Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
File: sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft (raw, json)
Hash identifier: Stk0QXsuDWXI6jpSOQabsu0P2nBb8ETf/kZjUtk7m18=
Subject key identifier: 32:FF:EA:75:41:6B:CB:DA:3B:49:B8:C4:C8:04:42:B5:1C:E0:03:9D
Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Certificate serial: 0198C724F4F8859B8453285D63C9146CDCF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
Manifest number: 1642
Signing time: Wed 20 Aug 2025 11:02:24 +0000
Manifest this update: Wed 20 Aug 2025 11:02:24 +0000
Manifest next update: Thu 21 Aug 2025 11:02:24 +0000
Files and hashes: 1: NubO0sPxr_cuDCWGfPaZps4XHmU.roa (hash: IosGPlSdz8qVsL7WE6s1aTvXI6+f2Lb8gYJwebh24vo=)
2: XNv5R4Pm86vxr_d7wZIi0Xi614M.roa (hash: gIqD/66IF2g/0ovWyFttP7JqaZx+pP8FQh+Ln/imEBY=)
3: ay-9TuQv4NBBhfLPirWdhwTU6aU.roa (hash: /TV01OKxsZryh7q9+Tt7pDnXawnXcjSi58aGMMVoj6c=)
4: sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl (hash: gheeiuzFIaTs9H8yKn5xnOLvZAjdLDx5ChMMXIUU9Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:24:f4:f8:85:9b:84:53:28:5d:63:c9:14:6c:dc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e
Validity
Not Before: Aug 20 11:02:24 2025 GMT
Not After : Aug 21 11:02:24 2025 GMT
Subject: CN=32ffea75416bcbda3b49b8c4c80442b51ce0039d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:eb:9b:68:73:c8:f1:f6:b2:a3:5b:ca:fb:48:
16:86:42:10:db:14:0e:94:18:a5:04:33:75:40:c0:
16:51:a3:da:78:6f:79:48:46:4e:d3:37:3d:fa:e7:
70:c4:d4:66:7b:ae:00:c5:00:63:9c:d7:9f:cd:a8:
f1:25:ea:eb:e5:55:9a:a0:5f:cf:82:1d:66:ec:23:
38:02:8c:bb:24:3c:0f:f3:d7:96:d4:38:3d:16:24:
ea:53:40:5e:a1:ed:a2:03:a3:3b:2e:aa:42:d9:7c:
8a:b1:cd:e3:44:96:d2:17:27:42:7e:f4:98:a2:3b:
06:ea:e7:62:e9:1f:45:91:a5:b9:dc:3b:f4:ed:9e:
e8:0f:e4:52:29:48:d2:3b:9c:94:4c:89:c7:88:22:
85:21:52:d1:38:5d:68:a5:da:fe:78:3e:d1:0a:07:
da:01:d1:32:a0:98:9e:4a:b3:26:40:9b:1f:04:52:
fd:07:71:c2:15:93:8e:15:d9:8d:d8:91:e4:80:37:
81:fd:24:af:ab:64:bb:5f:8d:cb:9b:c6:41:fb:ee:
11:57:43:55:bf:97:39:fe:5a:1e:01:8d:7d:c3:3e:
42:50:b3:67:73:c9:be:6f:8a:b1:70:54:71:e0:93:
cf:db:7c:14:2d:f0:c9:29:b5:2e:11:9f:00:9a:35:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FF:EA:75:41:6B:CB:DA:3B:49:B8:C4:C8:04:42:B5:1C:E0:03:9D
X509v3 Authority Key Identifier:
keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:05:9e:59:de:a9:00:43:e2:35:da:01:ce:ba:92:f8:e6:
34:6d:0f:f4:d0:fa:14:c5:cf:bb:4a:ac:d3:14:82:fd:c4:71:
5e:a2:62:45:1e:0e:5e:43:44:d1:e6:a3:1b:5c:20:f4:69:00:
9b:03:3a:52:33:40:3f:c5:84:47:fc:93:b6:f4:06:44:05:9f:
b9:90:47:b0:96:14:a6:2a:79:c2:24:85:bd:d6:d9:a0:24:79:
99:ce:51:94:25:a0:0d:48:1e:3f:f8:45:03:b0:c6:cf:1a:0c:
78:95:61:27:74:76:87:f0:93:07:4a:88:a5:75:4c:8e:a1:0f:
04:26:d0:98:a8:40:f1:d8:69:3b:c1:11:43:5c:03:5b:49:c5:
00:a2:1c:e9:2f:1e:6f:65:6e:95:e9:49:ef:d0:ce:1f:00:11:
cd:70:ed:9e:44:4d:55:70:81:50:5e:e1:83:52:90:9c:09:f0:
8e:4c:c5:ba:3a:15:e4:a8:db:4c:f1:70:c3:4d:e7:dd:74:c0:
49:f5:25:cf:9e:ea:fc:52:4a:de:06:da:f7:21:1c:d8:f5:96:
06:0e:60:cb:a5:8b:4b:e5:9c:df:eb:58:f6:f5:75:c0:f3:b7:
8e:0f:56:f2:eb:bc:e1:e7:86:e6:21:57:78:ed:80:06:19:40:
c0:42:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:40 2025 by rpki-client