Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: LPqnPW72lwQds6v0o0g1cOGLu7+BKNd5bG7Zs9KxlJc=
Subject key identifier: 2A:4B:51:3C:47:DF:5B:04:87:8E:4A:F8:72:53:AA:C0:08:DE:7B:DF
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 0199FE7DCD61542037F6718272867D499079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 163C
Signing time: Sun 19 Oct 2025 22:01:21 +0000
Manifest this update: Sun 19 Oct 2025 22:01:21 +0000
Manifest next update: Mon 20 Oct 2025 22:01:21 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 6Fa8u6vJqlrBnBEqWopImCEVVvPvtmMY7hESt/tmKUU=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:cd:61:54:20:37:f6:71:82:72:86:7d:49:90:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Oct 19 22:01:21 2025 GMT
Not After : Oct 20 22:01:21 2025 GMT
Subject: CN=2a4b513c47df5b04878e4af87253aac008de7bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:17:36:f6:cf:26:74:c1:c9:06:73:d4:a6:
ab:ae:dc:5b:86:65:f7:3a:da:13:8f:86:f3:a8:90:
51:a7:5e:67:f6:24:e8:2b:44:69:5e:77:c0:c4:07:
e9:75:33:43:af:47:31:21:8a:f5:2d:88:53:de:8e:
8e:c6:cd:a5:f2:6e:97:6c:d6:1c:de:84:e8:0c:44:
b5:dd:68:f7:1b:3d:82:3e:bc:f2:d3:40:a2:c7:41:
58:54:55:6e:6e:05:d0:e2:b3:8c:14:81:47:56:d5:
ed:09:dc:a0:8e:03:99:8d:59:13:7a:c3:96:eb:10:
ff:eb:31:61:fc:08:44:f2:f9:a2:d7:51:26:5b:c2:
5e:2d:10:6d:6c:1e:0d:18:58:47:06:80:ad:fd:60:
03:4b:dc:6c:c0:11:48:94:f2:f4:e0:ba:09:ad:3a:
99:6e:5f:25:67:50:2c:4e:2b:38:88:ae:63:13:6f:
1b:26:7a:dc:9f:88:e9:e7:57:90:a9:8d:d2:ce:40:
46:45:60:a3:f3:e1:b7:84:d7:a1:f1:f8:bf:58:87:
6d:67:f9:f9:1a:48:82:90:cb:02:2c:45:4c:88:1e:
21:a1:39:e5:5d:aa:48:de:51:91:54:58:07:14:3c:
50:9a:42:89:5b:78:5a:d3:b7:a9:57:3e:a2:5e:b3:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4B:51:3C:47:DF:5B:04:87:8E:4A:F8:72:53:AA:C0:08:DE:7B:DF
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:72:b5:d4:d0:09:7d:0d:8a:39:02:67:cc:15:d8:2b:03:26:
9c:39:71:62:5d:4d:7d:be:67:6d:2c:72:c2:62:9f:16:da:77:
ae:2c:d2:da:cc:37:49:b4:e7:34:38:34:20:ac:52:88:b6:96:
dc:36:d0:58:47:4d:5a:91:df:d4:73:e3:db:04:3f:d0:42:cb:
21:bd:d9:03:7e:62:e6:5f:18:aa:2b:f5:ff:93:a6:bb:57:87:
8f:a3:17:d6:57:c4:49:fd:d4:4e:53:a7:2a:22:9d:8d:8f:d6:
51:76:05:19:98:56:b5:52:71:7b:84:25:bc:2f:78:63:bd:4b:
f9:32:9e:96:ec:6f:35:14:69:a9:23:74:5f:6d:54:c3:b4:fa:
bd:b4:32:f6:cd:b4:4c:cb:f5:d5:00:03:02:75:af:47:8f:25:
52:2b:17:41:20:ad:2c:a7:d1:af:e6:b7:51:d7:11:4a:55:0a:
eb:8b:95:99:12:b2:7f:6b:2c:7e:4c:fc:21:7a:b3:fb:26:84:
9a:fe:5d:06:22:ca:03:4e:02:30:07:db:c0:55:86:eb:ea:a4:
ad:8f:d0:61:6b:a0:58:23:8b:2d:a1:37:b1:2b:ee:21:ee:cc:
ef:fb:fb:3f:63:16:02:dd:20:9e:29:28:c3:54:54:10:92:2d:
49:3e:f6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:05:09 2025 by rpki-client