Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
File: Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft (raw, json)
Hash identifier: zn1tjrujhkCBhHURW6wHsq+c3OfFreydcbVWgoZ7Ecs=
Subject key identifier: 16:43:42:B9:23:5A:31:2B:8E:64:3D:5F:46:E5:67:9A:1D:77:8E:CD
Authority key identifier: 49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
Certificate issuer: /CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Certificate serial: 019922FA2053C0B3147D3DC41DA4AF962937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
Manifest number: 1107
Signing time: Sun 07 Sep 2025 07:00:41 +0000
Manifest this update: Sun 07 Sep 2025 07:00:41 +0000
Manifest next update: Mon 08 Sep 2025 07:00:41 +0000
Files and hashes: 1: Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl (hash: dlTHIqaR1PhWMtjpiS5JsheBBH903uJeS8799Qevlk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:20:53:c0:b3:14:7d:3d:c4:1d:a4:af:96:29:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ba74c8cbe1e27faca5c67e89d3f623c1f09a5e
Validity
Not Before: Sep 7 07:00:41 2025 GMT
Not After : Sep 8 07:00:41 2025 GMT
Subject: CN=164342b9235a312b8e643d5f46e5679a1d778ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:93:1d:06:ac:47:c1:b4:81:3c:ff:d9:22:dc:
0e:03:95:7e:6e:39:60:f2:7b:36:74:ae:a1:45:07:
d2:4e:d3:d4:1f:2a:1e:f5:d0:7b:31:e2:a3:47:75:
fc:24:54:90:2f:f3:15:65:6f:fa:ca:c6:5c:e6:c1:
e7:f6:70:4b:95:81:eb:2a:28:d7:24:6f:9c:04:d4:
d0:6f:ac:07:9f:21:62:c0:96:f7:c8:d9:fe:a4:80:
18:a9:1a:83:75:df:4a:21:08:31:8c:15:6b:e2:97:
44:86:43:dc:4b:02:f8:f7:0d:17:29:3a:14:cb:52:
25:44:de:42:af:2e:31:8e:74:16:e5:e7:59:21:3a:
89:42:a2:7c:86:e9:4f:2d:2a:f7:9c:b6:c7:da:c7:
70:3e:bf:ee:e8:32:df:c7:19:37:ca:07:70:10:a4:
b9:92:a9:79:d4:78:32:66:a0:11:27:fb:03:d3:f4:
d3:6d:96:7c:35:ec:0c:1e:a0:df:de:40:ac:79:85:
78:ee:f1:d8:07:3e:5f:97:dd:59:17:c4:21:03:82:
27:e0:c9:99:f8:36:2f:38:0f:a4:3b:7f:10:00:bb:
03:53:5b:de:54:41:df:7b:27:fb:e3:8c:95:94:8e:
7d:e3:a2:e6:e8:9c:0f:85:f2:22:f1:ae:81:9c:3f:
47:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:42:B9:23:5A:31:2B:8E:64:3D:5F:46:E5:67:9A:1D:77:8E:CD
X509v3 Authority Key Identifier:
keyid:49:BA:74:C8:CB:E1:E2:7F:AC:A5:C6:7E:89:D3:F6:23:C1:F0:9A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sbp0yMvh4n-spcZ-idP2I8Hwml4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e736fa-81c8-475f-a73e-2bb0e1c0e3ef/1/Sbp0yMvh4n-spcZ-idP2I8Hwml4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:7e:30:7e:d7:48:33:fe:c8:5c:93:35:8d:0c:b0:de:38:
