Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: 3XeVpIAVHFHkwjxQpir6Cd9lp3etMKk+CW71654L7Tg=
Subject key identifier: 93:29:2A:0C:E8:22:19:10:DC:AE:52:24:BC:23:13:E4:DF:EE:39:6C
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 0199FC8F9C6F68B2784843397D562AF41480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 15CD
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: tii0pEAwd8BlDodBKuHVz7Hz+jW2Q3TypbaOhFCT6yY=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9c:6f:68:b2:78:48:43:39:7d:56:2a:f4:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=93292a0ce8221910dcae5224bc2313e4dfee396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:5c:54:eb:18:d2:94:50:71:d6:1f:ef:7c:
17:78:bb:87:c9:be:42:ad:5e:cd:16:9b:a0:85:71:
97:c3:da:48:15:b1:79:c7:1f:63:0c:9a:71:74:f6:
35:b1:ec:e7:34:0e:e8:64:98:76:69:1f:5f:46:a6:
b3:5b:aa:f6:68:13:8c:7c:85:ad:99:8e:cd:a5:f0:
31:c8:01:99:6d:28:36:21:64:b8:1b:1f:ff:c7:c8:
70:bc:87:55:82:93:ae:87:b0:b0:dd:fb:e4:1b:27:
a6:df:03:ac:83:74:15:21:ea:c2:aa:16:f5:44:2a:
55:b8:c0:73:df:55:27:11:1d:c9:55:a0:a9:2e:8d:
d1:59:b7:c7:59:6a:f4:52:69:d8:c7:3f:74:c8:78:
73:81:19:a6:1b:ea:73:84:42:28:7b:92:d4:a0:7e:
80:d8:3c:64:1c:40:cc:bf:ab:13:d4:9b:b2:3f:e4:
7a:df:3e:2c:57:51:bd:87:1c:1d:a3:86:d5:14:f9:
e0:bd:c3:3d:9d:6a:62:87:13:d4:e1:e7:5f:d6:2f:
7b:8a:82:2a:28:c9:69:70:96:fa:2b:3a:37:e4:b7:
2f:5e:df:74:7e:ec:a7:0a:67:35:62:f2:59:18:85:
83:f3:f0:9e:5e:c5:1d:c1:70:e1:2a:d7:fe:f7:28:
71:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:2A:0C:E8:22:19:10:DC:AE:52:24:BC:23:13:E4:DF:EE:39:6C
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6d:70:74:b4:25:9e:04:f6:37:56:ea:31:7a:ca:18:b5:84:
4c:29:4d:53:fe:fb:70:7b:c6:70:38:5b:c4:99:c1:b9:4f:42:
4e:14:fd:49:f2:3d:58:c9:64:73:c9:ce:f2:89:0f:86:66:56:
c0:1b:85:e9:65:3a:e8:9f:b8:52:b0:4d:b9:c4:10:71:17:5a:
62:23:07:39:48:b1:f2:f0:62:43:2f:47:d5:b9:2d:7e:19:bf:
a8:17:1c:9c:c5:f3:cd:92:55:3b:73:94:1d:a2:e1:97:db:db:
4a:39:0b:b1:07:09:b6:6b:b8:3a:01:bd:95:b1:a1:c4:eb:13:
f9:5a:48:74:b2:ca:0e:7b:2e:4b:f7:6d:6d:ee:e7:2b:6b:82:
d8:12:61:41:7e:50:6d:6d:ce:3e:87:67:03:c0:df:7f:c3:bb:
88:e6:1f:97:50:b8:b9:d1:82:cd:12:1b:e3:b5:da:91:25:a6:
3b:62:ce:db:13:c0:17:50:d8:c9:3f:db:ca:8e:33:06:65:25:
45:fa:11:13:b9:a5:40:83:89:61:e6:c1:31:5b:9e:4b:14:67:
71:bf:39:cf:b2:d9:da:56:84:05:57:04:74:f7:43:50:64:32:
1c:68:aa:14:2f:be:1a:6f:24:52:f5:82:64:72:8e:bd:d8:03:
8b:e1:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:50 2025 by rpki-client