Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: OYcOLGexnedY8AzLkvhDoGKJTLIQ4EGQhS80v0pvmJg=
Subject key identifier: 0F:16:17:AF:CD:1B:C6:A1:86:E4:6F:60:2F:49:19:2D:ED:66:CE:7B
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 0198D5BC294B50663D0363BFFA051A1B0D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 10DF
Signing time: Sat 23 Aug 2025 07:02:14 +0000
Manifest this update: Sat 23 Aug 2025 07:02:14 +0000
Manifest next update: Sun 24 Aug 2025 07:02:14 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: Q0ZyzTZqH7pwfFW5o9vZC6hJ+fkpeasUsZ6+51A5NJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:29:4b:50:66:3d:03:63:bf:fa:05:1a:1b:0d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Aug 23 07:02:14 2025 GMT
Not After : Aug 24 07:02:14 2025 GMT
Subject: CN=0f1617afcd1bc6a186e46f602f49192ded66ce7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:a7:59:06:39:ea:4c:82:35:cd:8b:07:91:
8c:7a:b0:ce:6c:d2:89:48:6d:06:e7:97:e8:e5:2c:
dd:a4:78:bb:09:19:86:42:00:ba:5e:33:93:f0:d7:
1f:b1:45:ef:f0:bc:2c:bf:d8:68:e3:fe:b4:16:3d:
61:0d:5e:72:bb:8c:72:a1:af:2f:45:6a:ed:44:c7:
97:40:e2:9d:89:11:2c:2e:f5:83:f3:5f:b6:e6:d2:
35:88:cd:c7:85:28:3e:2d:c9:36:d4:10:22:db:18:
af:2d:31:33:58:4a:ce:4b:f8:8f:f8:91:31:c0:55:
bc:b4:e1:71:a3:0d:8a:0c:aa:c5:3d:5e:eb:62:63:
97:a2:63:c3:39:d8:1f:b3:39:98:97:16:0d:94:12:
4e:a7:dc:12:b4:01:42:12:f7:17:2a:84:7d:b6:d8:
02:02:29:e6:63:1d:54:8d:69:0a:94:5e:8c:58:d2:
74:2c:d5:e0:d1:2a:87:36:c7:09:16:28:37:36:07:
9d:75:0a:67:40:b9:30:a9:ab:21:de:fc:01:8f:64:
f5:c5:f2:c4:3f:50:3a:fd:d8:c4:ac:ff:0a:54:b1:
ba:0e:17:7c:71:a2:f2:05:df:ec:9d:18:6c:4e:1e:
f4:8f:4a:e2:2b:15:82:ad:b8:31:e6:a0:10:57:81:
3c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:16:17:AF:CD:1B:C6:A1:86:E4:6F:60:2F:49:19:2D:ED:66:CE:7B
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3f:6d:21:37:83:2f:18:81:ab:bd:a2:a6:fb:ce:73:24:57:
31:da:12:42:a3:0f:df:23:e5:c6:e0:e5:94:bd:2a:de:28:95:
15:fe:fe:f2:ea:99:2b:d5:80:b0:c3:df:68:85:b9:68:86:cc:
14:fb:79:df:d4:3e:a4:0f:28:1f:90:af:e7:23:f6:9f:27:dd:
8c:a6:f4:7a:ea:60:d0:67:b7:f3:ac:32:60:dc:00:78:7c:56:
fc:22:03:a4:b9:1f:ec:83:92:55:5b:99:d5:22:ab:39:85:e1:
fa:3f:bd:5c:2a:27:b2:95:0a:32:a1:6f:db:b0:e7:28:b8:00:
a1:4c:6a:d3:40:42:31:56:bd:74:4d:81:27:08:db:59:a1:59:
c9:52:fa:a0:d2:39:1f:5d:be:70:71:2f:83:6d:23:23:06:3e:
d8:d3:d8:cd:6b:be:2f:11:d9:b0:f8:6a:dc:60:e0:cf:f2:69:
3c:8e:9c:97:92:5b:2d:b2:a0:22:cd:74:0a:6f:f0:51:de:f9:
d0:b6:27:ce:18:12:1b:a4:f7:4d:fc:71:b5:27:a7:80:0f:cc:
33:dd:44:4a:3e:5f:42:75:a7:c9:e3:2b:ac:85:90:db:76:a3:
db:e1:d1:f5:c8:50:74:74:f5:71:ec:4d:4c:46:28:00:29:55:
a5:eb:45:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:40 2025 by rpki-client