a0:16:ea:16:13:df:27:77:a1:59:e4:2d:1c:9a:a0:02:b5:c7:
9d:9f:76:8c:91:72:d6:17:9b:e6:b6:25:c5:3b:6e:5c:dd:65:
49:6a:5c:08:a8:af:98:29:94:a3:b2:1c:f7:5b:20:fd:96:f5:
c5:3f:f1:93:0e:54:6f:c3:74:55:41:f5:0a:38:9d:e4:bd:0c:
38:94:8a:23:5b:ee:9e:50:a6:40:ef:7a:2a:d1:10:7b:54:3a:
5f:e1:e6:cc:f7:14:f5:b6:2e:73:6f:dd:ef:2c:db:c2:61:69:
17:1f:72:3d:1a:fd:af:ed:ca:67:05:07:87:a9:a8:d2:06:cb:
01:95:74:cd:5c:4c:5f:4b:53:f6:fe:3c:e7:8b:11:ad:bf:2f:
c4:67:f4:ef:f0:ea:39:e3:c2:ba:2d:cb:7d:9b:d0:91:af:2e:
72:1f:dd:89:12:a9:28:28:24:be:2e:ba:b5:b0:fe:77:d3:16:
e4:56:72:24:0a:22:a9:1b:37:eb:66:c4:87:5e:68:0c:f4:4c:
24:8a:bd:14:fd:8d:db:f7:8d:7f:0d:e1:cc:48:a8:22:cd:b6:
9f:40:89:98:1a:34:e8:df:cd:b5:b6:49:55:73:27:40:99:ab:
82:b1:e8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+iBTwLMUfT3EHaSvlik3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmE3NGM4Y2JlMWUyN2ZhY2E1YzY3ZTg5ZDNmNjIzYzFm
MDlhNWUwHhcNMjUwOTA3MDcwMDQxWhcNMjUwOTA4MDcwMDQxWjAzMTEwLwYDVQQD
EygxNjQzNDJiOTIzNWEzMTJiOGU2NDNkNWY0NmU1Njc5YTFkNzc4ZWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7pMdBqxHwbSBPP/ZItwOA5V+bjlg
8ns2dK6hRQfSTtPUHyoe9dB7MeKjR3X8JFSQL/MVZW/6ysZc5sHn9nBLlYHrKijX
JG+cBNTQb6wHnyFiwJb3yNn+pIAYqRqDdd9KIQgxjBVr4pdEhkPcSwL49w0XKToU
y1IlRN5Cry4xjnQW5edZITqJQqJ8hulPLSr3nLbH2sdwPr/u6DLfxxk3ygdwEKS5
kql51HgyZqARJ/sD0/TTbZZ8NewMHqDf3kCseYV47vHYBz5fl91ZF8QhA4In4MmZ
+DYvOA+kO38QALsDU1veVEHfeyf744yVlI5946Lm6JwPhfIi8a6BnD9HQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZDQrkjWjErjmQ9X0blZ5odd47NMB8GA1UdIwQY
MBaAFEm6dMjL4eJ/rKXGfonT9iPB8JpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2Ut
MmJiMGUxYzBlM2VmLzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9lNzM2ZmEtODFjOC00NzVmLWE3M2UtMmJiMGUxYzBlM2Vm
LzEvU2JwMHlNdmg0bi1zcGNaLWlkUDJJOEh3bWw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHx+MH7X
SDP+yFyTNY0MsN44oBbqFhPfJ3ehWeQtHJqgArXHnZ92jJFy1heb5rYlxTtuXN1l
SWpcCKivmCmUo7Ic91sg/Zb1xT/xkw5Ub8N0VUH1Cjid5L0MOJSKI1vunlCmQO96
KtEQe1Q6X+HmzPcU9bYuc2/d7yzbwmFpFx9yPRr9r+3KZwUHh6mo0gbLAZV0zVxM
X0tT9v4854sRrb8vxGf07/DqOePCui3LfZvQka8uch/diRKpKCgkvi66tbD+d9MW
5FZyJAoiqRs362bEh15oDPRMJIq9FP2N2/eNfw3hzEioIs22n0CJmBo06N/NtbZJ
VXMnQJmrgrHoMw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:38 2025 by rpki-client