Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: 4RHcyg6leuf4D/Eg4M8HWp2VlTCfbILIXtTamQTk/ec=
Subject key identifier: 8D:70:D3:42:DB:62:B4:17:CA:AB:85:7C:D2:06:F9:A5:66:00:A6:02
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019A522C5EC893D2017FD78165F14737A078
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0F7D
Signing time: Wed 05 Nov 2025 04:00:30 +0000
Manifest this update: Wed 05 Nov 2025 04:00:30 +0000
Manifest next update: Thu 06 Nov 2025 04:00:30 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: XHaeAvXkYA9VBTtGVxCZhUo++5MYSJHItarpGjv9uqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:5e:c8:93:d2:01:7f:d7:81:65:f1:47:37:a0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Nov 5 04:00:30 2025 GMT
Not After : Nov 6 04:00:30 2025 GMT
Subject: CN=8d70d342db62b417caab857cd206f9a56600a602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3d:da:7b:b4:05:59:04:0a:ed:46:f8:da:06:
a8:82:24:01:73:80:bb:97:4a:c6:34:ee:98:38:cb:
95:5d:0f:a8:04:94:c2:dc:ae:56:fb:82:f4:b0:c7:
5a:48:f3:ec:6f:81:f6:2a:71:5e:d0:32:a6:77:b6:
76:80:aa:5a:fd:04:7a:68:8e:6d:25:6f:ac:b6:b9:
24:9e:c7:79:fc:b5:de:72:b9:5e:81:85:83:bb:8e:
e7:55:ec:57:9d:d3:bf:67:81:0b:f2:57:50:df:b2:
a9:90:36:b0:75:d1:fd:eb:b1:25:7b:b0:58:27:23:
32:e1:40:12:dc:48:b0:00:2f:36:57:ae:fc:37:05:
2b:63:41:9e:34:2f:f9:09:02:82:63:9e:31:88:93:
b3:79:c2:62:4b:bb:23:20:2f:43:14:52:d4:60:7c:
f6:67:f9:90:0c:f9:f2:e5:2c:b1:d5:6a:84:b9:dd:
2c:32:b8:59:7f:7c:dd:33:49:b5:e0:ed:a2:21:22:
7a:8b:7b:57:5e:87:bc:75:70:e1:cd:30:12:3f:da:
6d:41:f6:e1:1a:86:2b:7f:8c:bc:b0:46:41:d1:6b:
01:70:9f:d0:c2:9d:eb:3e:c2:db:f0:1b:b9:5b:d6:
24:4c:81:2f:9c:7d:f0:6c:c1:11:45:73:b4:7f:ac:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:D3:42:DB:62:B4:17:CA:AB:85:7C:D2:06:F9:A5:66:00:A6:02
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:92:c7:08:1f:95:6c:61:f2:d9:d0:51:05:9a:d8:b2:be:78:
2e:58:04:2b:cd:03:63:ab:82:36:50:41:3b:2a:1d:4f:a5:85:
8c:9a:e3:d2:e9:79:69:e3:bf:68:73:af:a7:7f:5f:4a:64:f5:
b5:61:ca:27:db:cc:c9:95:4d:31:be:cb:46:17:95:fa:a8:f2:
41:a1:e5:ac:e2:71:3b:d6:6e:9c:ea:ed:30:cc:51:2b:19:3d:
55:e1:21:ca:2f:a1:d5:c4:c1:78:c7:6b:f6:fc:bb:7a:90:02:
b2:62:8c:43:39:1c:a2:e3:af:07:63:ca:43:37:4a:2a:2e:c3:
e8:65:28:47:fc:6c:dc:fd:bd:2a:ce:aa:47:db:f6:9b:95:db:
42:a8:66:ce:e2:bb:84:03:84:83:41:eb:23:d9:18:80:b9:76:
8e:45:80:01:f1:85:0b:b9:cb:6a:ae:f8:4a:88:06:be:90:e7:
9d:38:24:a9:1a:5f:d7:4f:8a:af:8a:66:3d:68:bd:a6:ce:18:
db:6e:41:06:2a:e7:46:9d:f2:9d:48:bd:cc:d8:bd:6c:4d:4d:
74:9b:ba:15:66:ba:d3:b1:ce:a6:cb:dd:98:a7:da:d9:19:5c:
55:99:64:ec:fc:ff:8f:20:a2:5d:57:1a:85:a6:2e:b5:79:d0:
32:44:e8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:00:43 2025 by rpki-client