Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: 7UKnBWYnsXskQThRGtZdvydbLQ67hiwJdYo3wJmP8Og=
Subject key identifier: 13:A9:5C:66:55:A6:44:9E:87:98:11:01:F3:E3:C9:FE:8C:26:D0:2B
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 0199FF227ACB0DAF95338E3B00760B628385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 0AA3
Signing time: Mon 20 Oct 2025 01:01:13 +0000
Manifest this update: Mon 20 Oct 2025 01:01:13 +0000
Manifest next update: Tue 21 Oct 2025 01:01:13 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: ttA9XwW4zkv1W2tLRjMMg1r/UZW8GSfLjphBHcEYXtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:7a:cb:0d:af:95:33:8e:3b:00:76:0b:62:83:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Oct 20 01:01:13 2025 GMT
Not After : Oct 21 01:01:13 2025 GMT
Subject: CN=13a95c6655a6449e87981101f3e3c9fe8c26d02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:1d:ea:c4:0a:f6:10:57:03:31:af:cb:6f:
38:b8:7d:a2:4e:90:e5:d2:e0:ef:22:25:19:58:6c:
24:30:b7:34:ce:82:eb:91:fd:5f:22:7e:84:4a:33:
9d:30:b1:4c:bf:df:d0:19:30:23:92:55:ef:29:52:
e7:42:eb:3b:82:ee:eb:cb:aa:4a:ff:c6:61:d5:4a:
79:b0:b3:38:5f:9c:df:18:88:15:90:42:17:4e:6b:
53:3e:46:8f:8d:07:05:b0:78:aa:9f:b3:ce:24:e6:
cf:52:53:90:6f:3e:fd:b1:ec:35:3c:e8:ef:68:41:
81:a7:15:cf:bb:4c:03:cc:4a:af:cd:98:88:a6:93:
2a:8a:f7:84:36:e7:be:c3:1d:e4:b3:39:59:fd:f1:
fa:21:eb:a0:30:81:9d:9b:32:f5:e2:e2:2c:aa:3a:
5d:6b:1e:d9:4b:c2:fc:8a:8e:86:57:b4:d9:f7:26:
17:9a:a2:9f:9d:4d:89:a8:8b:00:bd:5e:0f:58:09:
57:bf:17:de:77:ac:17:05:3b:04:dd:50:59:bc:03:
ea:5b:61:db:71:ed:c5:3e:00:61:86:df:ad:66:9d:
22:2f:87:aa:d6:c5:0b:34:20:aa:1a:97:5c:d3:c6:
7d:d6:09:ac:bd:0b:dc:b8:eb:32:b9:63:50:a3:3e:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A9:5C:66:55:A6:44:9E:87:98:11:01:F3:E3:C9:FE:8C:26:D0:2B
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:49:4d:76:1f:e0:b6:d9:1d:da:8b:b6:59:07:30:66:50:
ba:00:9f:23:18:e6:75:ab:56:1c:b4:3d:b0:2c:cc:a4:fe:95:
39:1b:89:33:2f:7c:47:d3:ac:7b:a1:47:9c:5e:99:6a:27:cb:
b1:57:b6:96:c0:f6:f8:d1:5e:c0:73:8f:34:44:83:14:1f:e6:
d6:3b:9d:8a:6f:ae:2a:b0:af:eb:bf:76:d8:bb:9d:3c:4b:0c:
b4:d2:c9:0f:59:bc:67:67:b3:fb:22:6e:ba:be:0a:81:81:1d:
7c:5b:05:44:55:dd:26:a9:92:22:6e:ca:0e:0a:4f:55:ed:95:
4e:76:a7:28:5e:1b:b6:63:43:fd:32:30:4f:b8:a4:3f:1f:0c:
a3:91:77:fa:25:a5:b5:66:56:69:57:87:81:58:5b:66:7f:d2:
6b:91:3a:2d:c2:f2:a4:1d:15:c8:2d:66:92:1f:ab:2c:f1:a7:
fa:0d:ff:cc:9a:5d:2c:f1:13:57:60:ae:69:fd:4c:28:0b:b4:
bd:9f:a3:df:73:85:fd:d8:1c:e2:68:9c:a8:a0:f4:c7:16:f1:
2c:c5:92:17:a2:8d:48:2e:89:d1:f5:d3:f1:1b:55:1d:07:34:
2c:c0:89:84:c8:50:7a:2e:f3:ab:81:6d:4a:91:bd:24:de:ff:
39:81:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:23 2025 by rpki-client