Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: 1KP9uqHg4WaNYQ4FIlZ/GeFvFBTlgi2QVJ9fwuCPX18=
Subject key identifier: 56:A4:39:9A:87:51:C6:73:37:84:8A:CB:BC:50:76:E4:99:91:9C:72
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 0199FC58F8A8C765EAE3B898284C8D416F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 0563
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: R4r86ZVa0rwywdqXY3HPXQqXF4RjYa9INB4iLISDG7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f8:a8:c7:65:ea:e3:b8:98:28:4c:8d:41:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=56a4399a8751c67337848acbbc5076e499919c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c8:80:18:48:db:c5:ed:39:8f:e4:73:a4:ea:
47:0b:b5:2b:af:07:ca:21:65:67:17:5d:0d:7c:d0:
2c:e5:8e:05:14:50:ca:68:7c:2d:c6:1e:aa:7e:db:
b0:73:d0:57:7a:f9:a9:87:15:7f:ae:3a:41:51:2e:
d1:ae:60:7c:0e:ae:cf:06:19:7d:91:ae:cc:a1:71:
51:3d:1a:08:d5:26:e1:7e:6b:9c:d0:0a:e3:ad:f0:
62:57:cb:26:30:bd:83:55:d9:e1:ae:c6:c4:c3:77:
53:da:26:76:bd:f3:20:31:31:8a:89:6b:71:78:05:
bd:3d:db:ed:c9:f6:67:38:59:e5:c2:95:92:61:57:
1e:77:cd:a2:7b:cf:7d:36:9d:c0:de:e9:c6:3a:e6:
dd:ca:35:ad:8d:86:cb:3c:5f:f2:94:39:d3:df:c4:
14:70:0e:69:77:01:8f:e0:5d:d4:66:b1:48:a9:71:
e5:43:8e:b2:dd:bc:35:27:dc:02:c2:d9:31:f4:8a:
9c:ee:82:bf:93:cc:7f:9a:0a:c8:ea:b7:0c:c4:c0:
b0:dd:a0:e5:f8:f4:8c:40:ce:66:9a:0d:b3:d1:6e:
59:1c:fb:30:3a:7d:69:02:62:64:bc:0a:a6:04:c2:
0b:cb:77:d2:16:70:7c:b5:1d:25:26:f5:d5:4f:31:
55:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A4:39:9A:87:51:C6:73:37:84:8A:CB:BC:50:76:E4:99:91:9C:72
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fd:31:9f:30:a9:a7:17:5a:e1:d2:15:1d:fb:e7:68:ec:6a:
5a:f4:2e:15:f2:72:f3:81:e8:7b:00:0b:65:c6:60:ce:61:bd:
3d:a6:d0:f1:ec:58:40:f7:b8:a7:72:9e:e4:5c:b3:d8:3f:1e:
c2:e8:e7:ee:65:2b:55:e7:56:9c:81:db:fb:ec:6c:ad:e0:96:
d5:85:db:ee:25:54:48:76:fb:b8:5a:81:e8:d6:9e:88:11:d2:
d4:b1:4a:61:cc:0f:a3:6a:cd:4f:b5:3d:35:4c:1c:29:63:4d:
4e:56:2b:03:ef:35:8c:07:da:c1:de:14:b7:3a:78:fd:67:78:
7e:e2:c4:c2:59:30:6b:1f:cc:d1:bb:11:ad:a5:e9:0f:41:39:
a1:a4:f3:04:84:33:98:ee:2a:9a:96:9b:a0:ee:a7:9a:e7:01:
58:40:33:14:c3:ca:cb:b6:65:88:df:57:4d:cf:69:89:bd:60:
a2:04:ed:8f:62:a1:0d:e8:1d:ff:b4:7c:b4:ec:2c:5a:a7:cf:
2c:ae:52:04:30:fc:e3:ae:c0:52:8d:60:be:16:38:d5:33:47:
ff:56:16:d9:6d:0c:a5:6f:d2:84:41:ff:ee:01:1b:1e:40:c1:
5e:37:ec:bf:db:f4:29:52:0c:86:9c:92:fc:c5:f3:9b:32:27:
a9:22:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:46 2025 by rpki-client