Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: oQ8vR8jQIB7JhNXzis8CU4JKsPXhre7gYs0mlMYPiD8=
Subject key identifier: 05:89:F3:58:81:8E:2C:B4:5D:FB:3D:9E:F6:DB:D3:CA:9A:62:4B:C7
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019881D59A33B34E13F9E064195A1FCB3C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0BE6
Signing time: Thu 07 Aug 2025 00:01:56 +0000
Manifest this update: Thu 07 Aug 2025 00:01:56 +0000
Manifest next update: Fri 08 Aug 2025 00:01:56 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: lJ2n/FFECWRQJ6InxsAGxRU+vktOimIXZry55kt1tPs=)
2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:9a:33:b3:4e:13:f9:e0:64:19:5a:1f:cb:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Aug 7 00:01:56 2025 GMT
Not After : Aug 8 00:01:56 2025 GMT
Subject: CN=0589f358818e2cb45dfb3d9ef6dbd3ca9a624bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:1c:38:95:16:90:49:ea:d8:27:55:70:73:
f3:47:b1:ff:a5:f6:e2:45:c5:e2:15:c7:67:9a:e2:
88:79:5d:93:08:8d:50:d1:2f:58:6d:38:f2:fd:5e:
7c:23:05:5a:86:e1:05:2c:1f:24:43:c5:bf:03:cb:
37:d0:cd:45:42:a7:b7:52:0b:f2:a0:3a:c3:b5:af:
86:92:a7:bc:02:14:a2:3f:a7:65:45:31:1a:fe:a9:
d8:78:64:3b:ea:bb:7c:71:c0:be:0f:1a:65:8c:a1:
38:09:00:d2:db:6b:77:f2:d9:f7:53:af:14:00:b4:
1d:96:e7:e5:3d:88:1e:b3:7d:af:19:b2:84:c9:a4:
6f:a5:6b:48:a8:f8:6a:31:23:4f:ab:1a:1d:55:d6:
e1:38:23:f4:f1:0f:1e:75:b7:42:5b:58:f5:d2:d4:
1f:81:11:76:23:67:ff:01:80:24:79:40:56:96:d2:
8e:15:c3:b0:67:b2:20:5c:28:bd:91:62:62:c7:44:
d8:d8:50:54:23:e8:f0:87:f5:67:0a:a8:88:4d:6c:
e7:bc:7b:dc:bd:99:e3:ac:fa:0f:f9:2a:f3:00:cf:
00:d6:5a:8b:a8:29:4e:4c:98:2a:6e:4d:5a:fc:63:
8e:ce:73:8f:e6:a4:9f:13:cc:47:f9:51:b4:e1:69:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:F3:58:81:8E:2C:B4:5D:FB:3D:9E:F6:DB:D3:CA:9A:62:4B:C7
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1e:9a:9b:a2:64:db:ca:47:18:e9:85:1c:9b:21:13:86:ba:
10:26:38:43:90:58:19:6e:5a:e1:6b:ab:34:50:61:a2:00:83:
ad:a0:af:8f:67:cd:c1:35:60:fe:27:e9:dd:59:ce:39:67:b8:
4f:78:44:21:e2:54:8b:eb:b7:22:c7:71:3d:81:5d:5c:e5:fd:
18:4b:39:45:74:00:a9:bb:d3:2b:e7:09:af:d5:69:4b:c0:a0:
a3:f4:0d:c4:5c:0f:83:5c:78:7d:98:13:78:91:a4:3d:ac:bf:
c5:e4:93:fb:95:92:06:ee:a4:bc:c3:3f:3c:d6:98:cb:fa:bb:
ad:aa:4a:15:97:85:da:63:a7:70:5f:57:c4:65:2f:10:c6:47:
3e:c1:8c:ec:0d:81:18:4f:ce:34:29:58:64:3d:f3:c8:9b:ec:
aa:bd:8f:0a:59:6f:73:e3:56:ae:93:a7:c0:73:a9:0b:0c:2a:
bd:68:0b:fa:d8:18:a8:2a:fe:84:a0:ce:74:82:71:2c:d5:d3:
e8:e3:d0:9b:b6:d6:4b:84:9a:b8:1e:58:72:5a:e8:81:85:ae:
9e:ce:6d:c3:52:25:b8:24:de:89:fe:b3:77:54:23:54:d1:88:
01:0e:5c:a3:a5:7c:e4:cf:1d:9d:a1:cc:08:7e:17:d8:d4:fc:
70:ed:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:39:33 2025 by rpki-client