:94:0e:3f:22:14:be:9d:0c:fc:84:3c:62:
28:fa:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client