Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
File: sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft (raw, json)
Hash identifier: vBHYoZ28PRk2SPIdJTPTW+D+r0yOkmxe8AuUcVu7qaU=
Subject key identifier: A2:96:76:2D:BD:C1:E5:5D:89:B9:6E:CF:7A:A1:6A:BE:68:A9:EA:71
Authority key identifier: B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
Certificate issuer: /CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Certificate serial: 0199FC216806633C9D98EC8321F5B5B557E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
Manifest number: 04B2
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: TtWAkSfWnAdWkPSbjWsj0bQP2Qs.roa (hash: aq+t6Xrt8tsoSTCr/VP5wkOGWF6BiCi7pgwlC8GWdxs=)
2: sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl (hash: cBqx8biSBgRknTODNuTNAsfL8enNdmRPZ0sX5t689Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:68:06:63:3c:9d:98:ec:83:21:f5:b5:b5:57:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1706fcdb7ef0580f4ff2032ceeffd29b70ab639
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=a296762dbdc1e55d89b96ecf7aa16abe68a9ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:23:c9:48:62:97:e1:e5:8e:d0:40:b1:92:
30:a2:78:09:4e:c5:b8:02:84:b8:ab:9e:d6:6c:5a:
ca:29:e6:4d:a5:c2:29:dd:f4:04:c1:b0:d5:54:37:
6e:0f:29:7b:60:fd:f5:d8:e1:82:a0:30:65:01:b1:
8d:00:0b:01:b1:74:4c:0e:78:11:df:c0:33:85:44:
28:69:16:3c:8f:d4:a4:32:6d:98:6f:28:e0:69:e0:
9f:dd:ec:a3:7f:e1:da:51:68:01:e9:da:e3:fc:b6:
f9:9a:cc:9a:f5:61:bd:41:72:e3:b5:4a:14:ad:df:
f9:6e:12:44:50:c7:00:5c:4c:5d:27:ce:b7:46:3d:
a5:4c:90:21:9a:80:e2:8d:01:c3:68:ea:51:c5:05:
b5:d5:4b:c5:bc:85:88:8d:80:fc:d8:ca:44:ab:5c:
98:1d:71:69:35:fc:9a:99:72:e3:e5:46:5d:d1:48:
21:17:6f:84:4b:45:5d:d7:c7:3e:0c:1f:fe:ef:6a:
30:3f:1e:c4:de:f2:7e:c9:45:f3:c2:ae:12:d6:5e:
2c:04:b9:5a:7b:7f:16:a6:af:a4:e3:62:a3:bb:0f:
f8:a8:1b:3a:7c:a1:b3:c9:24:e7:da:3b:b3:27:98:
b1:29:a7:05:ea:0e:e8:76:c2:fb:9a:b4:68:87:4d:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:96:76:2D:BD:C1:E5:5D:89:B9:6E:CF:7A:A1:6A:BE:68:A9:EA:71
X509v3 Authority Key Identifier:
keyid:B1:70:6F:CD:B7:EF:05:80:F4:FF:20:32:CE:EF:FD:29:B7:0A:B6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXBvzbfvBYD0_yAyzu_9KbcKtjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dd2990-d28c-4f1a-b6bd-e81cd7022553/1/sXBvzbfvBYD0_yAyzu_9KbcKtjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:61:dc:8b:41:51:ff:14:a6:ca:d3:8e:14:1e:48:c5:74:72:
5b:eb:1b:a6:a7:b8:c7:a9:cd:50:69:78:a7:1d:02:6a:7b:aa:
66:a7:15:8a:17:82:6e:89:c9:57:0f:bd:97:cf:01:d8:5a:9d:
bd:6a:49:ac:ac:2d:d1:73:be:ad:26:33:3e:e8:6d:91:71:05:
e2:c0:67:08:25:f0:eb:29:19:e0:4a:71:85:11:ab:8f:f8:9d:
d1:cd:11:09:52:7f:01:a4:15:0f:c8:4c:49:9c:74:e8:18:47:
aa:c2:a1:61:32:65:87:5b:99:b2:10:45:c2:7d:28:0b:87:0b:
8a:6a:5b:9f:a3:ac:7d:50:6c:3b:3c:cb:6f:8c:30:bd:71:ff:
04:21:d9:51:f1:06:94:ed:c4:dc:c8:49:13:b4:41:ad:40:cc:
6d:bb:ab:11:e5:bf:3c:df:a2:1a:9b:cf:bf:f0:cf:83:68:cf:
11:fc:39:41:34:af:94:08:37:96:1e:be:39:7e:5f:32:cd:56:
41:3b:32:98:a2:f1:7d:4e:6c:74:81:d0:bc:88:86:9e:b7:a3:
82:85:02:d3:2e:7b:ac:1c:88:8d:35:2c:a9:3c:fd:b5:99:f2:
49:ff:26:84:c0:36:e6:0c:de:61:8b:b8:95:c9:e3:75:4f:13:
ab:7e:34:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:56 2025 by rpki-client