Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
File: sXLI1PyYbeufzrHw0MrifBwxNcM.mft (raw, json)
Hash identifier: qxqj6h5VI4l2dBXh2koBNF2Bs1kh09Hzmv/Kj9PuHLk=
Subject key identifier: 3D:70:3C:EE:5F:72:E0:FD:69:61:55:CF:3D:0A:74:22:49:CD:E8:DA
Authority key identifier: B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
Certificate issuer: /CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Certificate serial: 019923314C014FA2FEE126B7C1C5BC08114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
Manifest number: 0B68
Signing time: Sun 07 Sep 2025 08:00:57 +0000
Manifest this update: Sun 07 Sep 2025 08:00:57 +0000
Manifest next update: Mon 08 Sep 2025 08:00:57 +0000
Files and hashes: 1: Fe5Gqx1aovGtXf8G6dbhghP8Zjc.roa (hash: BUPkFvlzjudVBF56jR+MbrRifodIklIIzIddNH6FiAc=)
2: sXLI1PyYbeufzrHw0MrifBwxNcM.crl (hash: fyBbLiTjj20nX4DQ3s3eZC9UQ1zNZEfrP9B1Y0+nULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:4c:01:4f:a2:fe:e1:26:b7:c1:c5:bc:08:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b172c8d4fc986deb9fceb1f0d0cae27c1c3135c3
Validity
Not Before: Sep 7 08:00:57 2025 GMT
Not After : Sep 8 08:00:57 2025 GMT
Subject: CN=3d703cee5f72e0fd696155cf3d0a742249cde8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:59:98:ac:5b:bd:4d:4d:97:b1:7a:25:8b:76:
25:37:58:b3:21:75:1e:8f:b4:9d:cf:d9:42:81:75:
54:7c:95:4e:c6:5f:43:2d:cc:d3:fc:e6:ff:4f:9d:
69:3b:87:85:71:2e:63:5c:ee:4d:28:f7:fd:90:a0:
92:f2:07:cb:15:b0:37:af:c9:a2:22:b3:45:fa:65:
24:a2:52:fb:e5:fb:51:14:c6:82:e5:f9:2c:f3:85:
77:8b:6c:25:9b:57:3b:63:85:05:a3:e8:6c:81:6e:
95:2c:bf:b9:90:3f:76:24:0d:f4:b9:d4:74:c5:7a:
c8:c0:8c:05:6b:80:68:26:3b:35:a0:94:1e:b9:12:
4e:fe:63:0f:a4:0a:0d:ca:f5:12:a2:7f:e3:29:ae:
fb:0c:79:df:dd:56:6a:17:ef:40:6a:88:2f:40:21:
0a:85:4e:1b:b9:e2:96:31:45:4d:c3:11:01:af:9d:
73:f4:65:9b:67:34:50:e2:ea:94:a0:fc:ed:5b:88:
74:8a:af:21:47:97:dc:81:34:7c:a6:98:42:f4:c3:
bf:13:ac:48:c2:b1:e9:d0:81:b8:ea:40:96:da:51:
ab:f4:b3:6e:0f:9c:25:cd:a1:8c:25:c6:e5:8c:75:
15:f9:80:cc:37:b4:3e:9f:87:20:7f:f7:62:db:1a:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:3C:EE:5F:72:E0:FD:69:61:55:CF:3D:0A:74:22:49:CD:E8:DA
X509v3 Authority Key Identifier:
keyid:B1:72:C8:D4:FC:98:6D:EB:9F:CE:B1:F0:D0:CA:E2:7C:1C:31:35:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXLI1PyYbeufzrHw0MrifBwxNcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/bb3b62-3302-45aa-968a-ecbb3fc0a725/1/sXLI1PyYbeufzrHw0MrifBwxNcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:06:b7:05:49:6e:53:34:f2:20:87:01:d2:16:e1:2f:e6:3b:
d0:1d:8a:bc:98:93:00:e0:d7:9d:23:b2:ce:dc:2f:c9:6c:d1:
e4:af:a3:0e:55:54:df:5d:77:07:2f:df:64:88:76:9b:0e:d3:
7f:23:f3:64:9f:09:d7:c8:10:21:ae:7e:cc:7e:64:65:4d:47:
2f:e6:26:d3:bc:64:bd:97:fa:89:99:88:a0:b0:bd:54:44:d2:
1f:8e:fc:10:b6:0c:62:21:13:cf:01:48:1c:c9:49:74:47:bb:
9f:7c:be:52:92:33:1d:fb:38:2e:ef:eb:8b:40:5d:61:f9:8d:
06:b6:80:15:cb:b7:27:64:ea:ea:a3:44:61:18:54:5b:78:de:
c0:32:46:af:fc:23:c5:17:4d:fe:31:86:a5:18:72:74:c9:1a:
13:73:e2:c3:0e:e9:8e:5b:a4:2a:9d:ab:37:f1:ba:46:0c:69:
d5:45:6b:ee:b2:88:6e:86:95:6f:24:48:e1:48:2a:35:be:ed:
1e:ec:6f:40:fa:24:c5:18:bc:71:89:50:ce:c6:42:81:ed:a5:
0b:0b:1b:41:9e:4f:0c:c6:cb:c5:08:77:35:15:3c:a3:29:1f:
e3:2a:9e:e0:00:1b:3e:a2:97:22:bf:3e:e7:6d:b5:03:d5:8d:
bf:31:a9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:29 2025 by rpki-client