
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: DJ30ZQCvIjl9wQMIDlm0WLyZbwXb4v5pwsiH4+kvI/w=
Subject key identifier: 3A:C5:9F:3A:BE:23:A1:95:31:B1:B3:28:52:78:5C:47:FD:33:EA:EB
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 01987AF6B4AC936B5632870981F7E2020CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0E89
Signing time: Tue 05 Aug 2025 16:00:45 +0000
Manifest this update: Tue 05 Aug 2025 16:00:45 +0000
Manifest next update: Wed 06 Aug 2025 16:00:45 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: hbDRp3fvHPUhUwE8YS7AqqQYP1dsXnQGvzKe45Z6b6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:b4:ac:93:6b:56:32:87:09:81:f7:e2:02:0c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Aug 5 16:00:45 2025 GMT
Not After : Aug 6 16:00:45 2025 GMT
Subject: CN=3ac59f3abe23a19531b1b32852785c47fd33eaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:98:38:d1:61:fb:a5:ff:12:25:d7:49:bd:
9a:5c:44:34:fa:84:2e:05:04:2a:81:f7:ef:84:d5:
53:90:d9:0d:fb:88:d7:42:11:88:74:ce:62:4a:85:
84:2e:07:68:0c:fa:eb:49:2d:4d:a3:e0:c2:30:30:
6b:64:89:8c:07:17:1a:ce:a7:1f:9d:a1:9f:da:13:
ce:52:fc:4a:65:6e:8c:09:76:6e:71:ba:da:31:a7:
f0:af:77:ac:d8:97:b1:01:db:8d:12:28:54:bb:03:
31:be:36:e5:27:85:ad:6f:34:9e:55:8a:de:d6:ba:
1c:d3:73:0a:ae:35:07:3c:dd:00:45:f8:c9:ac:64:
9d:bf:e9:a4:dc:79:2c:f9:bf:2a:0a:44:a5:4c:35:
54:10:91:98:63:69:84:52:6b:1b:ff:0f:4e:7f:df:
b1:ea:85:43:bc:ff:56:73:d8:26:83:60:e0:c2:8e:
d4:34:73:8b:75:64:e7:90:4c:c0:c8:d9:44:de:c4:
14:d9:19:c7:a5:aa:a6:48:72:62:45:a8:e2:bc:48:
f8:db:9a:64:d3:e5:45:f2:e4:85:64:bd:31:2f:c4:
a8:a8:0e:15:64:9f:72:e9:82:d3:87:0f:10:18:1a:
f1:69:39:34:c3:0c:7b:1f:25:c7:b8:09:9d:49:1e:
2b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:9F:3A:BE:23:A1:95:31:B1:B3:28:52:78:5C:47:FD:33:EA:EB
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:87:c5:e7:a8:e8:48:1a:84:b7:b1:59:95:61:02:06:a3:2b:
63:bb:5c:19:45:6c:29:12:2f:b2:55:71:55:06:57:d1:02:90:
ca:76:a1:0c:87:51:5a:70:57:e2:fb:ea:10:e6:f1:62:ab:7e:
ba:13:64:66:75:76:eb:bc:10:fc:24:a9:73:0c:cd:c1:ce:d1:
90:be:f0:07:b5:87:1e:29:8a:98:f6:1f:d2:c9:58:0d:1d:f0:
7c:49:23:fc:d1:98:62:1f:23:85:8d:78:4e:cb:1d:67:b5:f8:
f6:78:39:8b:c0:c9:c1:fa:25:a9:09:87:b8:0a:cf:27:28:d1:
c1:4c:af:1d:d6:45:15:17:eb:fa:73:93:97:18:39:9c:36:d6:
f7:0e:28:25:1b:9f:85:46:16:fc:32:17:24:6f:37:4f:62:fc:
85:09:a2:e4:b6:ff:2e:6b:44:1f:b2:2c:2c:68:8c:e7:56:d8:
67:89:97:8d:3d:43:c8:02:14:8b:de:2d:86:e6:4b:41:38:d5:
43:13:83:f6:6c:6a:8b:50:d9:49:7f:d3:76:27:8e:95:df:b3:
3b:e0:10:82:12:22:30:93:3e:f1:77:28:a0:c2:5e:66:50:ae:
2b:e2:2d:8e:2b:d7:a1:95:1a:17:d2:65:1e:0d:4b:66:c9:a6:
71:fa:a4:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh69rSsk2tWMocJgffiAgyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTg5YjY3YzY2ZGViZjVkZWQzZjI4ODBiYjQ5NDFkMzA0
MTEyNTcwHhcNMjUwODA1MTYwMDQ1WhcNMjUwODA2MTYwMDQ1WjAzMTEwLwYDVQQD
EygzYWM1OWYzYWJlMjNhMTk1MzFiMWIzMjg1Mjc4NWM0N2ZkMzNlYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoqYONFh+6X/EiXXSb2aXEQ0+oQu
BQQqgffvhNVTkNkN+4jXQhGIdM5iSoWELgdoDPrrSS1No+DCMDBrZImMBxcazqcf
naGf2hPOUvxKZW6MCXZucbraMafwr3es2JexAduNEihUuwMxvjblJ4WtbzSeVYre
1roc03MKrjUHPN0ARfjJrGSdv+mk3Hks+b8qCkSlTDVUEJGYY2mEUmsb/w9Of9+x
6oVDvP9Wc9gmg2Dgwo7UNHOLdWTnkEzAyNlE3sQU2RnHpaqmSHJiRajivEj425pk
0+VF8uSFZL0xL8SoqA4VZJ9y6YLThw8QGBrxaTk0wwx7HyXHuAmdSR4rUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDrFnzq+I6GVMbGzKFJ4XEf9M+rrMB8GA1UdIwQY
MBaAFLGom2fGbev13tPyiAu0lB0wQRJXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTct
MjEwMGJmMGYxNDBhLzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iYzRkN2ItM2NiNy00ZjMzLTg5ZTctMjEwMGJmMGYxNDBh
LzEvc2FpYlo4WnQ2X1hlMF9LSUM3U1VIVEJCRWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYfF56jo
SBqEt7FZlWECBqMrY7tcGUVsKRIvslVxVQZX0QKQynahDIdRWnBX4vvqEObxYqt+
uhNkZnV267wQ/CSpcwzNwc7RkL7wB7WHHimKmPYf0slYDR3wfEkj/NGYYh8jhY14
TssdZ7X49ng5i8DJwfolqQmHuArPJyjRwUyvHdZFFRfr+nOTlxg5nDbW9w4oJRuf
hUYW/DIXJG83T2L8hQmi5Lb/LmtEH7IsLGiM51bYZ4mXjT1DyAIUi94thuZLQTjV
QxOD9mxqi1DZSX/TdieOld+zO+AQghIiMJM+8XcooMJeZlCuK+ItjivXoZUaF9Jl
Hg1LZsmmcfqkxQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:05 2025 by rpki-client