Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: 1Bk+0c1e9NiDHXeflAPnLlOq5LTi5bOYX4SSUy3odmk=
Subject key identifier: 9F:9A:D6:67:19:4E:12:88:54:B4:52:D9:C2:23:A8:08:D4:FA:C3:85
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0198D5F1D2AA9629A85F9007E5F8A8366567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: V9xA4SOZztx5H0/8Rgays+2oBrszk3652MPnyctUKZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d2:aa:96:29:a8:5f:90:07:e5:f8:a8:36:65:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=9f9ad667194e128854b452d9c223a808d4fac385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:63:4c:dd:ab:c1:d9:cb:de:17:d6:83:b2:97:
ee:cb:36:09:f0:e7:1f:ca:d7:9b:6c:ad:a3:ee:cd:
3f:45:e5:a9:c0:88:2f:98:16:8c:d1:7f:bc:26:ab:
b7:27:a7:f0:30:ed:df:af:3a:21:59:fc:99:c2:b0:
e7:8c:3a:88:d6:4a:14:47:a7:47:0a:72:ae:2b:65:
4c:e1:0b:77:a3:48:74:6c:db:ee:15:47:62:df:50:
16:23:09:b7:3c:91:11:11:e0:de:bb:25:a9:a7:2b:
24:a3:b2:db:45:f5:86:fd:14:75:60:f4:26:2c:9a:
26:cd:e1:8e:cc:d6:b8:a5:67:1e:f6:da:83:8a:51:
1b:d2:33:1c:b0:09:29:9e:f8:fe:b7:26:00:e6:db:
89:a4:30:cb:1e:b2:e8:ce:ea:30:bc:ff:4b:99:54:
c6:2c:2b:af:9b:3e:ef:eb:04:53:70:ab:c8:b9:17:
bb:d4:bc:0d:9b:6b:c4:77:b8:4d:10:ea:61:a5:a0:
88:91:c3:23:40:2a:89:a8:ce:92:9e:e6:c0:40:1f:
14:4e:e5:18:6d:0c:25:a1:68:64:52:56:8a:da:1c:
ab:5c:bf:04:1c:14:27:25:15:b3:97:6f:cb:54:6f:
f3:a3:24:3c:f2:b8:d0:7c:9c:10:1f:df:7e:2d:1a:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:D6:67:19:4E:12:88:54:B4:52:D9:C2:23:A8:08:D4:FA:C3:85
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:2f:2a:85:85:ad:51:4f:60:fc:f5:0d:aa:ca:7e:76:00:
98:eb:d0:e6:23:fe:9c:42:ed:b3:b2:15:de:d4:30:4b:7a:1b:
12:02:47:33:e6:07:21:17:e0:fe:87:d9:2a:1b:90:66:4b:f8:
0c:5e:95:3c:89:22:b8:fb:82:17:d5:33:1d:2f:11:4f:b1:06:
7c:98:6a:a0:ea:20:70:c7:01:19:5c:d7:4d:b9:d1:a4:d5:d0:
e9:e5:9f:2f:c4:49:80:22:82:02:a9:1e:30:a5:e6:0b:6e:85:
c6:35:64:eb:e5:2c:e8:75:b1:67:a6:ba:91:7e:e9:c0:05:50:
b8:67:68:7a:bb:7e:ff:6e:67:87:37:66:52:44:90:f5:0a:c7:
db:97:e5:cc:e7:41:d7:05:0e:c1:f7:c2:1d:9b:dd:a8:f8:03:
7f:cd:88:d8:1c:cd:61:63:ff:ed:d2:46:d5:66:10:ba:c7:50:
77:3f:84:55:d6:2f:be:37:83:ad:19:6a:d8:f1:e4:fa:56:26:
87:7d:f1:60:fc:1f:47:d6:ae:c0:1e:a6:55:6b:cc:ac:3d:e9:
cf:d5:d3:9f:b3:4f:c2:e1:ed:1f:4e:d8:96:e6:88:ba:c3:25:
0e:59:9b:ce:8d:7e:62:ca:fb:50:8e:2f:3b:45:30:22:58:1e:
14:7a:e3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:48:33 2025 by rpki-client