Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File: sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier: vR0q0+hORTgYNbeyJEntMKzzvWS6UghJOwH1PLA9fGc=
Subject key identifier: 7B:92:25:5D:08:F8:D7:6A:9D:AA:FC:E4:25:97:B0:A3:43:8A:89:F1
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 01988AA1254338398FE2B1010E1DB8260673
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number: 0B19
Signing time: Fri 08 Aug 2025 17:01:13 +0000
Manifest this update: Fri 08 Aug 2025 17:01:13 +0000
Manifest next update: Sat 09 Aug 2025 17:01:13 +0000
Files and hashes: 1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: mNCQ9hm1LTmFSrBfdf0kaZ1xDjSqXr5f/d59GmZFpLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:25:43:38:39:8f:e2:b1:01:0e:1d:b8:26:06:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Aug 8 17:01:13 2025 GMT
Not After : Aug 9 17:01:13 2025 GMT
Subject: CN=7b92255d08f8d76a9daafce42597b0a3438a89f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:ba:4f:4a:a9:84:f4:fd:91:ef:fd:97:ff:
6a:db:a7:75:53:3e:fd:d9:56:8d:65:30:df:01:5e:
61:71:34:2c:f8:3d:60:05:65:ae:3e:ed:89:50:c3:
8b:d2:03:92:4a:54:19:53:04:dd:95:40:ad:90:b7:
fd:01:91:f1:37:70:79:ad:db:6e:59:9a:c8:27:37:
e3:3e:c3:e8:09:11:8c:38:07:c2:f6:b9:21:61:91:
86:e5:13:e9:f3:7c:8b:31:b6:ea:43:d4:66:94:5e:
49:f0:7e:fb:04:7f:31:c7:c4:31:82:b7:ef:c0:ec:
0e:9f:fa:df:36:a0:2c:18:eb:74:40:99:b8:56:7d:
84:7b:1b:28:c6:7b:43:58:a7:63:2f:2c:ec:f0:9e:
f2:e6:22:ee:dd:01:3d:81:60:e7:d4:7f:a5:2b:2a:
0a:c9:63:8c:54:53:4e:f1:5f:d6:0f:ea:b2:af:b7:
25:39:55:d6:f0:8b:45:5f:62:f3:89:02:77:c0:4b:
36:ea:17:2c:82:34:5f:9a:2c:4b:7f:bc:7e:12:01:
58:d9:6f:58:95:e1:b4:4e:b1:b0:19:93:6f:01:b9:
66:4d:57:8b:3d:17:c5:21:f6:8f:5c:02:0a:af:89:
c7:9e:93:af:d6:51:a2:e6:4c:eb:e3:3c:22:48:83:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:92:25:5D:08:F8:D7:6A:9D:AA:FC:E4:25:97:B0:A3:43:8A:89:F1
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:89:50:30:cc:7d:1e:5f:82:32:43:63:d0:72:c3:3e:20:0e:
f4:f7:16:6d:aa:a6:6f:2f:21:82:6b:22:8e:15:5d:1d:30:d5:
dc:96:a8:1b:20:85:19:51:2a:49:ce:97:75:ab:f3:99:12:97:
ad:a6:31:83:43:ca:3d:a4:f9:ae:24:6a:77:93:38:d5:9f:50:
0e:64:d4:fb:34:68:ea:ee:54:2a:f8:a6:d4:21:d0:e4:36:22:
b5:98:fc:45:fd:92:b2:49:58:83:66:80:b8:3a:f8:56:b3:15:
07:5a:6b:e3:88:5a:d5:42:75:d5:70:8c:e4:e3:db:95:fa:57:
2f:09:4e:60:c4:95:1a:04:02:c6:fe:bb:6a:e3:f2:31:15:4f:
4c:64:80:29:9a:c1:ab:82:e3:72:83:d3:7d:05:30:46:41:34:
42:3d:34:5e:6a:8e:08:c4:c0:ea:1c:db:d6:c6:8b:22:9c:1e:
1e:1c:f8:00:7e:a4:c9:82:35:43:76:a7:a6:94:3e:e7:3c:81:
a2:87:4b:64:24:db:57:ab:1a:09:62:66:92:90:6c:ee:b8:65:
e7:38:48:3c:a7:20:63:25:ba:ce:8b:44:e5:ff:e6:d6:17:0a:
de:ed:76:8b:76:d0:85:c4:da:f1:d9:37:3e:66:54:a6:25:52:
fb:6e:0e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:31:59 2025 by rpki-client