Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: 64sWfwOXOaUIpfpaWI76cXBPx4v7LBoHP4xbdxlvNZ0=
Subject key identifier: 2B:A5:1C:7E:BB:CE:81:55:91:38:73:50:52:73:2F:AB:39:5F:21:E6
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 01987B2DE4C6255786721AC79DBDCB1D1178
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1619
Signing time: Tue 05 Aug 2025 17:01:01 +0000
Manifest this update: Tue 05 Aug 2025 17:01:01 +0000
Manifest next update: Wed 06 Aug 2025 17:01:01 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: yAs/dF0BDXdLYfQ9muVoqXI/SZGKMp8pDYPN6RLTvis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:e4:c6:25:57:86:72:1a:c7:9d:bd:cb:1d:11:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Aug 5 17:01:01 2025 GMT
Not After : Aug 6 17:01:01 2025 GMT
Subject: CN=2ba51c7ebbce81559138735052732fab395f21e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:6d:15:57:0a:8a:a8:05:c7:b1:21:78:e0:
35:5f:62:32:3e:72:91:40:a4:ef:9e:24:fe:26:82:
36:47:ff:39:15:ab:28:4f:dc:9a:d2:4f:a5:81:c4:
af:84:bc:f2:6c:f4:29:21:f9:7f:e2:60:e4:35:6a:
fd:65:63:02:55:b5:a3:d9:f1:5e:63:d3:1b:d7:2d:
79:4f:4c:3c:d7:6a:d5:7a:d3:2c:92:92:c5:65:31:
32:7e:1f:df:d4:51:72:e5:bb:ed:c2:ea:23:f8:80:
87:4a:fe:47:5c:24:1f:e3:da:f2:18:17:aa:9a:d4:
45:2d:50:95:29:f3:0a:0f:7c:7a:01:a9:8c:08:d3:
7e:11:c2:15:1a:77:4a:0a:e4:6d:3f:df:4e:bb:24:
7e:b3:ff:ad:69:46:c3:a2:b3:64:9a:f9:bb:7d:44:
59:c0:4f:98:50:36:a7:6f:a8:20:38:19:f1:2c:74:
7f:22:30:76:76:0a:14:84:73:5a:0f:a0:7a:66:f4:
f4:c1:51:6a:3a:0d:6e:a4:14:b7:a0:9d:5d:15:ab:
d3:51:04:a9:4d:28:ca:45:6c:90:51:ef:05:36:a2:
35:c7:b1:a4:5c:f1:69:50:1c:f8:ee:2e:0f:1e:6b:
f5:cb:67:49:36:ad:2c:7e:0a:6e:e6:3a:12:7f:91:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:1C:7E:BB:CE:81:55:91:38:73:50:52:73:2F:AB:39:5F:21:E6
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:70:c9:1b:2c:62:1e:f7:e9:1f:b3:ce:34:24:90:af:79:7a:
c8:ad:a4:f3:f7:5f:d8:65:66:35:5e:b9:f1:04:38:9d:d7:f3:
bd:70:6f:ac:6c:7e:c3:c0:97:b0:26:82:64:56:ba:a0:3c:83:
b1:b2:ee:92:42:6c:7c:21:b1:9e:a1:6a:1d:9a:45:3d:ce:ce:
de:a0:9d:16:f1:c9:86:b0:99:a5:11:64:c4:6f:7a:56:c9:bb:
74:0f:0f:71:9c:b7:1e:27:9b:0e:cf:54:f6:ba:00:ef:da:a7:
2c:cb:fa:7e:33:6c:af:3b:cb:26:a1:cd:5d:b4:e1:3f:60:5f:
76:28:30:a2:ec:0b:1b:23:91:a8:74:49:0d:16:eb:ef:4d:7b:
9b:77:67:73:34:73:8b:4b:0a:4f:b3:c9:e7:d2:bc:27:da:c0:
41:af:04:94:19:ee:83:ab:9f:7c:57:79:87:21:db:13:da:90:
e5:21:80:9d:1f:e6:8a:df:53:0b:cc:a3:35:99:bc:78:7e:42:
12:5c:76:6e:f0:60:f6:81:30:1e:67:21:52:44:e9:7e:1a:82:
9f:5a:6f:7a:2e:5f:b8:01:b1:fc:26:92:c5:d9:79:b6:1a:01:
22:2a:5d:84:ab:fc:ab:60:33:d8:b9:ae:2a:f1:e1:c3:fc:ca:
c7:0d:0c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:49:09 2025 by rpki-client