Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: v6cEUPraZpCO7wB34b2yK1gdfH6G/JmE0I15yxY/1DE=
Subject key identifier: 2B:9C:20:5D:30:EF:47:F6:CD:5D:81:96:7D:A1:10:CF:5D:3A:34:58
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 019A50AB8A0024FB0F2F493DEF8F7D5A8A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 21:00:10 +0000
Manifest this update: Tue 04 Nov 2025 21:00:10 +0000
Manifest next update: Wed 05 Nov 2025 21:00:10 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: 0xis0LEAhy7JBTyK/pAWktetgI86D1SfCzj3+O+wuU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:8a:00:24:fb:0f:2f:49:3d:ef:8f:7d:5a:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Nov 4 21:00:10 2025 GMT
Not After : Nov 5 21:00:10 2025 GMT
Subject: CN=2b9c205d30ef47f6cd5d81967da110cf5d3a3458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:07:65:63:6d:43:b7:fb:7d:f2:32:e7:b9:
08:0d:6d:09:86:5a:5a:c4:15:26:f6:ee:7e:33:37:
48:b0:af:a6:17:e0:73:9c:5d:87:d3:25:98:5b:10:
83:25:16:df:b5:00:7c:1c:34:ba:91:35:37:58:1e:
ba:3a:9f:1a:77:7d:1f:dd:a8:3a:ff:7e:3b:31:cf:
fe:74:01:72:38:af:df:73:e8:e2:41:bf:ea:42:64:
15:69:4b:ad:36:62:35:d1:ae:fa:50:5f:d1:61:06:
96:ca:66:4a:91:97:fb:d0:68:d7:48:8b:3d:d9:e5:
c4:2b:c3:ab:3d:27:91:bc:b8:a4:08:ed:da:7d:65:
df:e0:13:f1:db:d0:52:96:9e:54:2b:64:68:47:84:
16:79:e0:27:d4:87:29:3c:0a:41:23:90:04:fc:1d:
46:91:50:81:c6:2f:9d:fa:3f:55:85:6f:c1:48:8a:
5a:3a:9a:bb:a8:c8:7f:80:73:22:fc:f4:de:06:a2:
35:46:03:ba:ce:21:1f:f0:a7:49:ec:b0:bb:55:68:
18:d6:b0:76:2f:5e:15:da:ed:cb:59:cb:e4:e9:b8:
41:81:8b:eb:e7:9c:fe:e3:a6:ae:a6:52:53:6e:c6:
15:0c:41:d0:2a:49:d3:08:06:54:e3:74:fa:7d:75:
fb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:9C:20:5D:30:EF:47:F6:CD:5D:81:96:7D:A1:10:CF:5D:3A:34:58
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fb:fc:5f:7f:9c:8a:69:a4:91:9d:0c:bb:48:09:24:2c:05:
37:be:33:51:14:d6:ce:14:17:29:53:19:3a:5f:5d:da:2e:36:
4d:fd:87:3b:57:6f:67:0c:23:f1:bb:c9:93:14:e6:46:bc:a8:
a4:e4:75:cb:4b:a3:dd:3f:03:90:81:3b:dc:68:f8:e5:a5:84:
3d:e3:2b:44:bd:54:f2:24:65:9e:41:eb:f1:ef:76:7d:e5:f3:
33:e7:72:53:be:32:00:29:fc:cc:46:6f:78:59:29:9c:71:e3:
5d:2c:1b:59:25:1b:3f:cb:86:5b:ce:87:36:02:32:85:e0:3a:
a1:ec:71:41:28:79:fb:42:3c:c9:f3:07:2a:97:d7:52:27:41:
75:bd:c9:6b:af:69:c8:42:07:42:b0:c5:a8:18:d2:c9:f0:1b:
39:4d:0a:f4:09:40:e8:64:06:e0:5a:06:ec:57:1c:7c:20:49:
7e:9b:4b:54:8e:1a:a2:ad:b4:bb:2b:5f:d2:c3:9d:83:59:74:
87:56:4b:78:12:11:ad:70:ac:91:f6:b6:fa:a4:34:07:4d:70:
f6:89:5b:ea:8e:e3:94:1a:65:10:d9:a3:a9:10:81:1a:fc:b0:
41:e2:17:a0:f6:b1:a6:23:86:19:16:64:0b:e7:7f:30:26:02:
d8:28:4f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:41 2025 by rpki-client