Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
File: SB_i792qAKxeR9HC1UsEuWEHqUU.mft (raw, json)
Hash identifier: /1opZEfqwCSGSrzdNc6Zk1DMwN6KWnve3z/xt5Bn/oU=
Subject key identifier: 74:5B:75:67:51:18:E6:CC:42:CE:FB:F1:D6:02:4D:99:EB:D6:44:0C
Authority key identifier: 48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
Certificate issuer: /CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Certificate serial: 019A722611E9B71C7B5161D7763C77294DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
Manifest number: 05A0
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: EzssP_udqCfWQ6VA2hmooPr9R8Q.roa (hash: 7hD4+XAbJWne9LmiwxOyp2EPaz4XFOHQUQwlnknUzS4=)
2: SB_i792qAKxeR9HC1UsEuWEHqUU.crl (hash: CuLLVuRQF10xIRthHo79yVxyKY5rbPSz71Y9367/g1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:11:e9:b7:1c:7b:51:61:d7:76:3c:77:29:4d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=481fe2efddaa00ac5e47d1c2d54b04b96107a945
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=745b75675118e6cc42cefbf1d6024d99ebd6440c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:67:f3:54:44:4f:41:4b:af:80:6e:0e:01:
56:59:38:36:95:71:87:21:d7:bf:64:ef:3d:d1:c7:
e5:66:a1:65:cb:af:15:63:cb:d4:57:1d:b3:26:ec:
1f:a7:a9:94:d2:28:6f:d6:44:2c:f9:fd:96:2e:72:
05:2e:21:ec:12:bf:31:79:79:80:45:f7:97:e7:c7:
e7:f4:3c:7e:3e:3b:72:6f:62:fb:16:29:c2:6c:04:
3f:06:e1:e7:d7:69:03:30:33:57:34:48:d1:ce:9c:
49:5c:5b:9a:b7:10:e4:b0:d1:f3:95:4d:e7:39:6a:
1f:e3:03:fe:3a:47:cd:bf:34:d2:20:59:da:d2:6a:
41:1f:bf:0b:79:39:b5:d2:f3:a4:1d:44:4e:8a:e4:
72:f9:a6:7d:9a:58:0a:e0:81:a6:3d:5e:d4:3a:a7:
e8:51:92:55:bb:f4:0b:07:7a:a7:90:8b:a1:97:24:
e3:c0:8e:3f:14:81:e4:b4:68:d8:c8:65:fc:b3:79:
38:9e:9d:55:86:ca:af:36:af:99:31:12:fd:cb:9c:
92:ba:9f:ae:d1:83:cd:71:c1:fd:f6:cc:b0:a9:1b:
b0:22:ea:f6:32:de:8a:e2:e1:13:cb:87:78:48:c2:
7d:c1:b6:ed:59:6a:ac:ff:26:64:56:ec:db:75:21:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:75:67:51:18:E6:CC:42:CE:FB:F1:D6:02:4D:99:EB:D6:44:0C
X509v3 Authority Key Identifier:
keyid:48:1F:E2:EF:DD:AA:00:AC:5E:47:D1:C2:D5:4B:04:B9:61:07:A9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SB_i792qAKxeR9HC1UsEuWEHqUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e78bc1-bd64-4453-97c9-ac092140967e/1/SB_i792qAKxeR9HC1UsEuWEHqUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:97:cc:2a:fc:59:d2:e1:df:36:55:ad:06:cc:1f:6b:e9:3b:
3e:6d:b7:1a:84:20:22:77:34:5d:96:d8:f0:6e:2f:a3:3e:f5:
bb:37:e6:32:67:c0:a6:88:1d:a8:42:07:dd:93:6f:5f:0b:c8:
0c:ac:8a:31:99:60:7e:d6:5b:62:fa:51:ef:4f:20:1c:1c:db:
13:39:be:3b:6f:ff:d0:c6:0f:7b:47:79:fc:ae:5d:1a:4b:93:
33:44:de:0c:48:42:45:a4:f4:71:72:28:ad:06:dd:a0:50:60:
93:01:3d:bb:11:72:a8:06:e9:35:06:f9:6f:af:0c:02:5d:1c:
87:bd:3b:09:14:28:c4:95:0a:29:97:59:3a:e0:26:54:30:9e:
fb:1d:eb:b1:d0:1c:97:49:55:3a:3e:e0:b4:5d:31:8c:f0:f8:
1a:32:61:1e:79:81:a0:b7:48:f1:21:27:95:d4:d6:dd:d5:26:
d6:a4:d1:1a:06:0f:42:3d:bf:89:88:8d:dc:5e:f4:01:3b:93:
9b:46:9f:2c:be:91:6c:81:ca:d6:23:ad:06:0d:ea:d9:9a:d3:
7e:90:97:66:f7:2c:02:e3:2e:e4:03:aa:6f:63:6a:f0:af:ce:
1c:9e:1f:aa:c8:3b:f6:87:da:55:21:32:ea:a6:b9:49:17:06:
da:24:3d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:37 2025 by rpki-client