Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
File: SBcWctU_34slN3ZPU342Wlknva8.mft (raw, json)
Hash identifier: N9x/eumRouDfusc8kKEc1S3LPTN2nSnMgQV+F/U//EE=
Subject key identifier: FA:7E:96:09:2F:B5:C6:CE:CC:BC:87:4E:2B:86:F4:80:1E:7D:80:3A
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 019922C33F60D45CE2F7C50822EE0F8D3C99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
Manifest number: 153D
Signing time: Sun 07 Sep 2025 06:00:45 +0000
Manifest this update: Sun 07 Sep 2025 06:00:45 +0000
Manifest next update: Mon 08 Sep 2025 06:00:45 +0000
Files and hashes: 1: SBcWctU_34slN3ZPU342Wlknva8.crl (hash: YDIvdIqmWtaUfWrEE+TpxUnWQLY+lx+HuIur874xDFQ=)
2: s2Lbl3UpxlmBcXTI8YXpsTqbGNc.roa (hash: WTVc9DfWoK4a3bzz5sw4kY8+A2sS9+yOsYCNmAmV+gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:3f:60:d4:5c:e2:f7:c5:08:22:ee:0f:8d:3c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Sep 7 06:00:45 2025 GMT
Not After : Sep 8 06:00:45 2025 GMT
Subject: CN=fa7e96092fb5c6ceccbc874e2b86f4801e7d803a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:c1:03:6a:04:25:98:98:62:8b:e2:82:c9:
a6:6b:f9:36:f6:08:6d:f2:0e:3a:35:49:3d:85:d3:
98:7d:b6:95:c5:ba:cd:29:f2:71:f6:4a:cc:87:0f:
64:34:b2:e1:19:2c:62:25:46:fc:31:d8:d4:0f:37:
f9:6e:d8:07:0a:09:bd:02:fe:e9:46:6c:46:22:25:
e7:22:13:45:cf:a0:2d:3d:b9:6e:6a:cb:a0:5b:32:
a9:a1:2e:e6:3c:0b:fb:b5:a3:a0:7f:5f:61:ff:ac:
68:73:9a:0b:89:30:c8:5c:f5:ed:9b:45:1e:90:34:
82:c3:78:51:6b:fc:96:30:b9:6d:1f:47:73:a8:de:
f1:d5:8a:6d:21:3a:fa:48:f2:ba:8a:ae:23:34:fe:
7a:ac:57:e2:ed:b0:c5:6f:27:2f:77:1a:9c:cf:6a:
8a:e0:31:37:89:18:36:b8:28:bb:cd:b8:53:7c:67:
16:82:87:95:05:8f:f5:34:ce:73:b1:5d:c2:5f:e4:
13:97:0a:c4:08:7c:8c:21:83:b8:2e:e1:a6:e7:7b:
e6:91:46:b1:09:56:d6:2c:a7:74:72:84:4e:e0:dc:
30:52:6f:39:94:32:04:5a:6d:32:5b:da:cd:34:21:
56:bc:3f:b7:04:ac:03:7f:fd:54:51:04:30:88:77:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:96:09:2F:B5:C6:CE:CC:BC:87:4E:2B:86:F4:80:1E:7D:80:3A
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:36:b5:20:af:57:a0:92:8d:cc:4f:0b:aa:b1:e3:5c:a1:cb:
56:03:b5:c2:77:44:fb:29:bc:f9:94:6d:20:b6:aa:29:5a:a1:
44:31:8f:94:18:8f:34:e9:79:7e:94:0c:d7:c5:42:59:a2:a6:
4f:cb:6b:b6:e2:d1:05:ec:db:0c:e4:52:74:d6:0e:87:19:6b:
18:17:db:4e:ca:0d:68:3d:80:46:bb:70:09:33:86:c8:40:b1:
9a:f5:c4:06:62:43:39:ae:f0:29:08:78:d3:b7:60:5e:66:e7:
9d:33:76:bd:06:d9:12:d7:bb:8e:4c:8d:9f:ad:37:a4:f0:8f:
b5:92:71:ca:3b:71:d7:a0:8d:1b:92:c5:49:4f:7a:da:20:19:
b5:3b:ec:6c:1d:61:d6:46:80:2a:06:5e:7c:e9:d4:22:91:71:
2f:00:40:07:97:91:15:69:11:f8:e6:db:ff:ab:b8:3a:1c:02:
0d:04:8a:86:d4:d7:9c:15:7e:db:f0:2e:36:45:e2:fc:9f:f0:
ea:d5:1c:ff:70:4b:43:42:aa:ae:3f:da:bc:20:36:61:28:62:
19:23:f7:31:21:88:99:8e:37:b3:b4:77:bc:31:2b:9f:b3:86:
3b:ab:cf:5e:dc:60:e5:d4:e9:64:08:e3:b1:1b:79:72:bd:ad:
2d:7c:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:37 2025 by rpki-client