Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
File: Sb1NKMUsLxLkah774RMkG-AMpY8.mft (raw, json)
Hash identifier: iDws2yQfkO57wNjZIqarCVxUziycesBPvbR/nqqwSYQ=
Subject key identifier: 5A:54:AB:6A:AF:24:90:1A:A9:40:35:B7:C4:0B:64:C6:57:5A:1F:9C
Authority key identifier: 49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
Certificate issuer: /CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Certificate serial: 019933B6E1A384786D6BB2F404C6A7FA6F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
Manifest number: 15D3
Signing time: Wed 10 Sep 2025 13:00:47 +0000
Manifest this update: Wed 10 Sep 2025 13:00:47 +0000
Manifest next update: Thu 11 Sep 2025 13:00:47 +0000
Files and hashes: 1: 6y1fUuUD8qUGYjAEz1eFaXKhOQU.roa (hash: k0HLKZQvuysSS9QC5rHoiO/zSTIxOZBp1dxMMgIJx6Y=)
2: Sb1NKMUsLxLkah774RMkG-AMpY8.crl (hash: 67eb0/RtmI3LRsJEbm5q4S6k/qQPp2EQvorY6SCPH8c=)
3: VNSLVaEs2JND7MBVU_hMkMCe4VI.roa (hash: 4Gvp8QZhAi16/ZBLIXqdlQkt02B6CjfvrGyg5V1EIUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b6:e1:a3:84:78:6d:6b:b2:f4:04:c6:a7:fa:6f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd4d28c52c2f12e46a1efbe113241be00ca58f
Validity
Not Before: Sep 10 13:00:47 2025 GMT
Not After : Sep 11 13:00:47 2025 GMT
Subject: CN=5a54ab6aaf24901aa94035b7c40b64c6575a1f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:99:c3:cb:1f:2e:34:3b:7a:ca:b1:5d:99:
e2:c5:42:49:09:21:70:73:20:bf:73:fc:ec:3c:1f:
af:59:b0:6f:95:65:cf:f6:49:a3:f5:4e:0e:1f:cb:
58:4d:1c:2c:0b:1d:46:57:26:aa:d7:49:f1:6b:e8:
b8:80:1f:aa:99:99:c5:b3:1e:6b:69:2d:af:8b:bc:
0e:66:72:5d:81:a5:01:a6:73:73:79:78:1e:e7:70:
e6:52:1f:90:a1:c2:9c:ee:93:e6:e6:26:9d:e9:a6:
39:66:82:95:69:4b:65:4e:a1:0f:95:f0:fb:38:e3:
2b:b0:4d:86:df:5c:a5:ab:c7:a8:ef:eb:5e:96:3c:
10:89:68:a8:86:d0:ae:5e:85:0b:8b:10:ce:59:5f:
d7:61:2b:8b:d1:76:03:b6:78:bf:26:d9:6e:28:4a:
19:4d:9e:9d:be:4e:ad:18:10:3e:fd:c6:4c:44:3c:
31:0e:80:d8:0c:7c:76:c7:ce:b5:d7:5d:be:f1:2d:
dd:32:79:0d:88:d1:75:15:30:5f:70:fe:de:c5:ff:
ed:eb:31:f2:2f:68:a4:8b:54:ba:0d:3f:ea:5e:9f:
e8:88:99:cc:71:3d:d8:11:b1:a7:a7:e1:ae:94:2d:
92:4e:4c:3a:e9:8d:b1:78:b5:34:de:f6:1b:af:9e:
c2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:54:AB:6A:AF:24:90:1A:A9:40:35:B7:C4:0B:64:C6:57:5A:1F:9C
X509v3 Authority Key Identifier:
