Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: zfa4NIHssISDNKmMOh9zM9rbgZMnZwkDXds/S8CXtcY=
Subject key identifier: 88:30:72:71:E4:22:AA:3E:45:F5:12:88:0F:B8:64:6F:97:05:0A:BC
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0197B632D315ECD091D94175E38C8021A431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: jAY918PhFXfVu9eg/dlRReFwCXkDuVt//CeAvlTlwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d3:15:ec:d0:91:d9:41:75:e3:8c:80:21:a4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=88307271e422aa3e45f512880fb8646f97050abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f8:1b:e0:90:91:c6:35:9e:12:05:01:c3:be:
fe:88:36:d3:9c:da:05:32:f7:84:b8:08:72:67:ce:
03:e3:3b:b0:1c:06:a6:33:a5:8a:ba:83:6b:fe:fa:
d3:64:ec:88:2d:41:aa:9c:09:92:8d:46:b5:68:a3:
62:dc:c9:02:ae:3f:cc:fa:8e:7b:46:cc:7e:c2:72:
6a:b0:af:f9:51:c9:f8:15:38:37:86:c6:15:6e:bc:
7c:4e:50:b7:98:9f:76:c6:5e:49:67:e6:05:fe:e6:
d1:3a:4d:e3:0b:e1:d5:b2:e7:a6:e9:a9:b2:db:b5:
bb:ab:0f:3b:7d:96:9f:15:bb:90:22:3e:dd:71:04:
83:be:bf:4b:3b:29:12:87:63:ca:e9:01:57:6c:17:
d0:f2:ca:66:82:ac:76:c7:48:e8:0d:a3:dd:bf:6a:
de:72:e6:cb:c6:72:ee:ae:e7:e9:5f:1f:d3:24:03:
e5:5a:f1:ca:ef:28:3e:c1:f1:8d:12:ad:b4:47:3f:
fb:9b:c5:4d:53:e5:eb:95:ff:be:fb:8a:56:57:82:
e3:06:1c:67:5e:3a:87:96:31:a0:f5:d8:09:d2:3d:
22:96:a2:c6:14:17:28:ad:79:ae:6c:ba:ab:07:ea:
46:a8:72:eb:fb:b4:d3:18:88:81:d9:c0:85:06:a7:
05:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:30:72:71:E4:22:AA:3E:45:F5:12:88:0F:B8:64:6F:97:05:0A:BC
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:be:ec:b6:61:1b:ee:03:4d:60:30:af:e6:cc:c6:1c:6f:2d:
e3:e0:bd:78:57:35:8f:29:9d:21:aa:2c:3d:ea:98:60:5d:3d:
cf:5d:8d:bd:ba:48:07:b1:a8:4a:29:db:be:97:93:5e:d6:61:
ac:7d:83:bf:8f:ef:ca:60:c0:fb:3e:02:d7:5b:48:ab:30:1c:
16:d9:39:a1:be:35:5a:1a:18:9d:8b:b4:f3:54:a2:83:1b:86:
4d:a8:8f:ca:b8:0a:79:7f:df:35:b2:a6:a9:a4:38:62:0c:2a:
4d:75:aa:be:67:8f:0d:38:c9:95:d5:7c:e6:e0:60:9d:0e:4a:
77:ad:7c:ee:53:fa:bd:bf:57:75:63:aa:c4:18:c0:e6:19:62:
3b:fe:49:3c:ff:76:d7:27:13:f9:83:a4:cc:d8:e7:05:f3:eb:
f2:0a:25:94:e4:72:b9:69:73:0e:97:de:26:d9:50:a0:cb:fe:
31:a1:aa:5a:b0:07:19:71:c7:83:88:88:21:11:25:e8:6c:06:
a0:b7:a1:76:af:9a:ca:95:24:3d:73:59:11:c2:74:26:20:15:
75:0e:f8:7f:59:cd:c4:b2:12:4c:9b:99:a5:fb:4c:d9:54:12:
00:6f:70:6e:78:d1:6d:0f:89:9e:68:10:7d:77:f1:67:50:b6:
29:8a:f9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:57 2025 by rpki-client