Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: dTwCD3Fa7ApXl8gMWUaiinhNlgaGSd98HuF06WQSBS8=
Subject key identifier: A1:08:67:8F:16:33:93:51:CE:01:2C:9A:19:F4:AC:99:28:47:E6:37
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 019A51874408FFF9EED2E795F3B792106432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 15F9
Signing time: Wed 05 Nov 2025 01:00:10 +0000
Manifest this update: Wed 05 Nov 2025 01:00:10 +0000
Manifest next update: Thu 06 Nov 2025 01:00:10 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: 1JMdC+v9k7UitV6F9Hh8O12rRgiHb1jxvIG8pDt80ck=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:44:08:ff:f9:ee:d2:e7:95:f3:b7:92:10:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Nov 5 01:00:10 2025 GMT
Not After : Nov 6 01:00:10 2025 GMT
Subject: CN=a108678f16339351ce012c9a19f4ac992847e637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:01:3a:c9:62:51:2b:50:c8:52:83:8e:69:
cf:60:7a:90:74:2c:7a:b6:0d:f9:f3:75:58:44:03:
ec:80:20:e6:3e:ce:0a:16:e3:93:04:e5:e1:fa:b1:
e9:10:5d:ee:9c:d9:47:9e:fe:e9:6b:21:40:14:11:
84:af:6a:b9:eb:c4:d4:9f:75:b4:5c:fd:38:64:58:
08:05:72:a0:ec:7c:ec:8a:82:d4:68:f1:49:03:b7:
fb:86:42:18:1c:c6:ef:9c:53:21:c9:bd:44:e8:e3:
42:52:78:f2:e3:d9:64:c1:3b:2b:f6:d4:b0:8e:69:
40:2f:44:07:70:37:34:83:d7:c2:1c:cf:f4:e9:0d:
07:de:8b:aa:4b:b7:94:bf:e3:56:b7:76:5d:92:3e:
93:14:a0:fa:f1:44:e4:99:d6:86:f1:fd:7b:b3:3a:
11:14:6b:aa:05:f5:0b:f0:14:14:94:d9:84:a7:c6:
8d:59:de:33:c2:ce:eb:e2:32:03:4e:62:a7:24:83:
dd:bd:d9:82:2c:d9:b6:1f:e4:d4:89:9a:15:c5:76:
d3:2c:6b:63:ac:e4:70:c2:5f:03:52:aa:0c:7e:30:
b0:f4:62:c0:39:26:97:06:31:6c:dc:a8:50:d6:74:
04:04:c0:17:48:ea:55:d0:ed:b4:fe:3c:18:93:38:
28:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:08:67:8F:16:33:93:51:CE:01:2C:9A:19:F4:AC:99:28:47:E6:37
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:bd:34:af:61:24:b3:a6:46:5b:1e:ed:dc:a7:4b:76:6e:
0d:cb:86:77:b5:5d:02:ae:71:b7:f8:ec:7f:30:d7:87:34:ef:
96:96:e5:39:37:90:76:fa:c2:b1:de:97:b3:9f:d0:65:97:30:
db:db:75:19:50:d5:0f:65:bf:72:3c:62:87:5c:9d:a1:56:b9:
0c:07:ca:b5:f1:a4:b8:e7:55:a4:b0:b3:bf:ae:86:a0:02:63:
27:86:a9:af:5f:d7:ee:db:09:10:d4:fc:2a:7f:92:79:8e:0e:
72:f4:3a:3c:a7:4b:44:e7:82:e3:ed:0c:5c:28:9e:c9:93:33:
64:01:37:d5:84:e9:2d:ab:0b:aa:4b:d7:78:19:17:f7:2d:27:
49:dd:08:0f:c2:ee:7d:88:db:73:5c:37:fa:35:10:b6:22:7c:
02:98:1a:71:3c:52:8d:7d:06:fc:8b:db:aa:56:6f:ee:bf:1f:
81:2e:44:e9:04:c5:21:4d:0b:f2:d9:7e:da:3c:f4:8d:3a:81:
16:e5:6b:12:cd:53:47:8a:4a:6b:e8:33:bb:3a:3f:4b:dd:1c:
46:fa:55:df:e8:4d:ca:50:0e:2d:40:b3:e3:fa:c7:d5:ae:8e:
27:17:27:77:45:f2:ea:4a:37:d8:4e:b6:8a:9c:a5:4e:be:17:
0f:25:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:01 2025 by rpki-client