Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: DfmssicAvhBMTBMBxUxnyCa77pu3Zju8rWvY8AnDFDU=
Subject key identifier: DC:EA:26:0E:27:79:0E:92:11:CF:6D:24:F2:47:91:F7:28:86:BF:CE
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 019A4E866E96BDB9E72D119D130C47EA5276
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:24 +0000
Manifest this update: Tue 04 Nov 2025 11:00:24 +0000
Manifest next update: Wed 05 Nov 2025 11:00:24 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: VpJvvAXECDmrhYBwnnB+pnk7YMSfUuG1BX4JTx8maBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:6e:96:bd:b9:e7:2d:11:9d:13:0c:47:ea:52:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Nov 4 11:00:24 2025 GMT
Not After : Nov 5 11:00:24 2025 GMT
Subject: CN=dcea260e27790e9211cf6d24f24791f72886bfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:05:12:1e:a0:58:0e:25:12:5a:24:be:2a:12:
10:9e:18:fc:d4:a8:a9:21:4c:36:83:ac:cb:75:a4:
c4:78:fa:be:4c:98:bc:38:e2:be:d1:2d:65:c2:e9:
cf:74:92:7c:2b:ae:a6:93:6c:ef:e2:65:f8:ef:fc:
a9:07:02:01:13:a9:79:e0:f4:12:98:fe:45:a3:1b:
02:de:e5:f2:5e:96:e9:13:9a:7a:7c:05:9b:2e:96:
f7:85:23:d3:50:0d:44:74:0b:5d:4d:5f:26:73:2f:
64:75:63:f8:af:06:47:87:00:25:20:c3:e5:fd:8b:
e0:95:ec:6f:18:73:32:b1:13:74:e4:d5:68:5b:5f:
0d:2e:06:16:6f:6a:e1:1d:62:c9:06:c8:44:f9:8a:
96:5b:60:95:66:5c:47:91:2c:b4:fc:57:03:45:45:
88:2a:2c:32:fc:b1:ae:79:52:be:b4:e3:42:0c:a6:
a1:4d:4b:bd:c8:2b:f1:ef:53:d8:3d:7c:e5:10:b3:
09:7d:65:d8:a7:4f:75:91:aa:1d:ea:49:95:b1:ed:
8f:7d:14:cb:32:d7:dc:ce:d2:53:e8:51:61:19:fb:
2b:f9:d8:36:47:4d:d6:3e:2c:7a:32:00:ca:cc:2b:
24:bb:db:17:2c:0c:ee:a7:4f:ce:ae:e3:4b:de:5b:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:26:0E:27:79:0E:92:11:CF:6D:24:F2:47:91:F7:28:86:BF:CE
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b1:5a:a0:5c:f0:d9:e1:c6:de:85:0f:61:24:3f:d2:1d:37:
fc:23:14:00:e9:22:14:84:d5:ae:81:bf:fd:a5:b3:a2:68:3c:
a4:13:1a:7b:5d:c3:2a:ff:a4:a9:d0:8d:9c:8f:f1:db:54:08:
ae:83:1f:9f:67:89:4e:5e:df:13:8a:ae:1d:f0:bb:c7:fd:e2:
cf:54:8e:c0:ef:e9:07:88:e8:bb:00:7f:98:db:b1:e0:1e:53:
22:13:18:e7:9f:05:53:2b:27:1f:19:e1:92:37:72:f9:a7:e8:
7f:69:30:80:cc:b4:5d:35:48:17:96:6f:bc:ef:a3:a0:4c:93:
c8:44:bd:b5:10:4e:9a:44:41:13:67:db:2c:37:73:a2:22:d1:
a1:67:9a:89:77:36:3f:02:51:35:a3:32:e3:b4:94:cd:28:a2:
ab:1a:4f:5d:70:b7:30:a9:ec:ac:13:93:4f:1d:bf:b2:b6:77:
85:4a:f0:d4:a6:b4:3a:cc:24:64:95:c8:ae:0a:2e:3e:b0:f0:
5c:53:a6:5d:40:d9:49:8c:71:fe:5b:a2:69:b2:34:b2:f1:cd:
03:6a:99:4f:31:f3:25:8c:2d:3d:a3:45:67:18:f0:16:65:d7:
b8:03:bd:6c:8f:d6:ff:a2:66:21:1a:7c:7a:0d:0d:ba:f3:f6:
cc:76:a4:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhm6WvbnnLRGdEwxH6lJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmYzMmFiZjc3ZjQxMmMyMTBmNDA5ODIyZDEzOThlYzNi
ZWRhOWIwHhcNMjUxMTA0MTEwMDI0WhcNMjUxMTA1MTEwMDI0WjAzMTEwLwYDVQQD
EyhkY2VhMjYwZTI3NzkwZTkyMTFjZjZkMjRmMjQ3OTFmNzI4ODZiZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+gUSHqBYDiUSWiS+KhIQnhj81Kip
IUw2g6zLdaTEePq+TJi8OOK+0S1lwunPdJJ8K66mk2zv4mX47/ypBwIBE6l54PQS
mP5FoxsC3uXyXpbpE5p6fAWbLpb3hSPTUA1EdAtdTV8mcy9kdWP4rwZHhwAlIMPl
/YvglexvGHMysRN05NVoW18NLgYWb2rhHWLJBshE+YqWW2CVZlxHkSy0/FcDRUWI
Kiwy/LGueVK+tONCDKahTUu9yCvx71PYPXzlELMJfWXYp091kaod6kmVse2PfRTL
MtfcztJT6FFhGfsr+dg2R03WPix6MgDKzCsku9sXLAzup0/OruNL3lvlKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzqJg4neQ6SEc9tJPJHkfcohr/OMB8GA1UdIwQY
MBaAFEm/Mqv3f0EsIQ9AmCLROY7DvtqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEt
MGJlNjMzN2JmNmI2LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEtMGJlNjMzN2JmNmI2
LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbFaoFzw
2eHG3oUPYSQ/0h03/CMUAOkiFITVroG//aWzomg8pBMae13DKv+kqdCNnI/x21QI
roMfn2eJTl7fE4quHfC7x/3iz1SOwO/pB4jouwB/mNux4B5TIhMY558FUysnHxnh
kjdy+afof2kwgMy0XTVIF5ZvvO+joEyTyES9tRBOmkRBE2fbLDdzoiLRoWeaiXc2
PwJRNaMy47SUzSiiqxpPXXC3MKnsrBOTTx2/srZ3hUrw1Ka0OswkZJXIrgouPrDw
XFOmXUDZSYxx/luiabI0svHNA2qZTzHzJYwtPaNFZxjwFmXXuAO9bI/W/6JmIRp8
eg0NuvP2zHakPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:27 2025 by rpki-client