keyid:49:BD:4D:28:C5:2C:2F:12:E4:6A:1E:FB:E1:13:24:1B:E0:0C:A5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb1NKMUsLxLkah774RMkG-AMpY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b5af47-9452-4c55-bc2f-5746007cb2a3/1/Sb1NKMUsLxLkah774RMkG-AMpY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c1:92:5a:74:09:95:72:d2:3f:f2:95:e5:8d:80:12:f9:60:
4c:2f:12:c4:4c:f4:47:56:bc:7a:5b:f0:1a:e0:2c:52:9d:87:
37:3e:c1:ef:c9:77:14:2b:e9:66:5e:4b:de:1c:cc:e1:eb:55:
d6:6c:88:72:0c:19:f1:2b:e9:1d:d8:c3:af:06:f4:9e:72:1e:
cb:12:dd:09:21:76:6a:0f:a0:a4:ac:23:35:35:5e:e3:85:26:
46:8b:50:87:ec:45:9e:6b:2a:09:a6:a4:1f:61:53:30:fe:9a:
30:5c:2f:37:e6:8a:86:b5:f9:4e:ef:ef:27:ca:b7:95:21:dd:
f1:40:81:2a:23:f5:17:74:18:bd:7e:c7:09:87:8c:fe:85:9e:
bf:26:42:0e:33:9f:c8:46:90:72:e3:91:a6:ec:16:ea:9e:e0:
a3:e8:a9:56:ca:54:1a:d5:ff:84:b9:f9:0b:e0:04:b6:20:4d:
cf:d4:77:76:9f:c6:b4:95:a4:5d:8e:9f:a9:c9:2e:0e:8f:4b:
4c:b0:d5:2e:30:bd:e2:9b:b4:05:a3:5f:60:b3:d7:ab:6c:53:
72:76:ce:51:fe:45:fc:a6:02:81:66:ab:44:a6:14:1a:34:67:
f3:62:1d:61:99:0f:bc:20:cb:fa:21:37:78:32:21:91:f8:bf:
e7:a2:44:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkztuGjhHhta7L0BMan+m+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmQ0ZDI4YzUyYzJmMTJlNDZhMWVmYmUxMTMyNDFiZTAw
Y2E1OGYwHhcNMjUwOTEwMTMwMDQ3WhcNMjUwOTExMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg1YTU0YWI2YWFmMjQ5MDFhYTk0MDM1YjdjNDBiNjRjNjU3NWExZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpeZw8sfLjQ7esqxXZnixUJJCSFw
cyC/c/zsPB+vWbBvlWXP9kmj9U4OH8tYTRwsCx1GVyaq10nxa+i4gB+qmZnFsx5r
aS2vi7wOZnJdgaUBpnNzeXge53DmUh+QocKc7pPm5iad6aY5ZoKVaUtlTqEPlfD7
OOMrsE2G31ylq8eo7+teljwQiWiohtCuXoULixDOWV/XYSuL0XYDtni/JtluKEoZ
TZ6dvk6tGBA+/cZMRDwxDoDYDHx2x861112+8S3dMnkNiNF1FTBfcP7exf/t6zHy
L2iki1S6DT/qXp/oiJnMcT3YEbGnp+GulC2STkw66Y2xeLU03vYbr57ClwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpUq2qvJJAaqUA1t8QLZMZXWh+cMB8GA1UdIwQY
MBaAFEm9TSjFLC8S5Goe++ETJBvgDKWPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYt
NTc0NjAwN2NiMmEzLzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNWFmNDctOTQ1Mi00YzU1LWJjMmYtNTc0NjAwN2NiMmEz
LzEvU2IxTktNVXNMeExrYWg3NzRSTWtHLUFNcFk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8GSWnQJ
lXLSP/KV5Y2AEvlgTC8SxEz0R1a8elvwGuAsUp2HNz7B78l3FCvpZl5L3hzM4etV
1myIcgwZ8SvpHdjDrwb0nnIeyxLdCSF2ag+gpKwjNTVe44UmRotQh+xFnmsqCaak
H2FTMP6aMFwvN+aKhrX5Tu/vJ8q3lSHd8UCBKiP1F3QYvX7HCYeM/oWevyZCDjOf
yEaQcuORpuwW6p7go+ipVspUGtX/hLn5C+AEtiBNz9R3dp/GtJWkXY6fqckuDo9L
TLDVLjC94pu0BaNfYLPXq2xTcnbOUf5F/KYCgWarRKYUGjRn82IdYZkPvCDL+iE3
eDIhkfi/56JENg==
-----END CERTIFICATE-----
Generated at Wed Sep 10 21:36:31 2025 by rpki-client