Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
File: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft (raw, json)
Hash identifier: fpVavLToWMEo/Bs0jF0/bR2W4UE+IXCKnBvG8nEvb+c=
Subject key identifier: 83:CE:8A:BF:F4:CC:73:E7:4C:06:61:DF:0E:56:1F:9F:32:36:A9:65
Authority key identifier: 48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
Certificate issuer: /CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Certificate serial: 019A213FF8DA2C54CBB8DD3220E66BB1139B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
Manifest number: 15E0
Signing time: Sun 26 Oct 2025 16:00:31 +0000
Manifest this update: Sun 26 Oct 2025 16:00:31 +0000
Manifest next update: Mon 27 Oct 2025 16:00:31 +0000
Files and hashes: 1: SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl (hash: rtm91fPctkXVSGDM4c8KgRWHeyukQW2Vapds8Gmdin0=)
2: fDIcgxuviPH1xRvEDyo8UqwcwI4.roa (hash: rJoyrLL7oo1+w5siaXJh6iXQyoUFBWgTdCtgNT3fEho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:f8:da:2c:54:cb:b8:dd:32:20:e6:6b:b1:13:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48167dc1dd2bf991d70cf6ee87f4361e75cef20d
Validity
Not Before: Oct 26 16:00:31 2025 GMT
Not After : Oct 27 16:00:31 2025 GMT
Subject: CN=83ce8abff4cc73e74c0661df0e561f9f3236a965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:e6:69:3f:9e:df:3d:88:1b:5c:87:d0:08:
f6:5a:c5:8e:7d:b8:cf:4f:26:66:05:72:d6:a3:a8:
a5:46:9e:c1:ee:a8:eb:e9:ba:b9:ad:4e:bf:5a:e6:
35:61:6e:60:bc:d6:47:11:9a:96:cb:f5:34:15:f1:
4a:ab:ee:5d:b7:13:0b:6e:95:84:58:4b:04:e5:e6:
c7:cc:0a:8d:bd:5d:c7:19:5a:88:b2:a5:be:3d:f0:
49:0e:e9:e9:a6:e5:e9:72:ca:d6:42:79:86:e0:3e:
26:01:8a:96:a1:2d:74:bd:e2:ae:d6:a0:b7:14:5f:
05:e6:37:7e:03:e4:2b:e9:db:28:59:04:c1:50:d8:
a0:09:71:b3:f3:d8:b6:3d:3a:a7:22:38:32:67:4f:
c9:9e:7d:19:55:0e:eb:90:44:11:0e:0c:95:74:95:
67:bf:72:bf:c0:7b:51:d0:bd:9d:02:7f:14:33:60:
f0:ba:f1:93:9b:08:95:93:43:ac:53:b9:42:a3:c3:
25:ac:b1:44:1d:ac:74:19:e4:9b:31:68:3e:50:9a:
8c:e4:ad:29:9f:ec:34:80:3a:44:d7:71:74:fe:3a:
4e:e9:6a:65:6a:e5:6b:35:f9:29:21:84:28:90:9e:
c9:b0:7d:d6:f2:c2:e3:65:ee:71:71:ef:72:4b:e1:
d5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:8A:BF:F4:CC:73:E7:4C:06:61:DF:0E:56:1F:9F:32:36:A9:65
X509v3 Authority Key Identifier:
keyid:48:16:7D:C1:DD:2B:F9:91:D7:0C:F6:EE:87:F4:36:1E:75:CE:F2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/616c00-fbeb-4b30-9e25-9e91fca78f47/1/SBZ9wd0r-ZHXDPbuh_Q2HnXO8g0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:77:f9:ef:5a:50:2c:11:ef:bd:e9:83:63:66:48:6c:08:fa:
9f:bf:02:74:3a:18:01:78:e4:a5:37:f7:9e:22:08:f2:d5:44:
46:1a:cb:a4:a5:50:9f:f7:bc:d6:79:1d:40:03:9f:a2:75:8f:
f4:be:3b:69:cc:ed:8f:9a:f6:61:82:d6:23:37:1f:7a:74:6d:
e5:ba:13:41:72:f1:e8:2e:45:76:4d:41:76:76:78:87:12:93:
77:e2:0c:5e:27:a1:5e:4e:51:63:21:0d:82:55:40:b9:2e:0d:
da:7b:9e:0b:42:1a:52:41:0b:26:a1:13:ed:f2:b8:da:c7:43:
79:a5:d4:d0:d0:14:f3:02:49:f6:f2:3c:d7:ea:39:11:e4:9e:
e1:a0:e3:dc:38:a1:4c:cb:94:0c:bd:a5:8c:32:f5:cd:b0:26:
01:d1:03:55:ba:80:22:39:e8:9c:22:48:b3:86:b5:fc:d6:57:
d3:d0:6e:54:5e:de:53:35:99:03:66:b4:10:4b:f1:54:49:b4:
70:15:87:eb:24:a6:55:d8:17:7a:49:fb:ea:e4:67:d6:03:ab:
a8:1a:25:6e:c4:8e:90:a8:43:f0:46:f2:4a:ed:e6:04:f0:73:
de:1b:0d:e0:83:d3:f8:5d:1a:ed:69:b3:0b:d8:c9:e3:ee:35:
19:55:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:54:46 2025 by rpki-client