Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: GMGQJlkR6tlMD7KzjASjMb79bBoKtN7MYu6NdS7eBQY=
Subject key identifier: 25:AB:5A:F9:18:4B:E5:63:72:5D:63:19:05:82:87:12:84:9F:C5:61
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0198D7A908BA91820D2FB67944908E01B9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0EB9
Signing time: Sat 23 Aug 2025 16:00:35 +0000
Manifest this update: Sat 23 Aug 2025 16:00:35 +0000
Manifest next update: Sun 24 Aug 2025 16:00:35 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: q6bFo+40zQBZvfli+uVOoJ4Dc0uZ3HJn80r5S5YHGdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:08:ba:91:82:0d:2f:b6:79:44:90:8e:01:b9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Aug 23 16:00:35 2025 GMT
Not After : Aug 24 16:00:35 2025 GMT
Subject: CN=25ab5af9184be563725d631905828712849fc561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:56:e9:3b:11:2b:da:76:fd:8e:c5:0d:ad:77:
71:a7:2f:b1:e3:e2:05:21:fa:04:4d:71:fc:74:6b:
be:53:de:4d:76:84:46:5e:f5:31:14:f2:75:0c:99:
a2:cb:53:6c:ce:06:54:42:d5:d9:7e:57:9c:81:4f:
2f:2c:d4:7a:50:6b:a9:92:5a:0a:9b:ef:f2:3d:bf:
33:89:a2:7f:0a:19:8e:57:57:60:68:9a:3a:de:77:
f8:41:64:ff:6f:ea:7e:63:0f:18:21:5c:da:d3:ef:
a9:bf:f3:53:ad:75:ef:e6:b7:a8:93:4e:22:59:61:
ff:db:27:cc:82:62:df:d2:75:f8:0b:93:5f:cf:d0:
21:c2:5b:c4:63:40:38:66:43:1e:14:08:48:0f:e3:
73:a6:d5:e8:47:97:1a:16:0e:32:75:6f:6c:4e:bd:
a6:43:06:38:a6:3c:32:f9:5f:d8:80:b5:db:8c:07:
c1:7f:56:7e:78:88:76:fa:0d:bd:8c:c7:fd:3b:74:
6d:26:41:67:5b:0a:d1:a1:9d:3a:e5:54:69:8c:2a:
0d:65:83:18:f9:f6:70:c7:12:63:f3:1c:21:15:74:
da:c3:7f:3a:fc:c7:65:2a:79:1f:43:79:3e:6f:aa:
33:a0:61:f6:10:3e:7a:89:9d:f0:18:de:f0:15:a8:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AB:5A:F9:18:4B:E5:63:72:5D:63:19:05:82:87:12:84:9F:C5:61
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d8:27:61:66:81:8f:65:9e:9d:17:33:3e:7d:e0:56:a8:7b:
57:48:4a:e3:e1:ff:25:24:9b:60:ea:63:45:ba:36:e6:33:65:
a2:00:df:0e:e3:8d:a4:c5:aa:47:e3:ae:17:db:87:02:79:f6:
8f:47:a9:94:73:3a:80:b4:ab:6e:88:c8:91:1e:40:82:f6:e4:
4d:aa:f7:18:7a:5e:98:8b:76:e0:29:54:9a:94:b0:61:41:0e:
a1:e7:cb:01:f8:67:e3:bb:53:da:61:9b:85:03:7e:b9:ca:d1:
a1:71:38:97:8c:5e:22:6c:c7:42:98:d0:47:da:b9:c0:38:38:
5f:03:a1:c9:10:4e:f3:de:74:f5:ec:52:e8:3b:8c:03:b0:56:
bc:4c:51:e9:5b:07:68:5b:20:6d:1d:94:84:9e:cc:94:ee:8f:
fd:a7:34:85:f4:33:dc:c7:6e:02:96:7e:9d:ee:a0:d9:78:5f:
ad:f1:5e:94:68:d0:67:d4:88:d5:e7:dd:07:5a:9f:09:af:49:
48:3b:36:05:86:4b:08:ba:4c:f5:6c:be:ac:ae:9c:a6:52:bb:
d2:87:7b:fb:3e:0e:57:5a:b8:95:bc:85:b3:e3:2b:11:9d:27:
9f:5e:92:51:2f:25:62:43:78:32:4b:ad:70:4b:58:1c:4f:3f:
f3:1e:06:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqQi6kYINL7Z5RJCOAbndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwODIzMTYwMDM1WhcNMjUwODI0MTYwMDM1WjAzMTEwLwYDVQQD
EygyNWFiNWFmOTE4NGJlNTYzNzI1ZDYzMTkwNTgyODcxMjg0OWZjNTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lbpOxEr2nb9jsUNrXdxpy+x4+IF
IfoETXH8dGu+U95NdoRGXvUxFPJ1DJmiy1NszgZUQtXZflecgU8vLNR6UGupkloK
m+/yPb8ziaJ/ChmOV1dgaJo63nf4QWT/b+p+Yw8YIVza0++pv/NTrXXv5reok04i
WWH/2yfMgmLf0nX4C5Nfz9AhwlvEY0A4ZkMeFAhID+NzptXoR5caFg4ydW9sTr2m
QwY4pjwy+V/YgLXbjAfBf1Z+eIh2+g29jMf9O3RtJkFnWwrRoZ065VRpjCoNZYMY
+fZwxxJj8xwhFXTaw386/MdlKnkfQ3k+b6ozoGH2ED56iZ3wGN7wFahu2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWrWvkYS+Vjcl1jGQWChxKEn8VhMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0tgnYWaB
j2WenRczPn3gVqh7V0hK4+H/JSSbYOpjRbo25jNlogDfDuONpMWqR+OuF9uHAnn2
j0eplHM6gLSrbojIkR5AgvbkTar3GHpemIt24ClUmpSwYUEOoefLAfhn47tT2mGb
hQN+ucrRoXE4l4xeImzHQpjQR9q5wDg4XwOhyRBO89509exS6DuMA7BWvExR6VsH
aFsgbR2UhJ7MlO6P/ac0hfQz3MduApZ+ne6g2XhfrfFelGjQZ9SI1efdB1qfCa9J
SDs2BYZLCLpM9Wy+rK6cplK70od7+z4OV1q4lbyFs+MrEZ0nn16SUS8lYkN4Mkut
cEtYHE8/8x4G/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:35:48 2025 by rpki-client