Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.mft (raw, json)
Hash identifier: RT+QhkX1wBXRGJW9bkylU7MjOekoFHSBY+a6/zOb65M=
Subject key identifier: 54:75:AB:2E:FD:01:EE:99:69:C2:11:03:E2:CD:8E:DC:BF:EE:8D:D1
Authority key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Certificate issuer: /CN=481571cab83b339c86091ec747c2135fce4f6587
Certificate serial: 019A006BED8EDF0CA65F1068783140FC5A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
Manifest number: 1588
Signing time: Mon 20 Oct 2025 07:01:04 +0000
Manifest this update: Mon 20 Oct 2025 07:01:04 +0000
Manifest next update: Tue 21 Oct 2025 07:01:04 +0000
Files and hashes: 1: SBVxyrg7M5yGCR7HR8ITX85PZYc.crl (hash: 5YwmyDSbE1UJgNnt7/IT7M9RaWWFNJLdzZaJslR6cBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:ed:8e:df:0c:a6:5f:10:68:78:31:40:fc:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481571cab83b339c86091ec747c2135fce4f6587
Validity
Not Before: Oct 20 07:01:04 2025 GMT
Not After : Oct 21 07:01:04 2025 GMT
Subject: CN=5475ab2efd01ee9969c21103e2cd8edcbfee8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:c1:57:20:2d:f6:e3:07:e9:d4:7e:f6:41:
e8:1f:f8:6a:dd:ea:cd:2b:5b:60:b6:3c:26:aa:95:
04:9a:88:0c:a0:23:8a:4b:c6:fc:53:42:b6:87:61:
14:15:72:89:53:85:c8:58:42:f8:bb:6f:1c:f6:1c:
71:04:8e:10:54:1f:bd:d5:56:11:33:7a:a4:c7:2a:
55:52:60:fe:e6:2f:c2:20:73:42:fd:10:7a:73:df:
95:23:a8:18:3a:5e:aa:41:83:6f:83:26:5e:ce:fe:
0c:e2:5b:bf:ab:c4:4a:de:08:0f:12:00:a2:6c:5b:
d4:ec:3c:17:b8:9b:d8:3e:5a:f7:b2:b7:36:77:8d:
73:00:ab:da:8e:4c:86:2c:94:24:f1:a3:a6:4b:e6:
fe:f1:d5:91:70:2e:a3:be:25:ec:a0:ed:aa:43:76:
f5:f2:35:0a:16:25:40:e8:b3:f3:14:3d:16:01:6f:
b5:57:5a:67:eb:db:63:46:c6:25:26:2d:14:4e:8a:
47:47:1d:08:ad:f6:37:a6:11:44:03:1b:88:86:f5:
ad:85:8d:23:94:34:93:a1:43:77:6f:54:60:b7:d4:
5e:77:96:cb:cf:de:04:06:50:5e:9d:05:55:3d:73:
fc:3e:43:97:59:34:0d:9c:97:8d:34:6f:94:b8:ae:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:AB:2E:FD:01:EE:99:69:C2:11:03:E2:CD:8E:DC:BF:EE:8D:D1
X509v3 Authority Key Identifier:
keyid:48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:16:de:39:d7:6e:ff:4a:fa:bd:51:f1:72:b8:20:c9:ff:41:
5d:d0:b0:0a:40:41:68:c6:47:d0:ce:89:82:6d:39:78:38:78:
a4:cd:f6:49:42:fc:cc:44:96:c3:bb:9f:d3:dc:1d:96:c8:4e:
2c:7d:27:b7:e2:ad:e5:3e:6a:6d:3b:63:ce:a4:06:01:25:41:
6d:69:29:e9:c5:38:41:59:8f:91:45:5f:33:39:b2:18:cd:73:
70:34:e5:1a:26:db:f2:58:54:79:ea:cd:a5:6a:84:a6:7c:b8:
3d:ef:d5:fa:84:2d:23:75:0d:2b:a1:a8:45:32:e5:2d:59:0a:
21:6b:3c:0a:08:21:12:e8:d5:9b:19:d7:15:a1:e8:a1:5c:f1:
83:fc:b6:d0:96:ee:30:ab:f5:aa:23:5a:a8:ae:7a:71:4c:fd:
30:43:44:0b:f2:9e:c2:96:ad:5b:6d:ec:75:ad:5c:56:38:d6:
02:3b:bd:dc:96:94:bb:13:3c:9a:f8:10:71:9a:ab:5c:a2:bb:
33:fb:7f:78:e0:67:21:63:f9:1a:d6:c7:bc:61:25:50:bd:b5:
ca:19:4d:61:82:b5:f1:9c:ae:53:fc:d6:fc:24:39:a3:c3:dd:
e6:8d:59:f1:ed:9d:e9:b9:75:90:9d:7c:f7:43:ed:4a:9e:7e:
35:de:ee:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa+2O3wymXxBoeDFA/Fo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MTU3MWNhYjgzYjMzOWM4NjA5MWVjNzQ3YzIxMzVmY2U0
ZjY1ODcwHhcNMjUxMDIwMDcwMTA0WhcNMjUxMDIxMDcwMTA0WjAzMTEwLwYDVQQD
Eyg1NDc1YWIyZWZkMDFlZTk5NjljMjExMDNlMmNkOGVkY2JmZWU4ZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvTBVyAt9uMH6dR+9kHoH/hq3erN
K1tgtjwmqpUEmogMoCOKS8b8U0K2h2EUFXKJU4XIWEL4u28c9hxxBI4QVB+91VYR
M3qkxypVUmD+5i/CIHNC/RB6c9+VI6gYOl6qQYNvgyZezv4M4lu/q8RK3ggPEgCi
bFvU7DwXuJvYPlr3src2d41zAKvajkyGLJQk8aOmS+b+8dWRcC6jviXsoO2qQ3b1
8jUKFiVA6LPzFD0WAW+1V1pn69tjRsYlJi0UTopHRx0IrfY3phFEAxuIhvWthY0j
lDSToUN3b1Rgt9Red5bLz94EBlBenQVVPXP8PkOXWTQNnJeNNG+UuK7fqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFR1qy79Ae6ZacIRA+LNjty/7o3RMB8GA1UdIwQY
MBaAFEgVccq4OzOchgkex0fCE1/OT2WHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDct
NmYzOWNjNjcyMmMyLzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lMWMyOWEtYTkzNi00OTBiLTk2MDctNmYzOWNjNjcyMmMy
LzEvU0JWeHlyZzdNNXlHQ1I3SFI4SVRYODVQWlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhbeOddu
/0r6vVHxcrggyf9BXdCwCkBBaMZH0M6Jgm05eDh4pM32SUL8zESWw7uf09wdlshO
LH0nt+Kt5T5qbTtjzqQGASVBbWkp6cU4QVmPkUVfMzmyGM1zcDTlGibb8lhUeerN
pWqEpny4Pe/V+oQtI3UNK6GoRTLlLVkKIWs8CgghEujVmxnXFaHooVzxg/y20Jbu
MKv1qiNaqK56cUz9MENEC/KewpatW23sda1cVjjWAju93JaUuxM8mvgQcZqrXKK7
M/t/eOBnIWP5GtbHvGElUL21yhlNYYK18ZyuU/zW/CQ5o8Pd5o1Z8e2d6bl1kJ18
90PtSp5+Nd7uyA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:12 2025 by rpki-client