Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: h8DokJF15bAPP2U1VDknZ+njSPe3wVazybyDGUaJh8I=
Subject key identifier: 0B:68:1C:9C:29:5B:C8:48:1D:9A:72:15:12:DF:13:DE:D0:02:A2:16
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 0199C3B1EAB3531CC27213634B307862CA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 12:00:40 +0000
Manifest this update: Wed 08 Oct 2025 12:00:40 +0000
Manifest next update: Thu 09 Oct 2025 12:00:40 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: /tX0BlAdDzytFsFrv03dVUMoUK1bFdW1V262XBCDI4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:b1:ea:b3:53:1c:c2:72:13:63:4b:30:78:62:ca:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Oct 8 12:00:40 2025 GMT
Not After : Oct 9 12:00:40 2025 GMT
Subject: CN=0b681c9c295bc8481d9a721512df13ded002a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:88:75:e9:95:fa:20:16:71:74:23:37:31:
56:57:18:e9:f2:de:ef:4b:af:f7:48:74:95:dc:36:
e5:2c:2c:27:10:94:f4:0c:43:7c:ec:3f:2d:de:50:
2f:4c:a0:ef:f2:66:a0:38:b0:a0:aa:16:fe:07:11:
b5:e2:db:0c:5f:8d:c7:41:1b:83:5f:08:20:fd:c3:
18:91:1e:bd:22:a9:b3:f6:65:90:db:38:78:95:c0:
35:eb:0d:25:dd:a6:59:b4:9f:fb:de:8f:eb:d2:d7:
bc:fd:c1:f9:a7:9d:0f:89:13:1e:2c:81:bd:65:93:
62:52:ac:3f:a3:25:f3:3e:e0:71:fe:af:a2:9e:2b:
3c:86:c7:72:4d:cb:cf:fd:03:f2:2d:0e:80:30:e2:
2a:ae:e0:45:7d:77:a0:ee:7d:4f:d9:46:f1:6e:0e:
4f:78:4a:64:3d:2e:9d:2f:fe:00:ed:de:09:71:e2:
81:7c:67:80:ad:81:bd:82:3e:dd:c5:d8:49:62:3b:
bb:6a:6e:55:98:67:7d:13:64:e9:cf:fa:ac:0b:9e:
de:e0:d3:0b:ce:d2:26:d5:6d:ae:b2:bf:d2:0c:6e:
d6:f2:6c:7c:f1:3b:80:9d:6e:4c:e5:52:d9:ea:ed:
ec:4c:27:74:38:62:aa:0e:61:32:63:36:7f:8b:49:
cd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:1C:9C:29:5B:C8:48:1D:9A:72:15:12:DF:13:DE:D0:02:A2:16
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9e:de:df:3f:54:e3:42:80:84:27:0d:83:77:46:ef:3a:b1:
98:5c:5b:63:bc:f8:73:b6:d9:61:d7:c5:68:d1:84:8b:08:f0:
88:8b:4d:a5:8f:90:a2:7e:1f:c9:81:eb:c2:6d:1b:ac:58:41:
0e:f4:b9:ac:0c:8c:2a:0e:63:ed:bc:2e:14:11:a2:2d:ff:0f:
2b:53:7f:f4:9c:39:03:af:af:b0:9f:a8:49:be:92:e7:97:2e:
79:46:93:6b:c7:b2:bf:58:52:ea:1d:8c:1b:2b:ab:4e:0a:0c:
5c:c5:98:da:d4:fd:ab:a1:0f:01:b7:e1:20:ed:6c:f6:f5:30:
19:b8:a5:39:bb:90:51:c8:2e:7c:10:e1:1a:28:f2:8a:48:d1:
2e:14:32:96:bc:3e:b7:a3:bd:2a:ea:ab:18:94:12:01:06:a6:
01:09:9c:5f:fe:8e:f8:ca:6a:c3:f6:fe:a7:b5:25:1e:d9:17:
a4:6c:ed:bd:a1:ea:f5:45:80:9e:e0:94:8f:9e:28:3c:86:cd:
76:e5:a7:48:52:d3:ee:53:5c:fd:eb:68:28:04:b9:7c:cc:04:
a0:f4:1b:6b:3b:c1:93:64:32:3b:68:a4:1f:3e:f3:2a:88:02:
04:2f:bc:7a:79:7d:48:98:3e:05:03:f2:3b:26:37:1c:4b:c0:
11:e9:8d:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnDseqzUxzCchNjSzB4YsqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4
YTU4NWUwHhcNMjUxMDA4MTIwMDQwWhcNMjUxMDA5MTIwMDQwWjAzMTEwLwYDVQQD
EygwYjY4MWM5YzI5NWJjODQ4MWQ5YTcyMTUxMmRmMTNkZWQwMDJhMjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuaIdemV+iAWcXQjNzFWVxjp8t7v
S6/3SHSV3DblLCwnEJT0DEN87D8t3lAvTKDv8magOLCgqhb+BxG14tsMX43HQRuD
Xwgg/cMYkR69Iqmz9mWQ2zh4lcA16w0l3aZZtJ/73o/r0te8/cH5p50PiRMeLIG9
ZZNiUqw/oyXzPuBx/q+inis8hsdyTcvP/QPyLQ6AMOIqruBFfXeg7n1P2Ubxbg5P
eEpkPS6dL/4A7d4JceKBfGeArYG9gj7dxdhJYju7am5VmGd9E2Tpz/qsC57e4NML
ztIm1W2usr/SDG7W8mx88TuAnW5M5VLZ6u3sTCd0OGKqDmEyYzZ/i0nNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtoHJwpW8hIHZpyFRLfE97QAqIWMB8GA1UdIwQY
MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt
MTdmYjRmZmI5ZmFkLzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk
LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZ7e3z9U
40KAhCcNg3dG7zqxmFxbY7z4c7bZYdfFaNGEiwjwiItNpY+Qon4fyYHrwm0brFhB
DvS5rAyMKg5j7bwuFBGiLf8PK1N/9Jw5A6+vsJ+oSb6S55cueUaTa8eyv1hS6h2M
GyurTgoMXMWY2tT9q6EPAbfhIO1s9vUwGbilObuQUcgufBDhGijyikjRLhQylrw+
t6O9KuqrGJQSAQamAQmcX/6O+Mpqw/b+p7UlHtkXpGztvaHq9UWAnuCUj54oPIbN
duWnSFLT7lNc/etoKAS5fMwEoPQbazvBk2QyO2ikHz7zKogCBC+8enl9SJg+BQPy
OyY3HEvAEemNOA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:58 2025 by rpki-client