Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
File: SBaZwQuP-LkauQlAMU7pOyev3NY.mft (raw, json)
Hash identifier: FT4kdHNpoiUgxRTVYjLC1owIXAXUnsG+jubloxdX8tw=
Subject key identifier: F2:8E:F1:B4:E8:A3:E0:F0:F3:37:7D:E8:22:2A:2D:4B:2F:D3:6A:4B
Authority key identifier: 48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
Certificate issuer: /CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Certificate serial: 019893DB0DF85EF6E6577A9CC0B628AD1701
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
Manifest number: 0C6B
Signing time: Sun 10 Aug 2025 12:01:03 +0000
Manifest this update: Sun 10 Aug 2025 12:01:03 +0000
Manifest next update: Mon 11 Aug 2025 12:01:03 +0000
Files and hashes: 1: SBaZwQuP-LkauQlAMU7pOyev3NY.crl (hash: yMv4quiWUhzMPwaUzyGNm9fqGIxXtoC40b17/M8BliY=)
2: gREff1tF-BFgfiQMOqwC-JywERY.roa (hash: s5MFDeOQrL+EZevqGRhg/WJb2VH0jOYXkHrjmynZzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:db:0d:f8:5e:f6:e6:57:7a:9c:c0:b6:28:ad:17:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481699c10b8ff8b91ab90940314ee93b27afdcd6
Validity
Not Before: Aug 10 12:01:03 2025 GMT
Not After : Aug 11 12:01:03 2025 GMT
Subject: CN=f28ef1b4e8a3e0f0f3377de8222a2d4b2fd36a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9b:32:74:76:5d:82:f5:90:73:24:8e:9c:fc:
61:29:f4:6f:77:56:68:b9:e0:37:e0:70:ec:a9:e8:
83:dd:33:14:73:43:b9:17:83:04:56:ec:2f:1a:a6:
3b:e6:0e:06:03:e8:e3:5e:1a:75:b3:f7:9f:08:2f:
94:0b:c6:32:ba:bd:3f:7a:16:4d:cd:6c:a6:fb:46:
18:a8:61:29:3d:88:9d:97:d5:b3:53:44:7d:17:11:
e5:ee:82:cb:8d:83:d3:bd:f1:7e:7d:ee:2b:c8:f6:
74:30:5d:ff:f4:df:ea:db:64:7e:0d:ad:b4:fd:49:
50:a4:1f:b9:7f:40:0c:ac:5c:57:50:0e:a7:3e:27:
24:75:86:b5:19:9e:cd:af:c0:db:f0:e3:38:5c:81:
9a:08:a3:8e:49:3a:e0:b2:53:b2:97:e8:fc:69:de:
56:b1:ca:3e:f1:c5:e8:ac:4d:cd:7b:39:d2:bc:4f:
18:bf:e9:c7:20:a2:b0:d5:15:3d:46:83:5f:7d:5a:
80:b0:db:93:73:25:76:26:e7:30:da:4a:80:11:8a:
3a:f4:49:d1:b2:cd:11:20:92:93:8f:af:52:11:3f:
7f:2c:05:46:93:02:88:f8:c6:98:fc:de:5c:7d:16:
57:85:e8:e2:01:03:73:8c:b4:89:6a:48:95:78:04:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:F1:B4:E8:A3:E0:F0:F3:37:7D:E8:22:2A:2D:4B:2F:D3:6A:4B
X509v3 Authority Key Identifier:
keyid:48:16:99:C1:0B:8F:F8:B9:1A:B9:09:40:31:4E:E9:3B:27:AF:DC:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBaZwQuP-LkauQlAMU7pOyev3NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/172180-8f44-4161-ab7e-020307acbbb9/1/SBaZwQuP-LkauQlAMU7pOyev3NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:36:80:1c:ea:70:53:18:6a:af:17:72:20:69:d5:89:09:8e:
22:33:1f:46:05:e1:4c:90:a9:06:da:94:8c:1b:6e:66:ac:f2:
13:49:bf:6e:ff:d5:ef:4e:c4:18:1b:5a:d1:54:3b:bf:1c:41:
1c:ed:ec:31:9a:4d:19:96:ce:43:1d:f7:2d:ab:93:25:cd:b5:
e0:e0:47:5c:79:ef:f8:2f:04:08:6f:18:37:cb:6e:8b:1b:82:
bf:57:c3:f3:1e:fb:3e:56:a4:23:ab:df:54:6e:6e:ce:0c:9c:
cf:24:e2:0e:99:ff:6b:81:54:8f:4a:8b:88:be:75:0c:42:ab:
a2:bd:98:35:54:53:17:3e:e7:78:0c:44:e9:17:ea:32:cf:92:
dc:41:34:e8:fb:1b:a7:df:05:6b:a4:f6:8c:90:c4:00:a7:42:
65:81:7a:cd:41:6e:66:d1:d1:27:06:a0:43:47:6d:3d:2e:48:
17:75:b0:ff:60:7c:4e:31:45:d5:f0:22:a1:43:a3:4a:0b:1a:
89:fc:98:4b:2b:ba:a1:36:d6:21:69:d9:83:16:a2:7e:86:24:
04:1e:13:10:6b:9d:8e:f0:26:60:b7:73:6e:04:57:df:a2:11:
7a:f4:a2:18:c7:46:6c:9a:08:e2:62:23:8f:1b:91:e6:2a:ef:
aa:eb:13:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:16:21 2025 by rpki-client