Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 91ezKmBSLzAewt5FjKkMfhZdtNNewMa6feufcur02ho=
Subject key identifier: D2:B1:0A:3D:0F:49:8E:8F:06:76:70:B9:3A:89:2D:EA:F5:45:8F:B5
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 0197BB220F4CD221B71F02B438163C00C662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0B02
Signing time: Sun 29 Jun 2025 10:01:00 +0000
Manifest this update: Sun 29 Jun 2025 10:01:00 +0000
Manifest next update: Mon 30 Jun 2025 10:01:00 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: klMhqMDzsQbjjYU0f9ZepGyEbLsvJaVm/58IgjMJ3IU=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:22:0f:4c:d2:21:b7:1f:02:b4:38:16:3c:00:c6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Jun 29 10:01:00 2025 GMT
Not After : Jun 30 10:01:00 2025 GMT
Subject: CN=d2b10a3d0f498e8f067670b93a892deaf5458fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:3f:09:27:bf:5e:0d:ad:74:af:9c:4b:fa:
c2:18:f1:e8:92:a8:6d:ee:e9:83:bc:47:67:46:c3:
9d:6c:da:09:2b:db:cd:04:40:cb:7e:49:1d:10:4c:
28:d2:19:25:89:4e:9a:b9:87:31:9e:bb:ba:e2:16:
b1:76:29:fd:79:37:e3:6d:32:03:b5:9e:40:fe:c3:
9b:c3:f3:05:62:b4:61:3b:c5:a0:17:ea:be:27:1f:
06:37:10:95:34:c7:76:68:cb:2f:f8:5c:6e:f5:e7:
12:df:f4:c0:c5:d4:e2:38:b4:a4:65:9c:f0:3f:56:
03:3d:f5:39:0d:9c:e2:c6:25:98:4d:cb:80:39:ae:
83:60:79:c6:31:d7:1b:42:22:ab:8f:43:48:15:f4:
a5:2d:82:9d:62:db:b8:76:b3:49:7b:68:c7:6e:55:
b6:4f:b4:fd:d8:e8:7a:39:72:53:80:c1:65:64:e9:
60:b2:b1:50:55:89:22:76:15:b6:26:a5:7d:0e:f7:
48:be:0a:1a:16:d8:d4:0e:fa:36:4d:27:13:68:ce:
b8:a7:09:7b:25:86:4a:2e:47:41:55:3d:fb:2d:ec:
62:58:e0:ba:48:cf:cd:e8:e6:8c:e3:b1:dd:3c:49:
8b:0a:7a:c1:17:5e:13:fc:f6:b4:32:28:32:eb:a9:
33:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B1:0A:3D:0F:49:8E:8F:06:76:70:B9:3A:89:2D:EA:F5:45:8F:B5
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:80:84:fb:0a:bd:70:9c:6b:28:a3:d3:2f:04:bb:38:00:93:
09:37:ae:9b:c6:5c:c0:d4:eb:af:b1:cf:c4:29:f9:3c:40:2a:
21:02:26:f5:b4:f9:52:e6:b7:71:5b:86:55:11:a0:af:a0:56:
4a:c8:7e:bf:d6:f1:35:70:4c:28:b7:3d:ed:14:71:32:a6:e1:
67:74:02:3c:ca:99:61:e1:e1:85:43:d7:08:40:c5:6e:5b:2b:
19:75:8d:fa:ec:45:34:74:f4:3c:20:c9:51:2b:56:c9:3c:17:
59:5e:88:be:64:09:62:91:e4:13:11:d2:15:2f:09:49:ca:57:
4b:e3:b1:83:4f:65:2b:78:6e:b2:ee:1b:3f:0c:57:5b:ec:c8:
7f:c5:34:14:0f:63:7c:bd:ff:3e:0f:fd:64:b5:a9:ae:a4:78:
37:b0:81:70:59:f9:de:03:8b:34:a7:75:1d:4a:74:61:56:e5:
4a:5c:11:1b:76:7e:5c:40:8e:94:58:fe:76:1c:5c:cc:02:ea:
9f:a1:92:df:e6:e7:5a:ad:89:af:eb:1c:9e:2b:24:60:44:9c:
09:63:da:e7:06:e4:35:28:ff:51:c7:42:1a:e6:73:02:85:ac:
88:9c:2d:82:ed:37:d0:5c:cd:73:cf:b9:5e:0e:01:b7:8f:d9:
57:4f:5c:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7Ig9M0iG3HwK0OBY8AMZiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTZkYjJkMjg3NGY5ZTU5ODVjOWYxOGYwNWZlNTZlODNm
MDk1MTYwHhcNMjUwNjI5MTAwMTAwWhcNMjUwNjMwMTAwMTAwWjAzMTEwLwYDVQQD
EyhkMmIxMGEzZDBmNDk4ZThmMDY3NjcwYjkzYTg5MmRlYWY1NDU4ZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJw/CSe/Xg2tdK+cS/rCGPHokqht
7umDvEdnRsOdbNoJK9vNBEDLfkkdEEwo0hkliU6auYcxnru64haxdin9eTfjbTID
tZ5A/sObw/MFYrRhO8WgF+q+Jx8GNxCVNMd2aMsv+Fxu9ecS3/TAxdTiOLSkZZzw
P1YDPfU5DZzixiWYTcuAOa6DYHnGMdcbQiKrj0NIFfSlLYKdYtu4drNJe2jHblW2
T7T92Oh6OXJTgMFlZOlgsrFQVYkidhW2JqV9DvdIvgoaFtjUDvo2TScTaM64pwl7
JYZKLkdBVT37LexiWOC6SM/N6OaM47HdPEmLCnrBF14T/Pa0Migy66kzTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKxCj0PSY6PBnZwuTqJLer1RY+1MB8GA1UdIwQY
MBaAFPFW2y0odPnlmFyfGPBf5W6D8JUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0Yjgt
NWFlNTNhMDZlYWE3LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85YmI0MGQtYWQyOC00ZTUxLTg0YjgtNWFlNTNhMDZlYWE3
LzEvOFZiYkxTaDAtZVdZWEo4WThGX2xib1B3bFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4CE+wq9
cJxrKKPTLwS7OACTCTeum8ZcwNTrr7HPxCn5PEAqIQIm9bT5Uua3cVuGVRGgr6BW
Ssh+v9bxNXBMKLc97RRxMqbhZ3QCPMqZYeHhhUPXCEDFblsrGXWN+uxFNHT0PCDJ
UStWyTwXWV6IvmQJYpHkExHSFS8JScpXS+Oxg09lK3husu4bPwxXW+zIf8U0FA9j
fL3/Pg/9ZLWprqR4N7CBcFn53gOLNKd1HUp0YVblSlwRG3Z+XECOlFj+dhxczALq
n6GS3+bnWq2Jr+scniskYEScCWPa5wbkNSj/UcdCGuZzAoWsiJwtgu030FzNc8+5
Xg4Bt4/ZV09cIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:48:53 2025 by rpki-client