Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: NCLn1DGx3eo4Mds4m6VEGP0Bi/E8qmZobKGg0010XPI=
Subject key identifier: 97:4E:AD:33:60:58:93:AB:05:4A:15:16:2D:58:62:D8:6D:AC:EB:1F
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 0199326D335573F7BD430F61EB788CCCEBD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0EE8
Signing time: Wed 10 Sep 2025 07:00:41 +0000
Manifest this update: Wed 10 Sep 2025 07:00:41 +0000
Manifest next update: Thu 11 Sep 2025 07:00:41 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: yuAM6bCACkR9c1C0PeZGeI9vbfEkbNE6DMmffE2I5OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:33:55:73:f7:bd:43:0f:61:eb:78:8c:cc:eb:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Sep 10 07:00:41 2025 GMT
Not After : Sep 11 07:00:41 2025 GMT
Subject: CN=974ead33605893ab054a15162d5862d86daceb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:a9:8e:9a:18:e1:2c:8e:b7:d3:ca:bf:b6:
14:d5:f6:88:a8:27:0c:41:16:42:c1:31:7c:21:7b:
c7:b5:77:ba:80:ab:cb:6b:1d:19:68:ba:7c:93:5f:
3d:15:6c:f1:e6:a0:22:83:f6:95:13:7b:b9:77:6a:
02:c7:eb:d2:67:bf:97:f4:32:bb:36:b9:b0:59:50:
f4:00:31:6b:c0:d4:43:71:b6:f9:59:58:78:e1:fb:
a1:b7:ea:13:2f:d8:42:3b:74:58:69:b6:c7:92:9c:
12:f6:fc:df:f3:38:ab:20:23:b0:e6:8e:7d:29:9b:
af:92:79:ef:2b:26:4c:bd:ad:75:83:b2:0b:0c:0a:
5a:82:f8:a7:02:f2:37:cd:34:28:b1:6e:83:1a:8f:
51:22:22:1b:e4:d9:92:64:9a:23:68:24:5a:e1:c1:
a8:c7:81:18:c6:65:de:88:b8:67:c8:96:4f:e8:0a:
b7:a6:76:36:9c:98:65:24:fe:00:be:66:a2:9c:1c:
3a:0c:30:7c:3e:ca:a6:86:06:8f:ee:ab:e8:69:f0:
c4:34:0b:d4:fc:25:43:5d:21:18:67:91:a3:7b:69:
d8:03:0e:9d:3d:bd:46:ea:35:74:ec:94:57:28:3c:
ac:58:9d:9d:5d:06:82:f8:6e:3e:da:e5:91:55:18:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:AD:33:60:58:93:AB:05:4A:15:16:2D:58:62:D8:6D:AC:EB:1F
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f5:81:12:53:7b:bd:27:cd:4e:43:4c:71:23:c4:1e:05:12:
79:24:a7:f6:eb:7e:9b:a1:18:f2:13:62:e6:e2:8b:55:46:0a:
a3:eb:82:25:44:a7:79:92:6c:18:9b:55:2c:e8:9c:0f:9b:44:
b9:58:a2:bb:ed:10:88:51:db:32:de:74:7a:a4:57:6d:97:d1:
6e:36:7f:f0:b3:e8:5d:a4:09:54:73:a6:3e:df:d0:81:b7:07:
fc:e0:68:fb:61:b2:0a:7c:91:44:7f:d2:25:6e:f7:13:71:9c:
cb:aa:df:6a:36:45:7b:37:f0:4a:3f:f1:63:d3:2d:8e:bc:ba:
9d:bc:45:90:d7:0b:c0:cb:d3:18:24:04:1b:a3:0f:4b:bd:e2:
a6:2e:b4:e2:aa:b4:bc:75:8b:45:a9:b7:fe:c0:70:f0:08:37:
68:af:50:03:3e:86:43:d7:c8:42:df:d5:ab:c2:49:95:1c:5e:
8b:cf:9f:3c:d7:d4:0b:81:63:eb:cc:d3:40:6e:31:1c:0c:67:
5a:b8:22:ed:6d:42:45:82:3f:80:ec:7d:f5:e9:fb:a1:af:4c:
4e:f1:a7:00:93:0b:16:85:ec:63:fa:21:f9:20:71:36:6f:68:
9e:35:75:df:b4:ee:2a:5b:ca:b1:fd:fc:8a:1f:f9:09:21:8f:
98:63:5a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:22:54 2025 by rpki-client