Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: YjK3AfQk9tRGHFMJgoPPoQPVi8bw+rh8+qrj2tZmXdU=
Subject key identifier: 66:45:04:96:50:1A:70:E8:49:C2:EF:CD:85:D6:97:80:49:93:04:E2
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0199FB7CAF5B494E5A4BD93D9FE0AD09884C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: DA8otA7cucmeoMrEomwqVxnXTk+WDs3cDsqJvd2+094=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:af:5b:49:4e:5a:4b:d9:3d:9f:e0:ad:09:88:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=66450496501a70e849c2efcd85d69780499304e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:88:f2:bc:f9:b7:12:51:96:2d:57:47:6a:
f5:d4:45:92:e7:dd:20:90:ae:bf:94:83:e4:4b:c5:
47:18:af:4a:72:41:e1:c3:a1:3a:fb:dc:1c:03:1f:
f9:94:11:74:9b:19:a0:c1:b7:da:f1:b8:a1:5b:4e:
7e:ad:85:19:07:99:f8:fc:74:be:37:3d:21:05:e0:
31:72:b3:9e:80:ac:3b:6f:5b:da:3f:7f:99:1c:61:
da:5a:a1:99:97:3a:a3:86:11:48:df:cf:1c:4b:1d:
c8:0e:bf:9b:dd:e5:bd:59:b1:02:e2:9f:dc:37:41:
81:73:b8:ff:62:70:75:10:34:f4:71:cf:ca:ed:43:
72:95:ff:79:bf:d5:eb:4f:1f:5b:c8:c9:83:0b:8b:
61:bb:52:05:ca:37:57:62:98:a7:49:4f:21:c3:e1:
16:c4:b1:45:be:ca:43:18:5f:8b:ba:39:2d:49:5f:
f5:f4:77:af:bb:91:08:c9:a7:eb:36:4b:e4:95:6a:
ae:e0:81:03:4f:1c:a2:57:4a:fe:c8:0e:7f:cd:f6:
f6:f8:fa:e8:37:c5:3d:ca:42:3e:8d:fe:dd:bc:36:
84:61:df:ab:07:fd:83:eb:b1:ea:a7:97:bd:34:c8:
4e:c6:4e:2f:db:0a:cc:25:7b:a9:d4:b2:00:c3:10:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:45:04:96:50:1A:70:E8:49:C2:EF:CD:85:D6:97:80:49:93:04:E2
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:77:38:bb:63:6b:a8:c5:e1:9d:0e:e3:a5:c3:4f:fe:6b:6b:
22:b0:1b:ba:40:62:dd:2a:97:19:11:eb:69:29:80:18:8e:b0:
b1:b4:9d:2b:98:6a:b9:26:46:8e:ab:95:3b:55:8d:53:b4:c9:
c7:22:a7:27:c2:24:89:90:9c:c8:fa:c7:df:10:3d:92:1a:a6:
51:d7:62:fa:8b:8e:db:c9:84:8e:bc:30:b9:3e:7e:f2:c9:29:
f5:d5:4b:9d:35:5b:49:04:ce:7d:99:85:2f:f0:7d:47:cc:64:
98:4b:9f:d4:4b:83:0e:f8:90:26:43:62:09:cf:61:38:b3:fd:
8e:e6:09:b4:84:a6:dd:04:14:80:6a:3b:29:48:ea:f1:2b:30:
95:8a:ed:e0:5f:52:8d:96:ae:f1:03:0c:bf:39:7b:6c:cd:d2:
aa:a6:ed:97:55:89:8e:d6:1c:4d:f2:bc:c8:80:f8:a9:66:6c:
57:19:07:54:62:51:b9:f3:8f:5b:52:bf:82:1d:51:ab:ed:f6:
e9:0a:38:ae:e2:09:c5:8c:29:49:39:29:ab:ee:69:88:05:f1:
d0:1d:4f:97:5a:51:6a:43:6f:2e:24:37:ef:6c:0b:72:12:66:
17:f9:c0:9c:bb:8e:26:47:ef:9e:91:dc:70:96:92:57:fc:bb:
9e:be:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:36 2025 by rpki-client