Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
File: tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft (raw, json)
Hash identifier: ZqrjbLcB6b8oEjk+llC+iSBc2hk84i4mtbsj17qut1A=
Subject key identifier: DD:96:56:7E:E4:68:64:B3:81:CF:FC:0F:24:13:03:C5:A8:A7:DF:27
Authority key identifier: B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
Certificate issuer: /CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Certificate serial: 019A1CBE5BC4D77C6D04FE37F7FABF620F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
Manifest number: 022B
Signing time: Sat 25 Oct 2025 19:00:28 +0000
Manifest this update: Sat 25 Oct 2025 19:00:28 +0000
Manifest next update: Sun 26 Oct 2025 19:00:28 +0000
Files and hashes: 1: WGUviqGya1U293o1pPaqk6_9nss.roa (hash: UGYTWdobyAgqAcAwAxalKwZisa0V5NIsFjAj8H8KXVc=)
2: tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl (hash: O3j3vNYK1RD4cIAKuqpXzGqFT4AUI0D41l5TTciPwco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:5b:c4:d7:7c:6d:04:fe:37:f7:fa:bf:62:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b526dfa7f9e2884fb21d1073e48c0bd5886adee2
Validity
Not Before: Oct 25 19:00:28 2025 GMT
Not After : Oct 26 19:00:28 2025 GMT
Subject: CN=dd96567ee46864b381cffc0f241303c5a8a7df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:8c:a4:60:2a:61:43:2f:ca:de:0c:b1:af:
bc:1b:cd:7c:1d:78:2e:44:b6:e8:a6:1b:bb:44:df:
60:4f:d5:3b:bf:74:53:43:cb:82:c2:75:61:f4:8b:
80:a4:f5:fa:ba:fc:a2:14:0b:7d:5a:b5:fc:ad:5c:
c8:3a:bb:55:f9:38:c9:8a:d5:b3:0c:37:4c:d4:d0:
93:e7:d9:3c:d0:fb:dd:13:ef:0c:0b:51:56:9c:fd:
81:0d:77:97:b3:8e:60:d5:fa:0e:47:d7:58:20:24:
45:cf:de:bb:49:33:45:34:4b:c9:fc:9d:66:ff:32:
b6:7c:fe:50:98:85:e8:48:fc:46:0d:49:26:b4:3f:
b5:fc:ce:a2:b8:2e:aa:1a:55:4e:f4:ee:e7:9a:06:
0d:14:92:be:f8:13:44:52:7a:28:4d:b3:03:82:0f:
99:98:0b:34:50:a3:29:cf:03:e1:e6:71:0b:19:86:
55:0a:4f:b6:c9:98:0a:ca:1c:77:1d:14:94:99:5b:
c9:4e:80:24:b1:93:a4:8f:a1:02:ae:ee:14:db:19:
6a:0e:e0:ef:f1:83:37:9d:db:68:6b:09:86:e2:9a:
3c:e9:1d:ff:8a:9d:84:4a:2c:0f:83:c3:c6:f2:ec:
27:56:48:96:db:c7:99:a8:28:c2:95:ee:ce:70:00:
c6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:56:7E:E4:68:64:B3:81:CF:FC:0F:24:13:03:C5:A8:A7:DF:27
X509v3 Authority Key Identifier:
keyid:B5:26:DF:A7:F9:E2:88:4F:B2:1D:10:73:E4:8C:0B:D5:88:6A:DE:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSbfp_niiE-yHRBz5IwL1Yhq3uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b3010e-5654-4486-993b-d1cd09568e82/1/tSbfp_niiE-yHRBz5IwL1Yhq3uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:85:b0:30:d3:30:9a:48:25:d2:95:5c:7d:c7:3d:7e:d4:
9d:e9:01:4d:2a:ed:e9:99:6e:cf:e0:ae:ae:82:6a:b7:aa:ea:
63:a0:6b:81:35:f3:aa:af:cd:b2:07:c5:51:66:30:f6:af:c5:
6d:ab:6a:aa:15:7c:8a:93:b9:32:c4:9d:62:8f:a7:ac:eb:f9:
13:f1:b9:c6:80:e1:14:28:2d:4f:6a:65:a9:65:6e:ca:81:70:
e3:80:0b:5a:47:9f:8e:8f:a3:0d:54:70:91:ff:17:c6:45:52:
46:f3:92:fc:f6:fb:02:14:bf:73:30:f1:3f:41:51:7e:57:cf:
68:eb:69:89:39:77:c8:d1:9e:fd:46:86:92:62:22:cb:cc:91:
71:e9:cb:73:a6:e4:c4:90:de:36:02:83:ff:9c:82:0b:c0:80:
10:9c:cf:2c:60:c3:7e:75:28:7c:75:a4:40:b8:26:9d:4b:fb:
1c:2f:1b:ae:ec:31:9e:ec:88:03:0f:ed:e0:cc:39:7f:db:6d:
23:3f:3c:5c:07:fa:4d:92:15:1a:12:35:d5:df:ab:30:00:28:
7c:28:df:d8:c1:7c:16:8c:3a:b4:c5:9c:85:75:8c:1a:f5:44:
f4:ce:af:f3:bc:3c:d9:f6:a1:d0:6f:97:a2:2d:3a:07:db:0e:
b4:b4:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:46 2025 by rpki-client