Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: AmSIk8TYJIL9brZ2EEKtZ2D84rKSP/Uy28y/k2U72RY=
Subject key identifier: B5:9C:98:18:AC:47:62:B4:35:8D:2C:41:66:F6:8D:70:BB:C4:22:43
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 019A7112F0BBB91D5B6AC98881B107359F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 11B4
Signing time: Tue 11 Nov 2025 04:00:57 +0000
Manifest this update: Tue 11 Nov 2025 04:00:57 +0000
Manifest next update: Wed 12 Nov 2025 04:00:57 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: XMKkqW/KDsQz8jopl753Jt2GeOijZzaAB9ktFN/bksg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f0:bb:b9:1d:5b:6a:c9:88:81:b1:07:35:9f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Nov 11 04:00:57 2025 GMT
Not After : Nov 12 04:00:57 2025 GMT
Subject: CN=b59c9818ac4762b4358d2c4166f68d70bbc42243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4d:30:52:9f:d6:79:6b:d9:5c:39:68:cf:29:
7d:cd:2b:f1:07:2c:e0:4c:2d:d5:43:7c:1b:68:f3:
93:0f:50:75:a1:14:03:ad:d0:f0:8b:83:ce:1a:a9:
aa:52:00:cc:3b:b2:ed:18:2c:31:72:fd:de:b7:91:
6e:bd:da:73:b0:39:83:21:96:fb:5f:3e:e5:25:a0:
a6:50:f7:8d:eb:cb:5a:d7:a5:c7:9e:8a:59:e9:7b:
13:8b:84:dc:9e:d3:ef:66:b8:ca:39:0b:c6:fa:13:
5e:36:30:24:3a:26:37:b7:2d:2e:d5:ef:67:f7:71:
30:71:ea:bf:7c:a3:aa:8a:63:e3:0a:dc:1b:9c:bb:
12:74:c6:2b:97:4c:8f:a5:fa:51:93:8f:e0:1f:35:
90:8d:19:4e:14:77:7e:4d:d1:78:96:4f:9c:49:8a:
62:11:2f:ad:e2:9b:e4:a8:4f:9d:ef:b9:6a:e1:bd:
67:0a:dd:d8:f6:70:91:8b:d1:07:30:38:87:06:00:
45:34:f5:e8:e8:98:54:f9:18:75:1e:70:63:50:79:
fe:f2:ec:d6:b6:48:07:55:63:66:3d:43:a5:42:34:
e3:ee:64:30:27:7a:0e:d2:ba:8d:d8:3c:f8:48:33:
07:b2:0d:aa:18:35:7b:72:63:6e:9c:12:1e:db:6d:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9C:98:18:AC:47:62:B4:35:8D:2C:41:66:F6:8D:70:BB:C4:22:43
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:0d:0b:92:23:98:2d:6b:9c:74:23:a2:92:66:7c:1d:da:6a:
87:4d:2d:bd:58:ef:42:ed:46:4a:5b:11:d0:d0:35:99:87:8e:
e8:b7:35:78:43:32:37:be:71:bb:9d:11:c0:02:c9:49:b2:49:
43:5c:b4:5a:ad:46:8a:bd:d8:f0:45:c5:8d:ea:48:6b:d1:c0:
de:1f:08:39:29:80:0e:68:bd:b9:14:d7:5d:5a:fe:7a:05:52:
49:d5:2b:1f:77:bd:89:d5:25:57:65:88:14:52:51:4b:6c:4d:
19:d7:31:40:49:72:c4:95:23:71:dd:55:48:f0:2c:d2:f5:ba:
db:01:9f:42:66:5f:e2:c4:94:75:ff:32:d2:3b:dd:54:d4:c9:
05:72:25:52:00:74:62:fb:9e:c0:70:14:bb:4d:70:09:9f:0d:
36:d3:5f:9b:cd:30:95:e2:87:d6:59:b7:c9:84:09:f7:a2:0a:
c9:2c:59:0f:eb:09:9f:7c:22:c9:7f:4e:e2:0f:fd:c6:9a:8f:
02:9e:2b:f9:5b:20:d2:81:6b:2e:a4:84:8c:38:1b:19:30:af:
5e:55:db:e7:92:56:25:9a:fb:d5:0e:d7:e4:ed:96:0f:eb:f4:
6d:15:b5:62:5f:bd:16:d0:2a:e1:70:1c:6a:95:a7:7e:38:46:
3c:36:ef:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client