Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
File: sbIBNjzMVWvsiHAladjTgaDolWY.mft (raw, json)
Hash identifier: LR8Mow0QQBwdPzdLZjsX8N+ATSr7BMwg8PApnjtX5+E=
Subject key identifier: E3:D9:57:DC:66:BC:C4:23:83:A6:41:C8:C9:30:E7:45:D5:B1:CD:55
Authority key identifier: B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
Certificate issuer: /CN=b1b201363ccc556bec88702569d8d381a0e89566
Certificate serial: 019921B27B95AC869F3EFC258C141CC72CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
Manifest number: 0CEC
Signing time: Sun 07 Sep 2025 01:02:49 +0000
Manifest this update: Sun 07 Sep 2025 01:02:49 +0000
Manifest next update: Mon 08 Sep 2025 01:02:49 +0000
Files and hashes: 1: lqeFydVXrdHwpq6mWSJTL5OgZAY.roa (hash: YaK2y/qIg0D8N7eA9vbxZ0CRyImPi+H1Zg28ZURYmRg=)
2: sbIBNjzMVWvsiHAladjTgaDolWY.crl (hash: M9LRpa/ThRPNYjhxOZpHFW55KTrBUwCJjy/fk+wU5aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:7b:95:ac:86:9f:3e:fc:25:8c:14:1c:c7:2c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b201363ccc556bec88702569d8d381a0e89566
Validity
Not Before: Sep 7 01:02:49 2025 GMT
Not After : Sep 8 01:02:49 2025 GMT
Subject: CN=e3d957dc66bcc42383a641c8c930e745d5b1cd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:30:b4:7f:bd:94:31:db:7c:cf:d7:03:b4:b9:
6a:29:93:fb:ee:0b:95:72:9d:23:8a:4d:ad:c3:93:
67:de:ac:59:7c:97:23:5c:21:38:48:45:ec:5b:36:
44:af:ca:26:b5:4c:fb:7d:bd:cd:ac:83:0a:5a:85:
22:8f:21:5c:a4:5e:da:dc:6d:84:9c:49:1b:b1:5c:
e9:28:f4:c6:9b:49:7d:05:fe:fb:f5:72:c8:71:f5:
d5:62:e1:89:35:01:80:53:9d:55:21:83:f7:45:20:
ba:7b:cf:df:65:f9:51:95:fd:d5:66:1b:32:77:a5:
b6:4e:a1:23:0c:1c:d0:70:b0:63:64:b0:7b:8b:6b:
2a:dc:e9:ae:3a:3d:4d:b2:c9:0a:78:e2:93:a9:1f:
85:ac:e2:d7:80:ef:43:14:fd:11:54:79:ca:06:6f:
11:41:2c:93:ec:2d:b0:e9:45:a4:94:d0:7d:67:b6:
3d:40:59:94:83:c3:82:4f:fc:01:77:6b:dc:97:98:
c7:fb:53:00:81:62:b8:23:e6:a6:71:8d:28:ca:d3:
8e:81:e9:21:6a:5e:53:1b:87:02:36:bf:89:80:ac:
36:b6:15:f8:09:c2:8d:2e:d0:81:aa:ad:31:95:75:
f6:b9:d3:ab:ee:00:1d:52:5f:fd:9f:80:c7:e8:4d:
e2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D9:57:DC:66:BC:C4:23:83:A6:41:C8:C9:30:E7:45:D5:B1:CD:55
X509v3 Authority Key Identifier:
keyid:B1:B2:01:36:3C:CC:55:6B:EC:88:70:25:69:D8:D3:81:A0:E8:95:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbIBNjzMVWvsiHAladjTgaDolWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/5ae8bf-f999-4c74-9f46-325627c466e2/1/sbIBNjzMVWvsiHAladjTgaDolWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:af:5d:85:04:5a:45:c3:86:31:20:3d:33:70:3d:46:40:cd:
fd:87:09:41:05:e5:7d:2d:c0:3f:69:cd:29:8f:76:95:53:41:
bf:c5:89:66:9f:42:e5:ea:c0:85:1b:e5:f4:f6:cb:1a:80:fb:
96:03:c8:d3:0e:85:bc:48:96:23:97:76:72:13:66:a1:6b:fb:
1b:53:eb:10:97:6a:9e:a5:c8:e1:5f:31:0c:d9:a3:11:23:b9:
40:c7:5f:2f:e2:99:41:d7:ea:49:ea:a6:16:b5:e9:8d:fc:1d:
c0:7b:d9:74:11:46:a2:e3:c1:31:23:5c:7c:ca:34:76:40:93:
36:a4:d8:e5:21:b3:35:c4:fc:57:9d:e2:90:73:e3:e9:48:85:
d9:b3:fa:76:cb:18:3d:0b:d2:aa:84:c9:6b:7a:23:29:09:a6:
19:87:92:a2:2e:ea:10:a6:35:8b:0e:59:85:09:27:ec:73:e9:
44:1f:cc:50:0b:5a:0f:98:d0:c7:c0:bb:99:c8:63:69:d9:67:
ee:e5:32:6b:b6:ca:e3:f4:88:7c:c6:13:45:c6:7b:0d:a3:2a:
67:ee:5c:ac:cd:2a:46:b1:f4:98:0a:bf:eb:84:bd:ba:93:d5:
2e:f5:9d:d1:24:61:6e:24:94:e2:4f:02:ec:77:f9:b7:e8:a2:
3d:ca:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client