Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: FvThHfZbh7mvxFsYmJVZkprN5fpmh3I5g7VEiUY2sjs=
Subject key identifier: 60:37:12:33:0D:C4:50:76:99:C7:92:B6:3F:0E:14:73:15:E6:EF:E8
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019A71B8867E6467A95A548AD1C435ED17B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0D9A
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: inHDWUMRk195/z2vfPK0/vZaELdJKzPIATkYVX4CSQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:86:7e:64:67:a9:5a:54:8a:d1:c4:35:ed:17:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=603712330dc4507699c792b63f0e147315e6efe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:4e:92:1d:8c:4e:44:1c:d9:83:3f:90:bd:
e1:5c:43:5e:ca:2d:b4:90:11:ed:51:42:8b:a1:61:
35:9e:17:81:d7:0d:8b:62:89:77:d9:5c:c0:58:04:
f7:7b:56:d1:e7:7e:72:53:99:71:5a:10:fd:4c:7a:
c6:f4:e6:ba:fc:44:eb:3b:3d:1d:10:39:fc:28:c0:
cc:d6:58:b4:a6:62:02:a7:82:90:3a:f9:b2:eb:f1:
c3:f0:28:a8:f6:8d:06:7b:08:28:6e:76:79:78:42:
e3:85:ef:23:6b:e7:4d:bb:f8:13:93:02:b8:0b:96:
57:01:a1:1e:ec:7a:83:4a:f6:0c:90:b5:7e:e3:97:
33:f1:c7:80:94:17:00:d6:2a:fb:c2:c1:88:f0:54:
2f:b8:38:68:6e:2f:9a:ec:fc:20:c6:43:89:84:cc:
17:ac:ec:c2:ca:c8:af:f1:06:d2:a1:cf:8d:12:01:
08:95:46:b2:46:7b:91:aa:f3:5a:a6:b3:b8:d3:6e:
94:4c:f1:eb:93:69:2c:c3:72:10:41:c7:a8:c2:28:
10:d0:5c:ec:70:3f:c8:67:3d:5f:a5:ca:d1:ce:e3:
3d:f6:8a:73:d0:2b:45:35:c2:08:83:8b:f8:42:83:
37:77:50:f3:eb:b8:5d:25:30:c1:80:69:40:ea:1f:
c3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:37:12:33:0D:C4:50:76:99:C7:92:B6:3F:0E:14:73:15:E6:EF:E8
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d5:f1:2c:f5:f4:a1:24:d0:20:dd:dd:69:77:d0:ae:7c:54:
87:44:c5:62:cc:d9:e3:b8:0d:30:18:3f:f1:d7:16:ff:39:f9:
39:79:05:4c:b9:6c:4c:75:6a:1d:bb:2c:c2:81:24:21:e0:2e:
7f:0a:a3:39:91:ff:60:38:0d:c8:ed:62:41:f6:ec:9e:91:1e:
be:14:ef:1e:85:11:9a:69:4d:d1:00:06:22:22:ff:be:62:f0:
82:98:0c:c2:97:4c:c4:d7:2d:2d:2f:af:4c:64:3d:37:2b:5e:
68:48:3e:ea:88:4e:e9:81:f7:1f:33:97:fe:d2:3e:09:dc:38:
fc:e2:03:0a:e9:e6:52:7c:8b:9c:1d:c5:f5:6c:0f:a7:51:51:
5c:7a:ae:14:1d:b8:fe:9a:f9:98:4c:b8:b8:38:48:78:c3:18:
ab:82:98:cf:9c:c2:c4:7b:c3:86:ef:00:01:02:fd:a5:45:70:
85:b2:d4:9d:c7:97:6f:cc:91:4a:45:1a:99:47:a1:5e:73:f2:
4c:26:e1:61:67:13:46:16:68:4c:ea:90:2c:5a:67:33:d3:9a:
68:6c:bc:ec:df:44:be:2b:bf:95:3a:d4:23:bc:ae:db:68:67:
79:e8:8c:04:be:ea:47:af:f6:10:2c:1f:14:80:f1:f4:64:b7:
ce:25:30:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:11 2025 by rpki-client