Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: CwPNjYHeOcnHHcoouG5PJ9wZW0IdZHuyMdEwuNva4EU=
Subject key identifier: 78:99:82:FC:D9:F9:50:8D:38:43:2A:E9:EC:77:30:62:38:03:20:CD
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019A4DAB168C72CEEED9F2C2C9AAAA43047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0C57
Signing time: Tue 04 Nov 2025 07:00:49 +0000
Manifest this update: Tue 04 Nov 2025 07:00:49 +0000
Manifest next update: Wed 05 Nov 2025 07:00:49 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: F5jksHP/WzzToMyY92RLFN5LrbOpIPjpf6qD9RnoTUU=)
2: RcN3Kuq3ry-DnLR50I8ZgxWiZps.roa (hash: 21uJ31ZQvbuNpqex7iYKgjQtgSig9b6f7lgE5wHxtS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:16:8c:72:ce:ee:d9:f2:c2:c9:aa:aa:43:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Nov 4 07:00:49 2025 GMT
Not After : Nov 5 07:00:49 2025 GMT
Subject: CN=789982fcd9f9508d38432ae9ec773062380320cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:5b:60:62:41:fb:7f:f8:74:26:a9:54:0d:
5c:6a:c0:dd:99:20:a2:f5:6b:e0:76:06:c5:b6:d6:
08:a2:c3:45:15:45:c6:95:91:c7:7f:89:a9:ce:4f:
c5:b5:2b:64:5e:b1:54:9e:12:af:9b:b8:9f:87:44:
cc:48:96:c6:17:a3:bd:3a:60:fe:a5:ea:33:85:08:
ca:6a:9a:58:e7:60:0e:2c:d2:ec:0d:09:5b:86:b9:
cc:aa:38:e3:3a:d5:77:c2:80:1f:a4:aa:9e:b7:f5:
f7:49:1b:0f:49:f4:26:ba:18:4d:94:27:78:03:80:
28:c7:5a:0d:71:44:12:9b:5f:fc:66:47:5a:b4:a6:
c2:90:83:27:65:0e:83:af:3b:16:17:9c:9f:fd:54:
01:e2:3c:47:1d:47:4e:59:1e:73:41:38:06:ce:0a:
bf:2d:98:d4:95:b4:e8:0d:7e:df:21:48:93:56:7c:
fb:1e:bf:b2:2a:82:b2:85:62:27:a1:f0:80:b3:9f:
fc:4e:d7:5d:33:57:2b:98:58:ba:6d:f8:d1:a2:f9:
d0:7c:49:19:ce:ee:78:2f:77:c4:ed:67:9a:5d:eb:
63:c9:3f:5b:85:7a:b3:eb:a0:3f:dc:be:23:aa:ba:
3a:83:ae:4e:c1:e2:36:67:42:f4:99:d9:f1:3a:02:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:99:82:FC:D9:F9:50:8D:38:43:2A:E9:EC:77:30:62:38:03:20:CD
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:29:72:6e:f6:1a:60:18:a6:bf:ee:b9:85:37:b8:de:cb:57:
c8:99:6e:de:7a:2a:e4:1c:44:04:e2:15:4a:dd:a5:da:d4:98:
8f:3e:08:37:ad:10:ab:46:ad:68:c6:80:97:2f:94:16:d9:d8:
5e:1a:19:a4:97:05:a0:a6:ed:64:d8:5e:ff:95:a8:25:79:51:
cf:a6:20:c0:36:ef:31:6e:03:6c:73:b7:36:20:1b:35:1c:14:
f9:09:af:ac:c7:4a:ec:7f:f4:6b:95:ad:3b:89:60:0b:ff:6c:
7c:a7:c1:29:01:f0:24:b3:2d:f1:d6:ff:29:d2:8d:00:ce:b8:
22:5e:54:54:d4:74:91:1f:7f:15:e3:f6:3a:47:0f:e8:39:75:
99:3d:c4:00:44:fc:33:c0:5f:88:4a:82:48:ad:89:f0:18:15:
83:92:57:c5:6d:00:3b:4b:99:c9:99:8f:8e:c0:8a:fd:55:80:
f9:c2:a1:d8:e1:fc:66:67:8f:70:16:01:13:08:c7:13:bf:c6:
28:4e:ba:75:40:37:32:1c:3a:23:da:0f:f2:51:2b:0a:8f:22:
5e:b9:63:13:7a:42:70:69:59:ae:22:96:14:e0:c3:dd:e4:16:
0d:53:94:dc:43:3b:27:99:0e:4e:ab:21:4a:77:d4:d0:02:1d:
c1:ce:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:32 2025 by rpki-client