Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
File: SbJERkTEM0jXxQ9OUOdDVumJbb8.mft (raw, json)
Hash identifier: IGpvb/quFB5wIgCvI9Snrn1qpYrTOLiSU49Dlcn2KNY=
Subject key identifier: BB:B9:C7:D6:1D:F0:FE:0F:33:E6:0B:03:A0:C3:9C:C2:C3:E1:91:F6
Authority key identifier: 49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
Certificate issuer: /CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Certificate serial: 0199FEEBB875ACEAACE2C773A99240108910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
Manifest number: 143A
Signing time: Mon 20 Oct 2025 00:01:25 +0000
Manifest this update: Mon 20 Oct 2025 00:01:25 +0000
Manifest next update: Tue 21 Oct 2025 00:01:25 +0000
Files and hashes: 1: 1wuoe06EqKtSedO7NGLRmPTmhGc.roa (hash: /sDFB0I8q5IJW+UJc1pW+YTD5nABqiUh65XbbCjiXPo=)
2: MErMEgT0Mlg4NzXbifAxY_vYJ18.roa (hash: kZo3foZgB/DZe3VgEb3C47cfvC/YSEn388ZX35kgFPI=)
3: RUJrM9R2Q01CiiseZx6BuCkPhi8.roa (hash: ud9fyI+JnGNFQZazgaWgNO5UTDdn2ppqyRqse6KTBD4=)
4: SbJERkTEM0jXxQ9OUOdDVumJbb8.crl (hash: xzY2oKbbc6jggwmzeujWo/g1JULK0X7S49YythHR4IM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b8:75:ac:ea:ac:e2:c7:73:a9:92:40:10:89:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49b2444644c43348d7c50f4e50e74356e9896dbf
Validity
Not Before: Oct 20 00:01:25 2025 GMT
Not After : Oct 21 00:01:25 2025 GMT
Subject: CN=bbb9c7d61df0fe0f33e60b03a0c39cc2c3e191f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:d5:71:e1:43:7d:5f:51:1f:c4:d6:cb:ba:
4a:3b:45:e5:ee:e3:9f:73:49:fa:f3:5c:cd:c3:c7:
44:91:f0:c2:4b:b1:e2:17:c6:43:51:17:2d:30:45:
c7:c9:8b:42:a0:d8:17:2c:8c:1c:75:69:19:d0:70:
ab:3f:e6:7d:ed:24:a0:7b:91:39:25:2d:37:5c:7d:
49:6d:50:4d:e5:f3:08:e2:fc:82:5d:29:f0:a9:95:
0f:cd:f4:a3:51:99:e3:1f:e2:ea:af:9e:5d:56:0f:
3b:02:26:6e:9b:3f:68:a7:0e:dd:30:de:25:1d:25:
06:90:92:6f:28:b3:c8:b9:54:90:37:a2:0d:51:e0:
84:e9:c3:05:14:32:a5:54:78:cf:a5:6e:a8:be:e9:
5c:6d:9e:b4:2a:87:5a:bf:f7:e0:1b:63:14:11:d3:
dd:6f:65:00:21:0e:8e:66:23:a4:29:4e:b6:c8:fa:
9f:e4:e3:e3:18:99:dd:02:24:f2:dd:e4:bb:6f:4a:
a8:34:0a:da:09:56:ce:c5:ac:69:de:de:69:e0:55:
1b:c0:e8:d3:37:7e:31:9f:c9:b5:22:bb:1b:c1:c3:
07:46:fa:93:a4:a7:8f:b1:81:5e:d8:13:e9:e2:94:
6d:7a:fe:17:b9:2a:db:f6:a4:a3:09:30:36:bd:b8:
c1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:C7:D6:1D:F0:FE:0F:33:E6:0B:03:A0:C3:9C:C2:C3:E1:91:F6
X509v3 Authority Key Identifier:
keyid:49:B2:44:46:44:C4:33:48:D7:C5:0F:4E:50:E7:43:56:E9:89:6D:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SbJERkTEM0jXxQ9OUOdDVumJbb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/64cdbd-c851-4b35-bb79-753d969a0702/1/SbJERkTEM0jXxQ9OUOdDVumJbb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:9e:fe:1e:e6:4c:78:67:72:03:c7:f9:c1:d7:ad:f7:53:
4e:d7:fd:83:74:fe:d1:59:f8:f4:69:2e:64:2b:09:f7:7a:48:
e8:ea:66:c5:e8:ee:30:1c:0c:6e:41:75:55:44:53:d5:07:cb:
68:2d:9f:73:11:32:83:26:c6:9d:a7:d4:b5:ba:77:c0:8b:7f:
ca:21:4b:ff:b5:0c:a6:78:34:6b:db:31:09:38:d2:56:df:42:
09:b3:d0:af:dd:3a:ce:7b:13:d2:15:69:13:ba:e4:ed:ee:1e:
ff:ee:2d:42:c2:9a:cd:3a:6f:7d:1c:2a:a4:a5:d2:ab:0a:ad:
81:c0:67:1b:dd:a0:ce:38:8e:e7:4d:1c:70:bc:de:67:b7:ba:
ce:4d:5c:c2:c8:10:2b:35:fe:9c:30:38:05:23:f5:ed:6d:bd:
74:b3:51:60:89:c9:4f:51:d2:9d:bf:87:3b:5b:41:c1:a7:fc:
da:da:ce:77:b0:59:8f:02:ee:47:14:42:26:43:e6:29:57:5d:
fd:61:fb:37:3d:a4:14:87:33:03:ff:2d:77:bd:8e:e2:93:9f:
18:6b:d6:c3:14:1a:7b:24:c1:0c:51:3e:31:ce:4b:8b:4a:f5:
49:1e:87:a8:ca:18:b8:76:41:f9:1c:0a:f1:a5:20:d3:c9:04:
ab:d2:89:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:36:48 2025 by rpki-client