Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: 33ulVeb5bT3HxADqoQ9fXKfG5oparSZ8iDwRBau/lXI=
Subject key identifier: 8D:CC:A1:E7:26:F6:94:24:06:A6:C9:F3:4E:CB:DA:C9:76:37:77:E1
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 0199FBEBD60204B8456BE111E32D4634CD84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 12A4
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: 2tynlwfxiJ8ZlTScNhXWKi4t1IkCGRj46B+j6EsK0Ag=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d6:02:04:b8:45:6b:e1:11:e3:2d:46:34:cd:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=8dcca1e726f6942406a6c9f34ecbdac9763777e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:08:c6:69:10:73:53:d7:ac:73:10:7b:8f:
30:37:03:a3:79:3f:3f:c9:30:ce:a2:83:8f:5e:1f:
d3:f9:85:dc:ec:4e:f5:94:18:08:ce:52:12:48:5e:
2b:61:d5:e2:78:37:28:01:48:d0:77:99:b5:f3:9f:
57:fd:c2:21:f8:e2:5d:d9:5b:de:ba:24:d4:95:34:
ba:55:13:a4:36:d8:48:19:cd:1d:42:0f:6d:ae:ca:
f0:ce:ef:36:6f:47:c8:4b:79:51:7b:7d:f1:e7:e7:
30:ab:0f:5e:f4:41:e1:8a:a5:a9:f7:35:6e:92:f2:
b4:1a:78:40:16:ef:cf:f3:ff:f3:15:26:01:68:d7:
34:cb:41:3c:6e:b6:6d:5a:8f:c8:e4:7f:51:b1:11:
b8:72:10:c2:ef:d1:66:a3:8c:9c:6f:41:5e:f4:36:
22:ef:06:62:58:e1:cb:c5:e9:c4:79:9c:ea:5c:7e:
ba:67:0f:34:0d:f1:36:c0:c7:3c:7f:fe:90:7f:b2:
3f:4d:c0:82:a9:4e:8a:86:81:ce:76:97:c8:44:9b:
02:2a:db:12:15:ab:56:c0:cf:39:d0:e9:d1:52:30:
b6:eb:24:d5:7c:8a:53:d3:a8:e3:81:ee:18:9f:3a:
24:1f:ce:6c:d7:0f:8b:1f:9b:15:d0:ed:da:1c:e8:
66:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CC:A1:E7:26:F6:94:24:06:A6:C9:F3:4E:CB:DA:C9:76:37:77:E1
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:33:12:b7:90:7b:21:93:cd:38:31:7b:18:a9:f5:19:4f:c2:
73:13:2d:1a:6f:04:72:da:c8:1d:3d:44:c7:a0:3e:cd:18:3d:
89:28:5d:a3:35:f7:e0:c5:0f:95:68:f7:34:5f:d2:d7:5a:f7:
0d:18:ee:69:e8:46:ab:69:0f:f6:78:68:9d:c5:39:90:48:36:
db:7b:80:c7:3f:d6:de:22:cc:6f:f7:50:c7:29:50:7c:60:75:
dd:36:2c:14:2d:3b:94:c1:eb:1c:aa:aa:7d:b7:6f:2c:7c:4d:
39:1d:79:b4:b3:c2:26:6b:d8:e9:98:83:e8:a3:9c:b7:b7:8d:
94:2b:26:55:aa:62:83:da:b2:9f:a1:dd:69:57:18:37:94:73:
07:fe:16:f1:93:ed:96:96:b6:6a:4d:9b:01:89:fb:7c:90:c6:
77:e8:dc:9f:88:72:70:b5:15:b7:10:e1:2e:d0:d7:1a:24:01:
53:98:dc:c8:a3:7e:4f:5f:24:94:95:61:fc:31:20:40:49:cd:
09:cf:dd:91:78:fd:5c:fd:4d:da:df:a7:8b:d1:6c:6c:53:f0:
bb:26:7e:56:bf:54:85:c6:18:af:7b:e0:a9:59:96:a3:f6:bc:
40:c4:ab:7f:c3:67:d6:b1:68:ac:50:da:dd:4c:97:39:b8:06:
5a:ea:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:46 2025 by rpki-client