Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
File: sBECIYfjOVoVJPoadUHqeTKFr8I.mft (raw, json)
Hash identifier: ZUjWKb4wbls8n7p5rNZwrByC9eXWYAYGUTb296n0tfM=
Subject key identifier: 8F:8B:A3:A7:E3:50:9E:DE:8B:44:CD:C2:7B:61:5D:B5:85:18:AB:51
Authority key identifier: B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
Certificate issuer: /CN=b011022187e3395a1524fa1a7541ea793285afc2
Certificate serial: 019A71B8FF8FA623F500B15C957C1526FCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: pgTDkA03VW0zDxlnTBVHz55HqJY.roa (hash: rBFxYtlNHOxBeylPNnZjz2J7DVtg6cM4mYoztB0MlM0=)
2: sBECIYfjOVoVJPoadUHqeTKFr8I.crl (hash: asUp0kO08qLUpalC5VWLYQthpVLyU3T2d7O+CUbz7sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ff:8f:a6:23:f5:00:b1:5c:95:7c:15:26:fc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b011022187e3395a1524fa1a7541ea793285afc2
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=8f8ba3a7e3509ede8b44cdc27b615db58518ab51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:92:c4:ff:34:ec:c6:f4:3c:29:d6:79:08:
fb:f0:a3:2d:f2:7f:94:05:0a:a8:e6:a9:41:73:5d:
fe:b8:5b:d4:64:97:18:ac:f2:c9:90:e9:1e:bc:7e:
32:2f:e7:f4:d0:67:39:cf:d0:0e:e0:f8:88:68:60:
f8:da:cf:29:84:8a:d8:b2:97:91:86:9e:42:b5:1a:
bc:16:2c:42:7d:43:50:8d:32:93:19:df:a7:74:70:
50:a0:f9:5f:22:9c:bd:41:cc:28:7b:09:b2:a8:ac:
99:db:f1:79:0e:97:75:34:3d:36:05:b2:02:72:ba:
86:f3:25:d8:64:a9:a7:8f:15:ac:3b:9d:f4:df:2c:
16:8a:04:4c:08:fd:fb:61:7d:6f:a7:e8:ba:1c:cf:
82:c3:14:d5:60:b9:00:f5:3b:a4:6e:41:2c:2c:af:
eb:0f:cf:56:aa:ad:ab:f0:39:d3:0d:d9:de:6d:6a:
01:2a:16:fe:3c:bf:38:24:96:da:e7:27:cc:f5:20:
a5:4d:7f:d0:3f:7f:64:01:f2:db:a0:9e:1c:0b:e4:
ee:52:20:84:f5:68:58:da:70:0f:22:34:b5:d2:dc:
bb:f3:e9:20:5b:03:47:ab:9e:2f:97:2f:44:51:22:
32:8b:07:fc:62:b1:05:01:c1:ee:06:ac:89:f2:27:
4e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:8B:A3:A7:E3:50:9E:DE:8B:44:CD:C2:7B:61:5D:B5:85:18:AB:51
X509v3 Authority Key Identifier:
keyid:B0:11:02:21:87:E3:39:5A:15:24:FA:1A:75:41:EA:79:32:85:AF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBECIYfjOVoVJPoadUHqeTKFr8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e8bbd2-1361-41a3-90f0-5334e6b8c5fe/1/sBECIYfjOVoVJPoadUHqeTKFr8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:96:30:90:fe:92:08:50:6c:f8:d0:ff:27:e5:d1:68:aa:b8:
3f:ac:d1:cf:2a:9e:62:47:3c:74:f8:9f:ea:9d:16:2c:f2:63:
59:78:78:a1:5e:4b:93:ad:68:95:d9:1c:80:4b:99:32:1a:b0:
90:b7:b0:75:cc:f2:da:ab:f7:d8:4a:eb:89:4a:06:0e:04:1e:
35:86:97:8c:0b:ea:c5:07:53:1a:51:29:28:23:85:18:b0:4f:
3e:1e:e9:75:64:0d:d5:3f:93:90:73:0e:c0:77:41:8a:a4:bf:
79:91:9c:38:dd:4a:f3:9c:6b:7a:83:53:d2:fe:3d:df:0b:5b:
e3:09:43:53:b4:d0:7b:61:58:79:00:8a:64:c1:b7:f8:f4:46:
b8:3f:fb:fb:58:fd:63:5d:bb:f7:3c:7b:5f:04:1c:a7:a8:c2:
59:7c:e5:64:50:73:b8:4c:68:c1:97:0d:ac:ea:a3:07:36:65:
cc:32:8c:e6:a0:a0:76:12:ac:26:cf:c1:2d:db:b3:55:aa:0a:
12:4f:85:5f:cb:b0:2a:41:c6:e4:1d:31:78:4a:99:41:77:63:
2f:f6:38:16:0e:f6:4f:01:b7:b1:99:8b:b3:8b:4a:bf:b4:28:
20:e5:e1:c2:b8:23:21:72:3d:79:26:6d:73:81:eb:04:b5:eb:
78:cc:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:56 2025 by rpki-client