Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: SXSbLUEsat7Kt6TvCGv16RgEcuUTxadNA1293Ulqi64=
Subject key identifier: EF:98:18:12:AA:79:CC:96:88:A9:D7:2F:C6:04:48:85:24:7E:66:BE
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019A4EF505D4CAA098278F5998E1DE34190E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0D88
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: dOjX5RU2t4BcYzrNTYBIg87xasz8ZnMCIddaZnGm89A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:05:d4:ca:a0:98:27:8f:59:98:e1:de:34:19:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=ef981812aa79cc9688a9d72fc6044885247e66be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8a:fc:7e:53:83:a3:e6:a0:e5:52:74:80:62:
48:cb:c4:6a:13:c5:63:21:58:32:7b:95:1e:fe:e7:
30:7d:0a:99:a5:fc:0f:d8:0e:a9:8f:74:f3:ab:33:
47:7a:e1:44:19:f0:51:30:b3:4e:bc:24:91:10:ba:
c9:02:ba:f2:df:05:df:3c:01:95:93:ea:d3:d5:5f:
14:09:06:b7:c8:6c:84:1d:64:ba:7f:25:ed:12:56:
18:fd:46:d7:53:17:fa:23:f5:24:27:8b:5d:22:5a:
86:30:ff:d8:f7:24:90:fd:c8:1e:c0:43:30:f8:51:
03:69:d0:5a:24:93:de:21:11:a7:9f:d6:d1:c6:9b:
55:cf:27:db:69:db:98:33:c2:a3:bd:c3:59:6c:fe:
8b:d3:18:d1:62:fc:f5:34:1e:0e:5b:19:61:60:75:
f5:57:9d:ee:40:ee:85:bf:ab:d6:f0:df:e3:5b:b5:
97:56:14:42:78:3c:1d:49:d1:7d:62:a8:b7:0a:32:
a0:e2:2b:8d:fd:9f:54:57:d7:d2:b3:60:2b:66:c7:
95:d2:a1:6e:89:11:27:1a:69:c8:90:73:f3:45:41:
bd:a7:61:24:ed:af:f3:0b:db:dd:7b:21:b1:81:21:
54:21:95:c7:da:72:0a:14:c9:12:43:6e:15:6e:5b:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:98:18:12:AA:79:CC:96:88:A9:D7:2F:C6:04:48:85:24:7E:66:BE
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:de:d2:69:a2:ef:a3:be:6c:10:9a:c0:4e:79:6c:02:8b:
a8:9d:6b:ff:b8:d1:70:f0:ce:cb:36:d9:2f:5f:63:c8:e3:5d:
68:4f:e4:99:62:0e:db:dc:72:09:b4:6d:bc:fc:1e:0b:43:f6:
a9:d6:a9:2d:53:41:26:d5:c9:31:35:e5:aa:cd:97:eb:ef:ae:
a2:c1:12:95:f0:8b:14:c4:87:16:cb:90:f3:a1:c6:4f:ad:ae:
e1:e2:47:6f:a4:df:d9:fb:ff:31:48:fb:a1:aa:91:bb:de:6f:
7b:e1:48:86:d3:23:ec:41:99:1b:fc:84:14:3d:66:ec:b9:b9:
3e:6d:32:9d:eb:c6:bc:5e:de:8c:7b:13:51:ad:6d:bf:5c:bc:
af:43:cf:5b:30:e0:69:98:cc:3d:ea:a5:90:7f:00:63:b8:6a:
6b:44:9f:51:05:d1:02:ff:fd:c3:0b:b0:bd:2b:49:da:70:5b:
18:e4:28:e1:22:60:65:61:21:ed:2d:2d:d8:92:08:60:c3:b8:
7d:72:ba:41:ad:00:e6:23:e0:ba:4e:1d:f5:19:98:24:c7:31:
50:5d:5f:6a:82:f3:90:ea:fd:09:fe:2d:8d:09:90:df:92:68:
75:93:b4:b5:cc:be:57:a2:6d:fe:62:b6:c4:a6:8f:12:30:96:
33:32:bd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:28 2025 by rpki-client