Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: e8ObMV3sDVzsztcLFT2Qj51dCTQA0cPmSrsP+vTO270=
Subject key identifier: D4:4E:BA:A2:6B:38:AE:6F:2E:09:A8:1A:01:00:C4:A3:99:42:51:96
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 019A7149D0F5775F99994D76F7D34D7790DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: y9XDUYaGo/t7EZniDsH91k2vY4s1xislnu12G17HZ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d0:f5:77:5f:99:99:4d:76:f7:d3:4d:77:90:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=d44ebaa26b38ae6f2e09a81a0100c4a399425196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:60:29:a3:27:e0:44:02:56:c1:2b:e6:bf:
63:09:4a:c5:e0:ee:7a:f1:ed:87:a0:50:b4:76:9d:
89:24:d5:bb:11:95:e4:a1:e7:4a:05:12:86:a2:c1:
e1:e5:60:cf:05:e1:a4:7e:7f:0b:ad:53:a5:41:4e:
31:64:f0:1f:f6:de:6e:73:3a:a1:59:cd:7a:6b:62:
d8:72:6d:db:35:11:9b:4b:07:29:4a:e7:88:63:80:
ed:31:ee:73:7a:8d:6c:20:55:e5:e8:96:4a:18:05:
e0:95:03:fb:21:64:81:eb:53:59:35:24:60:ec:6f:
d9:14:46:20:ad:b6:bf:49:ea:8c:08:41:b1:64:41:
4c:b5:cd:0c:b0:06:06:51:41:f3:1f:dd:2a:47:71:
6b:63:f3:b3:fd:fb:31:99:ee:2b:d2:18:4a:5e:eb:
f5:21:64:1e:06:2a:c3:aa:00:67:a4:dc:d0:c1:c8:
86:5e:2a:a7:b2:43:6f:b0:53:92:58:6d:91:0b:ed:
cd:66:dd:21:30:5c:d0:58:c1:0d:99:2e:45:0f:47:
ec:52:d9:32:6d:40:0d:59:8e:b0:43:8b:60:44:8f:
92:cb:cc:36:8e:7b:3c:a5:fb:e7:7f:2d:22:6d:90:
d3:f6:f7:68:bc:1d:fc:59:6a:6f:a5:2c:b1:8c:49:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4E:BA:A2:6B:38:AE:6F:2E:09:A8:1A:01:00:C4:A3:99:42:51:96
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c8:58:1a:f6:16:3c:f7:86:5e:c9:72:8d:b7:61:71:eb:8f:
95:29:b5:b2:9e:9f:b2:6f:c1:03:0a:ff:5d:1d:77:54:cd:7b:
14:5d:00:c2:63:aa:b4:de:3c:ca:bd:28:fd:89:0d:fa:e1:5c:
0e:04:33:4f:1c:ef:41:76:17:64:cc:40:98:22:41:9d:26:aa:
82:fd:cd:4f:6c:6a:95:f5:49:00:ab:5e:4e:89:24:1a:a8:1a:
11:b9:91:1f:2e:d3:51:f1:91:fb:e4:6d:0d:62:5c:2e:3f:6f:
74:26:9c:d2:c8:cd:e0:fc:ca:7b:05:bb:07:0e:09:60:f4:41:
23:a8:cd:95:76:86:60:09:9d:41:1f:81:4c:1e:82:07:bf:19:
ad:a5:83:4d:47:52:a7:f4:85:0b:f2:3a:bf:92:af:e2:f2:99:
c3:e8:96:d3:b7:b3:12:59:05:99:c3:44:8f:09:a2:6f:79:a7:
c5:2b:04:1d:91:55:0d:82:4b:ed:ff:8d:7d:7a:1d:5f:f9:b1:
3c:7d:82:da:30:97:04:cb:54:6c:95:f7:47:ee:1f:05:22:d2:
b1:ab:d2:84:79:19:14:5b:5e:39:b6:51:33:19:a1:02:28:fa:
be:1f:4b:ba:8d:5b:8e:1e:38:ff:96:05:19:3c:41:29:00:6b:
e3:24:3d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSdD1d1+ZmU1299NNd5DcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YmYzMmFiZjc3ZjQxMmMyMTBmNDA5ODIyZDEzOThlYzNi
ZWRhOWIwHhcNMjUxMTExMDUwMDU0WhcNMjUxMTEyMDUwMDU0WjAzMTEwLwYDVQQD
EyhkNDRlYmFhMjZiMzhhZTZmMmUwOWE4MWEwMTAwYzRhMzk5NDI1MTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfpgKaMn4EQCVsEr5r9jCUrF4O56
8e2HoFC0dp2JJNW7EZXkoedKBRKGosHh5WDPBeGkfn8LrVOlQU4xZPAf9t5uczqh
Wc16a2LYcm3bNRGbSwcpSueIY4DtMe5zeo1sIFXl6JZKGAXglQP7IWSB61NZNSRg
7G/ZFEYgrba/SeqMCEGxZEFMtc0MsAYGUUHzH90qR3FrY/Oz/fsxme4r0hhKXuv1
IWQeBirDqgBnpNzQwciGXiqnskNvsFOSWG2RC+3NZt0hMFzQWMENmS5FD0fsUtky
bUANWY6wQ4tgRI+Sy8w2jns8pfvnfy0ibZDT9vdovB38WWpvpSyxjEkxiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNROuqJrOK5vLgmoGgEAxKOZQlGWMB8GA1UdIwQY
MBaAFEm/Mqv3f0EsIQ9AmCLROY7DvtqbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEt
MGJlNjMzN2JmNmI2LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi83M2NkZDAtMDY0OS00ZmU5LTk5NzEtMGJlNjMzN2JmNmI2
LzEvU2I4eXFfZF9RU3doRDBDWUl0RTVqc08tMnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPshYGvYW
PPeGXslyjbdhceuPlSm1sp6fsm/BAwr/XR13VM17FF0AwmOqtN48yr0o/YkN+uFc
DgQzTxzvQXYXZMxAmCJBnSaqgv3NT2xqlfVJAKteTokkGqgaEbmRHy7TUfGR++Rt
DWJcLj9vdCac0sjN4PzKewW7Bw4JYPRBI6jNlXaGYAmdQR+BTB6CB78ZraWDTUdS
p/SFC/I6v5Kv4vKZw+iW07ezElkFmcNEjwmib3mnxSsEHZFVDYJL7f+NfXodX/mx
PH2C2jCXBMtUbJX3R+4fBSLSsavShHkZFFteObZRMxmhAij6vh9Luo1bjh44/5YF
GTxBKQBr4yQ9sg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:25 2025 by rpki-client