Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
File: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft (raw, json)
Hash identifier: loKMQSVzUT/FURazxsu0ASnKkP9gGrRgrxnTd1ZcSWI=
Subject key identifier: 31:78:58:0D:22:86:9E:C6:1D:AD:93:2B:B5:94:03:62:0A:45:0D:93
Authority key identifier: 48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
Certificate issuer: /CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Certificate serial: 0199D16DD45FE641B2B3487D16384005B5B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
Manifest number: 128E
Signing time: Sat 11 Oct 2025 04:00:59 +0000
Manifest this update: Sat 11 Oct 2025 04:00:59 +0000
Manifest next update: Sun 12 Oct 2025 04:00:59 +0000
Files and hashes: 1: SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl (hash: +jNukIZOabGd3kaC63iZZKaCamejdQquJpC4bfK78j0=)
2: gblVtIBn8mlQxz2yiWejH0FdMyM.roa (hash: s042MfHWtsi+LtfhO/ecUQnxypSSkEI5Z5QOz7/NUTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:6d:d4:5f:e6:41:b2:b3:48:7d:16:38:40:05:b5:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48113c916a59da4d43b8efa7739ad1167ace59fd
Validity
Not Before: Oct 11 04:00:59 2025 GMT
Not After : Oct 12 04:00:59 2025 GMT
Subject: CN=3178580d22869ec61dad932bb59403620a450d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:15:a7:6b:f4:21:49:62:4b:55:22:b7:7f:
68:df:ae:52:5b:1c:2c:ab:ed:50:eb:c9:ef:c0:9f:
6b:d0:38:40:9c:58:cb:20:be:1e:37:b4:3d:07:ca:
ea:8e:46:97:ce:65:16:bc:98:ed:c8:b3:2e:23:a3:
09:89:01:92:7f:e7:ce:87:67:8e:44:cb:1c:30:9c:
97:de:4d:ad:c9:0c:3b:0b:23:da:87:d2:02:bc:1b:
23:22:3a:51:81:34:ab:11:93:a7:5d:d6:04:a5:48:
be:c0:26:2d:f0:3e:0f:e0:10:9f:09:fa:48:6c:bf:
c1:49:a4:6c:6f:dd:3e:e8:47:ff:17:84:9d:3c:72:
37:8d:61:fa:f1:64:5c:d6:3c:43:e2:24:d9:f2:db:
38:f5:2d:78:f0:a6:ea:5a:ce:6a:54:34:ad:9c:d8:
9c:f4:38:1d:81:7b:32:39:5b:c8:a3:7e:e2:2c:ed:
e4:b7:09:9e:3d:c0:b4:a4:24:16:a7:2b:a4:a9:e0:
3a:66:b3:e1:e5:f1:cf:01:fa:69:e8:46:03:3a:f3:
04:59:1d:f3:ae:f1:e7:24:32:9c:fa:78:37:81:4b:
09:ac:da:35:16:28:aa:ec:be:4e:33:ca:cb:a8:53:
d2:e3:ed:02:e2:33:46:88:39:40:cc:d7:66:be:bf:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:78:58:0D:22:86:9E:C6:1D:AD:93:2B:B5:94:03:62:0A:45:0D:93
X509v3 Authority Key Identifier:
keyid:48:11:3C:91:6A:59:DA:4D:43:B8:EF:A7:73:9A:D1:16:7A:CE:59:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/8ffa79-7528-4fca-9cdf-69bb282cf5ae/1/SBE8kWpZ2k1DuO-nc5rRFnrOWf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:69:5b:52:40:42:fd:33:ad:75:39:0c:98:e9:1e:d5:77:a5:
0a:74:6d:70:16:93:83:38:8f:ed:c7:2a:85:64:d6:54:36:93:
c9:11:2f:d9:fa:88:0c:77:cb:23:bf:1c:e2:cf:a8:b9:c2:56:
c5:00:01:f2:de:cc:a7:9f:94:da:0a:a9:63:0c:33:b3:b2:41:
79:1b:c6:98:2b:b4:6c:8c:85:43:93:fe:ba:e6:1a:8b:6a:d4:
98:6d:50:16:76:e9:f7:f8:d2:14:00:78:d8:d4:46:0b:a3:ba:
70:8d:fd:cf:db:98:ec:6b:83:9b:83:e8:9d:09:b6:d0:f0:18:
12:09:34:97:d5:a9:c4:f8:0f:1e:7a:fd:9e:69:85:b2:d0:0a:
d1:08:32:3c:14:5e:18:75:4e:f8:be:4a:f5:63:2d:e8:2b:45:
17:1f:cf:73:97:be:d6:58:84:24:1f:ed:6c:6d:c4:d6:59:09:
bc:dd:46:ce:12:be:c3:99:bb:79:1a:e2:ff:cf:b1:d0:c8:d3:
da:28:89:6e:68:6f:e4:19:9b:80:ba:2f:7d:75:75:42:e1:b6:
5b:d2:4e:bd:a2:3e:ad:3e:60:5e:12:67:32:b1:a0:00:9c:67:
c8:4e:ac:88:66:13:84:4d:c5:ed:91:59:16:83:e4:92:3d:f3:
cf:d2:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 10:14:06 2025 by rpki-client