Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
File: Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft (raw, json)
Hash identifier: 7OxcNBJJIzeyI/HUt+63VJbG85SFbz2kzxoflssvj4Q=
Subject key identifier: 10:EC:95:9D:1A:D5:B0:A1:42:9A:94:23:91:0C:16:14:14:CB:6D:ED
Authority key identifier: 49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
Certificate issuer: /CN=49bf32abf77f412c210f409822d1398ec3beda9b
Certificate serial: 0199233188075BB4F3B726288A0EE5F416B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 08:01:12 +0000
Manifest this update: Sun 07 Sep 2025 08:01:12 +0000
Manifest next update: Mon 08 Sep 2025 08:01:12 +0000
Files and hashes: 1: 5syV7PgPBQbiBbuoFj10-aiKKG0.roa (hash: lK1gem+kZrAq5cKIs+CpHdM5BUtwnIwQ62pWDxE9JKs=)
2: Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl (hash: 83Qlfyb9XX+SiC1o0JPGnPjOwHAJ4Kdb2gvQB0wtuDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:88:07:5b:b4:f3:b7:26:28:8a:0e:e5:f4:16:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bf32abf77f412c210f409822d1398ec3beda9b
Validity
Not Before: Sep 7 08:01:12 2025 GMT
Not After : Sep 8 08:01:12 2025 GMT
Subject: CN=10ec959d1ad5b0a1429a9423910c161414cb6ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:f9:cf:14:4a:1e:c5:35:54:74:dd:e2:2f:
48:96:e8:6c:95:a1:6e:a1:ad:d9:e8:8a:b1:4e:2a:
9d:eb:c6:2b:17:77:36:5c:52:bf:4d:40:32:fd:4f:
34:53:b0:e3:a4:6b:a6:1d:0b:27:ff:31:68:d7:80:
04:7e:78:08:84:2e:d5:cb:ac:6f:b6:c0:89:e1:59:
54:6f:cc:af:92:6c:e4:a8:01:9b:00:1e:f0:8a:01:
df:77:27:43:d7:74:e4:af:2f:4f:6b:d8:b7:a6:04:
5c:da:2a:7e:d9:7b:ef:4b:69:32:0a:af:57:73:1d:
3e:34:ad:28:ef:f9:98:9a:f7:b5:6b:29:af:28:60:
74:30:4b:e2:59:5d:96:15:d1:9e:8d:33:94:95:3f:
ee:8e:ea:7b:e3:0c:73:0e:4b:a5:08:8f:0b:2e:a7:
5f:26:49:c3:f6:78:f7:70:5b:cd:6e:36:77:e9:56:
41:c0:9c:60:1f:9e:ed:f8:fb:93:61:d2:f7:d2:f3:
9d:53:5c:56:f7:9f:96:8b:84:93:ab:d3:21:d1:85:
7e:25:39:c9:6b:55:f4:2d:2e:07:c2:24:2c:3b:9c:
95:2b:72:d5:56:b8:b8:bd:a6:9c:61:c9:1f:dc:8d:
03:38:51:7f:37:b8:ba:48:d1:55:f6:a0:ca:78:e6:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:95:9D:1A:D5:B0:A1:42:9A:94:23:91:0C:16:14:14:CB:6D:ED
X509v3 Authority Key Identifier:
keyid:49:BF:32:AB:F7:7F:41:2C:21:0F:40:98:22:D1:39:8E:C3:BE:DA:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb8yq_d_QSwhD0CYItE5jsO-2ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/73cdd0-0649-4fe9-9971-0be6337bf6b6/1/Sb8yq_d_QSwhD0CYItE5jsO-2ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:12:8c:14:28:4e:48:82:cf:74:4e:f9:0e:39:e7:9e:49:ad:
91:df:63:96:c0:1c:a0:2b:0b:18:ae:9d:98:41:a1:7c:a6:d6:
03:76:9b:d2:d7:33:bf:99:51:cc:fc:1c:1e:61:7a:3b:d6:0c:
e3:43:47:05:25:4d:ce:d1:3a:b8:66:a1:39:53:a1:9c:70:7b:
28:50:b6:d7:a4:5a:fe:73:1c:f1:dd:43:6b:e9:e6:bc:a5:df:
7e:f3:0a:af:56:c6:a1:a1:09:a2:02:80:3f:c8:94:8e:a9:de:
69:d7:64:8c:7f:ef:0a:5b:1a:55:7c:21:49:bd:66:d4:88:8d:
c0:a4:a4:9b:41:0e:8f:df:5d:2c:1c:18:22:6c:e3:6c:11:d7:
a5:c1:a2:26:ab:df:21:d6:b6:f3:2f:e2:7f:79:e3:fb:60:52:
8e:5d:e7:ea:15:a2:64:80:87:b7:a9:70:e7:ca:05:42:f8:11:
af:2b:1f:1d:1f:38:89:2a:0e:f8:f1:5a:4d:dc:bd:99:02:8c:
a0:4b:a7:79:05:cb:f4:df:c2:b6:c4:01:07:cf:99:47:5e:73:
40:00:36:78:69:69:e8:d0:60:fd:19:bf:01:b6:25:c4:44:8c:
7b:bb:48:af:56:d1:03:a8:94:6c:bf:1e:b5:61:1d:a4:5d:63:
a6:17:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:11 2025 by rpki-client