Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
File: sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft (raw, json)
Hash identifier: DnV+uf/gy+pty9nTEOlOqiMdJeFQpaSohcNICR3thxo=
Subject key identifier: 04:D7:ED:DF:D6:9E:1D:D1:A7:91:EE:EF:A2:8A:3A:DF:45:76:15:6C
Authority key identifier: B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
Certificate issuer: /CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Certificate serial: 019A4FD006BCE4CD7A613E6BF63EB2099761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: Cl-s_kzYlAqMj9xfZRjzzsyjoOI.roa (hash: zKH1LTs9+Z8Dai2nZia/AYU5dJurOcYDxOkVkYs9o3M=)
2: sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl (hash: /kYYN9A8Q5JoI1OJTTiAlLOpWPndFY6WZqic+nAtImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:06:bc:e4:cd:7a:61:3e:6b:f6:3e:b2:09:97:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b5ab262ff281556743318f78ceaeb49f8bd1be
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=04d7eddfd69e1dd1a791eeefa28a3adf4576156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:f6:00:92:a7:ea:8b:d4:2d:f3:7e:5d:ef:
dc:7c:7e:8f:80:f2:ea:21:13:48:52:5f:27:9a:72:
9c:98:b7:29:84:ee:5e:4d:a7:5b:9d:57:46:c2:53:
12:29:0f:cb:06:86:94:af:ee:ee:7d:41:70:3c:0b:
a3:96:c7:a8:09:c4:a3:01:5c:2d:35:89:1b:ea:e3:
52:a5:4c:a7:f2:3d:1a:80:23:dc:83:ee:71:88:1d:
e5:a2:31:dc:55:45:b3:07:29:cc:c3:75:ab:09:7a:
71:ee:3d:20:bc:9e:ae:2a:f9:de:28:03:2d:59:06:
29:c0:66:9d:16:ec:5e:2e:c8:c0:20:30:c2:fa:d3:
c8:c5:77:7b:29:2b:b5:3f:7f:a5:6e:3c:44:03:b0:
12:de:f9:5a:97:da:f9:5c:cc:54:96:d1:7f:62:89:
1a:e2:02:7d:85:fd:19:22:4d:6d:2d:06:67:b1:ba:
f7:c2:ff:fa:67:3a:27:c8:6d:76:f7:f2:65:2d:09:
46:77:f7:41:ca:3c:7a:a8:32:36:a9:a6:7c:40:a6:
c5:03:8c:a9:e7:6e:e5:5b:83:08:f0:62:88:8e:21:
78:bc:4c:67:94:f6:b0:5c:b6:ad:bf:5c:2c:65:c3:
45:ac:90:1a:bf:85:6d:3f:cb:7d:6b:df:78:5d:e1:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D7:ED:DF:D6:9E:1D:D1:A7:91:EE:EF:A2:8A:3A:DF:45:76:15:6C
X509v3 Authority Key Identifier:
keyid:B1:B5:AB:26:2F:F2:81:55:67:43:31:8F:78:CE:AE:B4:9F:8B:D1:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbWrJi_ygVVnQzGPeM6utJ-L0b4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f4e58-d58d-47de-92f7-e89fff97762c/1/sbWrJi_ygVVnQzGPeM6utJ-L0b4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:96:45:12:44:45:d8:76:37:f9:b2:94:74:db:9e:e3:aa:
ae:b8:7b:56:a1:8d:8c:e8:eb:4e:62:ab:a2:47:d5:15:e4:75:
c3:eb:08:9c:00:46:bb:7e:e4:38:23:5a:1c:3d:94:72:b9:b2:
26:fe:e3:a7:4c:ac:63:d2:ab:25:d6:dd:f5:ea:1a:70:b3:a2:
01:d7:f3:29:92:9a:9e:ba:2a:1b:81:8f:87:8a:5d:8e:16:6d:
d0:33:11:a6:92:e4:9d:4d:46:3a:4d:4b:c7:ec:37:f8:33:b3:
88:1a:bb:19:72:e9:5a:61:d9:22:ff:fc:b0:59:58:a2:5f:07:
63:bf:7f:64:eb:99:e5:d7:00:a9:11:7e:0c:de:66:50:eb:35:
33:61:72:5b:6c:15:b8:96:1e:0f:0e:f8:7e:a8:b8:8c:e8:51:
a3:99:a8:dc:b6:ac:28:5d:39:67:a6:32:88:12:b3:26:0b:59:
0f:5c:ce:ab:d9:18:a1:a6:3d:99:20:63:d3:cf:f2:19:77:96:
04:93:33:a3:29:bd:01:30:a5:b3:04:f9:97:75:6b:a3:52:b7:
d6:e3:70:f2:e2:9e:e9:be:38:c0:ab:75:b2:6e:66:09:2f:c8:
3e:c0:ce:4b:03:41:7f:8e:3b:4e:9e:2c:7b:42:e4:c3:66:c2:
0e:9a:10:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:44 2025 by rpki-client