Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: KWKVQjGSvR6N/EtEWW+5/OCjma2L+l7uWlLCNEPT9UY=
Subject key identifier: 5F:31:4E:60:85:13:30:D0:50:96:9D:2A:F7:62:AB:56:DD:D1:C9:EB
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 0199FBB366FD6DDEB319F3DCF57DAC0188F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 09:01:02 +0000
Manifest this update: Sun 19 Oct 2025 09:01:02 +0000
Manifest next update: Mon 20 Oct 2025 09:01:02 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: VlHw+jcN9kMAPDji5pNsggEX0GaeZIi7i2p8O4CNPec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:66:fd:6d:de:b3:19:f3:dc:f5:7d:ac:01:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Oct 19 09:01:02 2025 GMT
Not After : Oct 20 09:01:02 2025 GMT
Subject: CN=5f314e60851330d050969d2af762ab56ddd1c9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:1d:b1:84:b5:b4:7a:15:22:34:71:ce:e9:
d5:50:20:66:ba:23:f3:79:62:32:4c:40:d1:f1:bf:
60:1b:59:af:04:6d:53:f7:51:1b:51:5f:06:11:67:
02:42:dd:70:be:3f:71:4d:e9:cc:c1:12:5c:3a:27:
ff:77:24:16:b2:26:f2:5c:1c:45:3f:30:54:a4:26:
df:03:d9:2a:45:dd:1e:67:80:55:30:c4:b3:e2:78:
58:6c:54:46:a6:34:c8:11:9c:b4:2e:9c:df:29:d7:
bd:7b:4e:19:0e:91:2c:29:49:12:eb:bc:c9:4c:00:
b4:61:da:d4:2c:42:6f:6b:2f:f8:55:a8:27:7e:ee:
b8:a0:b3:73:4c:e0:a1:2c:c4:8a:e9:4b:fa:ec:2d:
7a:84:ee:94:e2:1d:12:7e:dd:84:d3:da:7b:10:d8:
a8:15:ad:fd:74:9f:ba:87:9d:0c:88:ea:34:4a:be:
58:ba:81:fd:f0:2c:74:13:8b:60:1b:b0:4e:f3:e7:
93:bb:83:0e:c5:38:de:43:af:5f:94:25:05:a8:ed:
c4:0d:0b:63:78:ed:f8:3e:9a:10:e4:4f:03:e4:9e:
7c:03:10:66:7f:94:60:f5:63:14:fd:b5:19:c1:69:
58:88:a1:94:f6:b6:18:00:24:5f:77:bf:8d:df:9d:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:31:4E:60:85:13:30:D0:50:96:9D:2A:F7:62:AB:56:DD:D1:C9:EB
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:80:8a:c1:c5:1f:45:b2:1c:0a:0f:4c:42:38:19:98:b4:cf:
a9:0f:4a:cb:68:e3:7e:9c:d2:99:19:bf:2e:ac:3c:44:16:b5:
0a:9e:22:69:7e:c5:ec:a5:d9:40:26:bf:98:e5:cb:20:6a:0b:
8c:50:0c:7a:bb:65:da:c0:35:87:cd:08:5e:d3:19:f7:50:bc:
b3:67:19:1f:3f:a2:a0:0e:59:80:c9:34:1b:1b:80:bd:74:78:
86:af:72:2c:15:03:36:f4:d7:d2:4d:f3:eb:04:90:fa:fd:d0:
a5:3e:4c:12:c0:14:79:e9:fc:5d:0c:68:78:7e:90:c1:2f:8a:
f1:04:2f:6f:dd:0b:b2:9c:27:cd:a3:15:ab:61:a8:11:2f:cf:
5f:50:6f:dc:59:31:a2:d5:cf:f6:78:fe:2a:58:63:90:7f:ff:
6f:bd:f8:ed:1a:75:46:a0:ec:98:62:ab:d7:09:7b:d5:0c:23:
53:48:d5:86:dc:df:1d:90:70:b1:b8:52:a8:fe:13:5b:ee:5e:
9a:60:b9:bd:5d:4f:ed:1f:ed:cb:34:d8:5d:2b:42:03:b5:0a:
7d:b3:ab:5f:d3:c7:37:d1:04:1d:4f:a8:37:87:f7:96:3b:29:
4c:00:3d:c2:73:c4:58:9a:12:a2:cf:51:c9:f9:a2:7d:74:e7:
70:3b:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:28 2025 by rpki-client