Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
File: saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft (raw, json)
Hash identifier: Btt/lQ2lfDnmSZ2596fXBpeIoqdt/5ONCkTaGbQzspA=
Subject key identifier: 48:08:8E:7B:3F:C0:DD:B5:8B:8D:7F:14:EB:B6:E9:F0:2C:C8:D3:FE
Authority key identifier: B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
Certificate issuer: /CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Certificate serial: 019A1FF61C1F599EEB98D4C514BD824907B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
Manifest number: 0F63
Signing time: Sun 26 Oct 2025 10:00:13 +0000
Manifest this update: Sun 26 Oct 2025 10:00:13 +0000
Manifest next update: Mon 27 Oct 2025 10:00:13 +0000
Files and hashes: 1: cAAFdZGeVooBzCSUhqsDEyrnbqI.roa (hash: gbj8YLQEZGk70onIHa1ffFfmO4WgyObojVI+6+is2V4=)
2: saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl (hash: mUu+6mVc+zON5m0MDCCwUktBDkbBm40geWpbmKX2S4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f6:1c:1f:59:9e:eb:98:d4:c5:14:bd:82:49:07:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a89b67c66debf5ded3f2880bb4941d30411257
Validity
Not Before: Oct 26 10:00:13 2025 GMT
Not After : Oct 27 10:00:13 2025 GMT
Subject: CN=48088e7b3fc0ddb58b8d7f14ebb6e9f02cc8d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:86:fc:4a:c5:77:93:11:40:83:31:8e:70:51:
74:dd:04:bc:01:ab:e6:49:7e:12:d6:91:75:d7:9e:
49:11:a5:d6:12:2b:b5:82:3d:39:4b:47:7c:a9:e1:
b3:86:3d:da:6a:13:b3:68:88:ef:2f:01:74:3c:3a:
0e:26:e7:9a:9b:b7:5a:89:5d:22:77:31:08:0b:ef:
1e:9f:d9:3c:48:1b:45:d7:cf:67:af:15:9e:34:d0:
54:13:d9:bd:08:ab:19:d9:b5:dd:d1:db:aa:7f:d8:
3e:e8:0f:b6:63:6b:ac:16:96:31:28:5e:fd:d0:d7:
7b:31:60:07:f6:f2:9a:0c:c0:ea:b4:51:07:5f:ee:
7c:7b:d2:93:bb:35:fb:f3:19:50:44:bb:e6:a6:df:
9d:33:de:52:da:b3:34:1e:84:f2:e2:0c:5a:d8:f4:
84:6d:0b:1d:1f:fd:c3:bb:ec:a9:28:df:3d:8d:ba:
a9:65:15:9a:d3:e0:11:ec:36:79:cd:dc:5f:ab:71:
66:f7:db:f8:1e:17:21:26:70:52:88:0c:81:9b:9b:
1e:34:c0:7f:59:14:32:5f:5a:33:04:b3:6e:ea:dc:
75:c2:b3:e3:73:bd:a1:ff:35:b9:40:4a:86:c1:42:
6d:ef:0f:4c:33:c9:ca:56:5a:a6:a7:f8:a9:7c:f3:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:8E:7B:3F:C0:DD:B5:8B:8D:7F:14:EB:B6:E9:F0:2C:C8:D3:FE
X509v3 Authority Key Identifier:
keyid:B1:A8:9B:67:C6:6D:EB:F5:DE:D3:F2:88:0B:B4:94:1D:30:41:12:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saibZ8Zt6_Xe0_KIC7SUHTBBElc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/bc4d7b-3cb7-4f33-89e7-2100bf0f140a/1/saibZ8Zt6_Xe0_KIC7SUHTBBElc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:97:87:76:98:96:0c:4c:b3:9e:7d:e2:a2:74:28:c7:ed:4c:
9d:a0:c1:f3:fb:c4:39:a5:da:3f:a6:2e:55:08:48:75:6e:07:
9d:db:9b:75:8f:22:d1:bd:84:c5:8b:c9:db:34:6c:26:87:8c:
ec:f4:7d:34:da:ad:09:05:b3:08:bc:47:4b:5f:dc:fa:50:cb:
25:c8:e5:74:02:db:ce:11:f8:ce:b6:e8:33:ec:3c:02:e4:58:
35:b3:1b:8d:8d:b9:be:48:b1:1e:d3:69:b2:88:73:3a:8f:ed:
80:8e:0e:95:91:1f:4c:42:85:af:9c:7f:6d:e9:4f:a4:9b:42:
25:a1:8d:d0:31:31:b7:b5:50:67:bd:31:d9:58:36:59:2d:dd:
ad:0c:cf:c9:9b:2e:8b:3b:59:1c:ee:ca:3b:48:ea:79:23:7d:
11:ad:22:45:4b:6d:48:c9:04:0e:93:d1:f4:41:11:b7:92:80:
bd:66:8e:dd:6f:7a:71:82:c1:5f:76:b2:ec:4d:a4:82:5e:fa:
ea:76:e3:52:c6:ae:26:73:67:e3:d2:86:59:89:b5:17:7a:58:
e4:60:fa:40:7a:8c:1f:26:09:43:3f:3a:8b:22:01:34:80:00:
dd:1c:2b:66:9a:f1:91:5d:1d:ae:c7:8d:d0:ed:9a:77:b8:6c:
bd:b0:74:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:30:22 2025 by rpki-client