Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: OSs+pxoAZixCxnvWS05OYGmk+Aynnip9848iU/876x4=
Subject key identifier: AA:8B:D4:3D:06:B0:AD:5B:27:2A:A4:3F:9B:EB:8C:00:7D:14:DF:C2
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 0199FCFDA6A04053684E34D1EC866C765E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0D26
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: +CpBb/trMZXh7Ym3bR3Ez+QnkwR8+Ye/SvEdDNwiXlU=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:a0:40:53:68:4e:34:d1:ec:86:6c:76:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=aa8bd43d06b0ad5b272aa43f9beb8c007d14dfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:40:cd:c2:5f:93:d8:5d:98:d2:f4:fa:6f:4b:
45:3e:6f:38:cf:25:17:7d:85:1c:5e:a3:8e:01:8b:
31:d4:c5:ea:3e:70:09:23:76:e9:fe:b7:68:a0:88:
52:74:a5:46:db:87:ea:dc:c7:5c:6f:b2:8f:7c:11:
ca:03:f2:f8:a4:92:25:b4:ec:ef:82:3f:89:58:f6:
d8:a2:b8:04:fd:1b:c0:66:1d:50:f8:ba:4b:fb:f4:
f5:b6:99:be:1a:3c:c3:2b:5d:94:78:19:4b:4f:bc:
ef:b9:ff:cf:fd:e2:d5:d1:56:1d:fc:bf:13:4f:40:
79:90:f5:89:3b:32:91:42:2a:8f:cc:eb:9f:65:58:
64:ac:27:e3:fd:2f:06:ab:60:b8:51:44:fb:b4:5b:
b6:db:ec:19:45:a1:dc:b1:d7:76:38:af:2e:36:5b:
e0:67:08:8e:89:a1:6c:51:7c:c1:c8:8e:7b:8b:77:
1e:8e:35:dc:22:45:fd:d2:97:3c:68:54:44:a0:ca:
34:94:88:65:a3:7b:73:7a:21:8d:01:31:eb:23:aa:
fa:65:9e:a3:67:b7:b9:02:18:c3:ef:e7:b5:75:ff:
db:e8:d4:b2:9e:30:87:c8:08:63:c7:b1:1e:0a:d6:
73:33:ac:a3:13:2f:57:9c:1d:79:a8:39:e7:8d:35:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:D4:3D:06:B0:AD:5B:27:2A:A4:3F:9B:EB:8C:00:7D:14:DF:C2
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:26:23:d5:c2:49:bc:d4:e3:76:f9:57:02:36:08:2c:22:df:
75:61:39:44:2e:ea:ea:5b:86:e6:12:d6:15:cf:68:c8:57:0f:
d7:94:29:a3:be:12:25:d8:54:07:5b:e7:08:6d:17:7a:4c:85:
93:4c:61:18:2d:00:87:7d:cc:73:55:e1:16:f2:80:c5:eb:5b:
39:1f:f8:9b:c3:ee:90:13:24:e5:84:31:d2:c8:a6:d7:d2:56:
ed:fc:ee:ba:14:97:a3:c4:56:4b:b2:5b:03:4f:73:16:e4:ca:
2a:69:66:24:ab:1e:7c:54:d0:70:14:5b:2f:18:8c:7d:77:f2:
15:73:17:39:1c:00:00:26:d3:5c:c5:3a:34:e0:5e:b0:9d:03:
3d:dc:00:f8:c6:d5:24:1d:53:a3:2b:e5:02:b7:a8:98:d1:1e:
dc:ac:d4:67:37:f8:79:f1:49:fe:e8:78:5f:e2:d0:3a:bd:17:
e2:8d:9d:21:00:cc:3b:47:92:39:db:4f:11:80:09:7e:7d:f8:
d6:8c:56:1c:8a:0a:a0:ab:81:45:6e:86:13:62:f8:e0:9a:8b:
1f:1f:7c:4d:23:b6:0f:5d:6c:07:97:63:9f:81:9d:2b:f4:28:
d2:e0:36:3b:57:1c:b0:42:91:e2:f4:31:13:38:2c:87:60:c4:
d7:05:3b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:43 2025 by rpki-client