Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: vSsJ2W/tQVbBL8NXcW41cHA+GLDve4qRxaGnyOs5Jls=
Subject key identifier: 88:69:D4:AB:31:3D:E0:05:A4:F9:26:DC:7B:C4:30:D9:C9:33:BB:B5
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019A4F63043AC8A8A5BD9088EFECF581A555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0E1B
Signing time: Tue 04 Nov 2025 15:01:20 +0000
Manifest this update: Tue 04 Nov 2025 15:01:20 +0000
Manifest next update: Wed 05 Nov 2025 15:01:20 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: f6CnGzKQ0tkEcbo+Z/fldW2xq+nU3gP2OaHJKaqR4jw=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:63:04:3a:c8:a8:a5:bd:90:88:ef:ec:f5:81:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Nov 4 15:01:20 2025 GMT
Not After : Nov 5 15:01:20 2025 GMT
Subject: CN=8869d4ab313de005a4f926dc7bc430d9c933bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:26:a1:b8:65:13:1d:d2:9a:0b:ec:1c:fd:
d8:18:32:74:2d:55:03:2d:5e:5f:07:fe:f7:04:66:
ee:d7:86:5d:15:51:ca:e1:7d:52:25:ca:20:5e:5c:
51:9c:91:ff:a7:fd:27:a2:b8:e6:ac:b7:ee:5c:89:
f1:39:06:ce:46:a4:f1:13:18:0e:7a:0e:b3:fa:9a:
5c:6d:46:fd:91:90:65:0a:8c:19:43:cc:a2:85:bf:
3a:01:c4:06:52:32:99:0f:8d:9c:ca:26:78:93:21:
5f:71:f2:8e:b7:ac:3b:45:56:7b:9f:96:dc:e3:1e:
9d:d3:ad:44:46:b8:e7:9d:eb:11:48:bd:ee:da:11:
ce:fa:3f:ce:07:70:fd:60:0b:ab:4a:f6:ff:80:87:
c0:4d:35:4e:51:2c:5b:ba:ee:10:fe:9d:13:8e:52:
da:c6:4b:b3:5f:ff:d0:ef:b3:d5:d2:69:67:4a:3f:
ee:2a:b8:10:b5:64:0e:00:47:65:bd:5b:02:7c:79:
24:f8:30:1d:8d:bf:e7:d3:fe:15:ae:ad:8f:07:6f:
b6:7e:30:a5:fa:c1:88:d7:3c:78:91:9b:90:45:95:
f7:ed:33:3f:48:98:8d:82:78:fb:51:b3:29:91:3c:
de:5b:cf:13:24:5d:f5:99:2c:fc:4c:f2:8c:92:f1:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:69:D4:AB:31:3D:E0:05:A4:F9:26:DC:7B:C4:30:D9:C9:33:BB:B5
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:22:95:aa:d4:7b:dc:f0:64:f6:65:2a:8b:20:0b:3a:e7:
5d:52:98:be:1c:32:42:f2:67:57:df:9c:97:f0:9d:48:df:b5:
76:e4:f0:67:65:1d:4b:72:82:56:06:40:c1:d5:f0:d9:0d:c3:
1d:0b:a1:35:03:8f:8e:a6:45:c6:2c:50:20:59:93:43:bb:1f:
8e:0d:27:36:28:0d:c7:a3:19:4d:14:ee:9d:ca:e0:8e:f1:1f:
4d:54:36:56:7b:e5:6a:be:9b:6d:89:e0:38:90:69:23:1d:af:
ca:a3:20:97:63:47:b0:9f:26:41:a3:35:50:91:a8:97:78:29:
27:0e:b5:0d:d6:35:3e:39:5c:a4:2d:6e:ab:47:4e:e6:d8:26:
df:64:ec:da:be:1b:09:58:f3:12:ca:95:f9:ec:38:fe:b3:ec:
8c:37:83:94:b0:da:40:3a:80:bb:6b:09:db:74:e7:e2:12:85:
ec:98:65:ff:7a:38:d5:7c:a7:d5:ce:0f:ba:cd:0d:23:8d:67:
0b:02:57:b0:59:33:c0:2f:32:5a:5a:ca:f5:65:72:cd:90:b6:
01:e4:2e:e2:e9:52:c0:8d:66:13:11:4e:01:71:ff:4b:f5:74:
85:bd:6b:95:ef:1e:0d:b1:91:a6:cb:95:9c:b9:29:02:09:82:
a2:66:cd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:17 2025 by rpki-client