Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: GFszfL0K5sWv0V7MDwVN9I1HIhMIOCDm9pjvMOtyZdc=
Subject key identifier: 7D:2B:AF:DC:59:55:82:30:AF:7D:99:82:29:39:C5:23:DC:F8:41:C7
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019A213FE77CACF3E6951FFC2F731A426A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 164E
Signing time: Sun 26 Oct 2025 16:00:27 +0000
Manifest this update: Sun 26 Oct 2025 16:00:27 +0000
Manifest next update: Mon 27 Oct 2025 16:00:27 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: +0nJXXqIa8yue4DrCvMgWJwHOavPQYuYldBNEVsx3ZI=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:e7:7c:ac:f3:e6:95:1f:fc:2f:73:1a:42:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Oct 26 16:00:27 2025 GMT
Not After : Oct 27 16:00:27 2025 GMT
Subject: CN=7d2bafdc59558230af7d99822939c523dcf841c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cc:e1:fc:eb:51:4b:9b:de:f3:f9:98:c9:2e:
5c:24:aa:6b:85:77:1d:44:34:1d:17:6d:00:67:32:
3f:82:27:00:ae:79:2b:6d:66:8a:a7:a0:8d:bf:e7:
0c:e6:09:af:f8:77:75:2c:e0:17:08:66:b7:c6:84:
13:9f:e2:e3:dc:1d:64:8c:cf:1c:33:54:67:ad:58:
13:68:80:2b:39:8d:6c:fb:60:4c:ce:04:cb:ae:a2:
e8:ea:ee:90:29:34:2e:0a:ce:9b:6c:5e:23:95:0a:
e9:b0:2f:b6:07:d0:29:88:ba:8e:04:57:1c:d3:0d:
63:51:72:33:fb:d3:09:3d:f8:b5:f2:bc:36:ae:19:
3f:79:0d:64:98:d8:b5:26:86:3d:e2:a4:bc:4a:e1:
a0:74:74:c4:69:71:18:1b:08:d8:31:21:cf:36:2c:
90:bd:1b:66:e1:4c:ac:36:0b:da:91:a1:08:8c:ba:
4a:fe:2a:f5:5b:ad:3b:0e:f3:6e:d1:2a:ae:65:7e:
bf:6a:da:03:e7:d0:a2:8c:8e:2c:b7:77:33:91:56:
f9:79:e3:bb:b0:7d:07:03:04:dd:6e:7b:57:d6:ec:
bb:26:c4:26:ea:c8:85:28:be:16:24:87:cc:44:12:
30:b7:99:d1:77:20:8c:72:82:5a:20:14:e7:8a:b4:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2B:AF:DC:59:55:82:30:AF:7D:99:82:29:39:C5:23:DC:F8:41:C7
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a9:28:18:85:01:94:0f:d0:ea:d2:bf:a4:33:b6:b1:96:92:
34:68:c2:5a:04:9e:53:2c:e9:11:a1:10:88:11:5d:9a:ef:03:
37:4a:f0:c2:8b:6e:23:9b:c1:15:72:ac:1c:d2:82:63:7c:29:
ee:aa:b6:08:ba:58:f6:59:6d:48:01:e3:f4:e0:d1:3f:0f:10:
c0:df:8e:61:2a:af:36:0d:c3:1f:fa:93:a0:42:39:6d:4b:18:
f8:d0:d6:1b:55:61:ed:aa:00:f6:99:91:28:a4:45:17:50:04:
c4:ad:91:bf:09:65:cb:48:61:4f:a0:48:0b:e1:c8:59:8d:b4:
8e:da:3c:10:3a:38:24:d9:ef:89:b7:c7:50:98:1c:7e:de:d6:
ad:31:a6:9a:bd:84:e3:ee:b7:f8:26:94:8f:cd:0c:3f:1c:b7:
bd:dd:92:5e:21:ab:35:7f:19:b1:28:81:6a:1f:db:63:af:1d:
95:51:75:23:d8:77:85:d5:a6:0b:8f:63:87:7a:ce:92:7c:42:
4a:cb:f4:d2:4f:82:b4:ac:b9:1e:a2:0f:9e:ed:14:12:7f:b0:
46:00:d0:77:de:81:34:2c:b1:73:11:91:f1:1e:ac:24:cb:4c:
ce:a9:c6:e0:fe:ad:b6:c3:b4:88:03:f3:06:0f:21:42:86:41:
62:62:49:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:06:59 2025 by rpki-client