Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File: sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier: M4nFyaienDxI2ewf4hmfyxj7S6CIu4xzHoHDpENzgbA=
Subject key identifier: B9:6A:28:DF:D6:E3:F7:7B:E9:70:7F:86:CA:A1:83:4E:23:25:A3:EE
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial: 0198D73B668C0EB7A3E90FA5744C96AB490B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 14:00:51 +0000
Manifest this update: Sat 23 Aug 2025 14:00:51 +0000
Manifest next update: Sun 24 Aug 2025 14:00:51 +0000
Files and hashes: 1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=)
2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: DHZOBpH5gnANNJnFq7Dr2lmRVAYv72ndxD3JyNt8uq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:66:8c:0e:b7:a3:e9:0f:a5:74:4c:96:ab:49:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Validity
Not Before: Aug 23 14:00:51 2025 GMT
Not After : Aug 24 14:00:51 2025 GMT
Subject: CN=b96a28dfd6e3f77be9707f86caa1834e2325a3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:cb:36:c4:6a:bf:ed:2c:31:c9:b3:ee:86:
8c:cf:bc:4b:85:99:8d:4f:d4:ea:c0:8a:a3:0d:8a:
fe:d3:f5:5c:e8:12:38:ad:85:cd:6a:df:a4:00:41:
33:43:65:e5:7d:f7:be:dd:cb:74:2c:37:e6:00:cd:
bd:04:ab:51:a9:1d:80:7a:51:ff:bc:38:b8:79:89:
44:63:25:c2:b8:59:de:69:94:b4:21:8f:f6:e1:16:
dd:e5:2f:69:1e:02:d0:a5:d1:10:25:d5:c8:75:1f:
69:0e:58:83:85:e5:5e:91:ce:43:2a:c3:a5:3c:02:
44:7e:32:8d:8d:42:c5:51:9a:88:02:c2:8e:fb:78:
b0:c6:db:ce:2e:b9:da:b7:dc:ac:37:5b:84:51:2b:
13:33:82:19:3a:b4:bf:ee:3a:06:11:07:b7:eb:d5:
0c:d4:83:c5:5c:12:be:61:92:30:0e:a4:90:dc:2b:
87:74:6e:9d:e4:22:df:70:8f:4f:9a:6b:70:4b:bd:
1c:21:82:5f:9e:69:a5:e0:d7:bd:60:3b:b2:ce:70:
99:61:e7:3f:f9:85:ed:a5:07:92:9f:c3:1f:6f:e1:
f3:60:1c:97:34:d8:74:2d:8f:0e:d0:7f:ee:ba:0e:
85:c5:5b:b4:1b:38:97:ec:6b:a6:f6:59:d4:dc:f5:
72:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6A:28:DF:D6:E3:F7:7B:E9:70:7F:86:CA:A1:83:4E:23:25:A3:EE
X509v3 Authority Key Identifier:
keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:29:cd:72:50:71:6c:dd:2a:65:25:69:91:89:6d:63:a4:1f:
c2:e6:70:a2:d5:b2:79:e7:35:a5:74:98:56:b1:4f:ee:85:d4:
73:3f:41:af:ff:f4:84:37:41:d1:8c:9d:30:3f:f3:25:3e:a2:
03:d7:1e:7a:ff:0f:7b:78:b2:0d:dc:0d:72:97:56:88:a5:48:
7d:c2:3d:9d:72:d1:8c:9d:4a:7f:c4:30:51:ca:7b:34:a6:18:
7c:4b:0f:a9:98:ea:ed:fc:74:6f:a1:65:0d:1b:3c:c2:b6:24:
30:9c:65:9d:ca:f0:39:43:a1:f0:f8:1c:c2:c1:f2:cc:af:4b:
d1:0c:cb:43:3c:09:8b:e6:f7:ae:8b:75:e6:e5:8f:07:fb:cc:
42:f0:29:e5:c5:51:88:f7:9b:66:71:9c:3c:b3:e3:09:44:72:
a1:66:f5:6f:0c:26:15:31:9b:14:67:8f:9f:a5:a4:ed:ee:ac:
92:37:85:e7:ae:d5:2b:ee:ec:cb:48:b0:85:65:ab:22:3a:11:
ca:8b:ed:b1:5f:21:2a:3a:3b:8d:c0:7a:37:75:56:66:0d:6a:
7e:b6:39:37:59:64:08:0b:c2:23:c2:72:fe:de:cd:63:9c:1d:
40:91:18:44:55:a0:8d:d3:df:99:46:da:13:b3:f8:be:1d:ce:
4a:bb:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:05:02 2025 by rpki-client