Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: b7L49uv/3a5LnE4vv+FRC9w9jt4G+PTfPaKaaLfviWk=
Subject key identifier: 97:F3:FD:2F:8F:E8:50:38:22:5D:CF:16:CC:17:6D:31:07:B2:85:F9
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 019A52D2500244CB5A3372E6C09E0567E6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 12D1
Signing time: Wed 05 Nov 2025 07:01:45 +0000
Manifest this update: Wed 05 Nov 2025 07:01:45 +0000
Manifest next update: Thu 06 Nov 2025 07:01:45 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: PmJmVY2p3A/V+/fLyXRL+1vJSb7iOId/2ItCSA8yyyE=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:50:02:44:cb:5a:33:72:e6:c0:9e:05:67:e6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Nov 5 07:01:45 2025 GMT
Not After : Nov 6 07:01:45 2025 GMT
Subject: CN=97f3fd2f8fe85038225dcf16cc176d3107b285f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:b4:1a:a3:3f:f7:b5:1c:76:7f:c8:35:19:
5b:5c:44:1c:25:1b:32:56:d9:4c:43:02:a0:d4:1c:
9a:ac:bf:c8:95:90:79:fd:61:77:8d:04:60:51:0e:
56:95:f5:23:f5:eb:ad:b1:dd:0e:88:3c:3c:ac:bb:
a1:1f:40:f4:ab:a4:2e:74:a2:03:e4:4b:5a:94:4b:
2d:0f:e8:59:c4:65:63:fa:e1:8b:f4:56:03:f0:22:
f3:00:27:ac:24:03:8f:16:94:24:11:30:a2:12:b6:
98:30:36:94:4c:80:3e:a3:11:1a:2b:34:2a:5b:39:
16:4a:15:ff:ae:4d:f0:79:9e:76:8c:c7:43:ab:88:
23:6b:f6:58:b9:c7:5a:f0:1f:af:aa:84:f0:f4:d9:
71:db:9d:47:f5:42:63:8b:84:dd:fc:30:15:a0:a7:
4c:3c:87:5b:9f:b9:a9:85:9b:31:35:fe:c3:6c:fd:
c1:e5:4e:cd:7c:66:52:9e:3e:25:a3:fa:96:5d:d0:
4e:5f:af:86:e4:fb:bd:9f:45:46:dd:40:cc:77:c4:
86:80:ce:a1:da:5b:12:74:8d:00:a0:7e:83:fe:01:
2b:39:af:f6:3f:6b:84:e2:87:b5:5c:4b:15:3d:ed:
f9:fa:ea:df:1b:db:1c:26:95:0a:f4:85:25:7d:fb:
b5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:FD:2F:8F:E8:50:38:22:5D:CF:16:CC:17:6D:31:07:B2:85:F9
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:9e:87:29:e0:4f:06:53:01:a3:5b:e5:5d:fb:3f:f6:1d:12:
43:61:af:e0:de:8b:e7:52:f1:42:ac:2f:18:45:a2:66:24:ec:
84:7d:50:8f:77:99:62:dd:12:5a:e0:b5:ac:81:c8:38:e9:00:
bb:48:7f:b7:54:a8:d2:d8:93:9e:df:1c:b1:00:7a:07:84:ff:
f9:73:4b:4a:7d:ff:83:86:ba:6a:18:59:16:ef:1b:bd:20:5c:
f1:b3:51:a4:e1:a7:45:ea:7b:6f:2c:a0:6f:84:8e:f4:c9:f9:
7a:5c:23:63:a7:42:fa:fb:a8:f5:c5:33:9f:0c:84:c7:f9:9e:
c5:31:3b:86:f4:89:30:fc:c9:24:95:76:71:8c:3c:c6:b2:1d:
ab:ba:53:f6:2a:d8:ba:34:b3:77:f1:09:22:96:5a:4a:e9:05:
72:96:85:c7:b1:60:ce:2d:cc:bb:75:ed:45:a8:30:3a:f7:23:
84:00:51:dd:8f:79:e0:39:35:e4:36:5a:9e:1e:48:39:a6:db:
10:f1:0f:ee:97:50:63:7e:c3:e0:ba:bc:c0:54:25:09:b7:65:
5a:c6:db:77:ef:05:79:b9:d9:c3:3f:ce:3c:34:7f:89:b4:8a:
51:c9:40:35:57:ff:fc:e2:f7:0a:57:ff:77:4f:fd:90:3d:d3:
0a:6d:0d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:50:00 2025 by rpki-client