Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
File: SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft (raw, json)
Hash identifier: hiGGKAV4436dM/X441wG8Sy2l9YPwSAR/a6PMFmQSu4=
Subject key identifier: BB:65:C9:84:D6:0B:9B:C8:60:9C:BC:9A:20:24:1A:F2:33:0A:B0:34
Authority key identifier: 48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
Certificate issuer: /CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Certificate serial: 019A7225CFA5038F32B88B08DFDE665C277F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
Manifest number: 0CE7
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl (hash: QxDsaNvq8ebRDe7TI3B4U/9DrCIZUnQ9IOGKtUcNTz0=)
2: Y-7q9kMx7K8cMciXy89it_JnTm4.roa (hash: wJcOhSoBOyFBrlWVrA3BCNeS+YWlGnk/CzTU7ZurV5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cf:a5:03:8f:32:b8:8b:08:df:de:66:5c:27:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4813b9c5fe8315807d7856cd230003aa16741c0d
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=bb65c984d60b9bc8609cbc9a20241af2330ab034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:81:ad:47:92:f1:64:3b:ac:21:cd:31:01:d9:
c6:bd:5c:df:8e:c7:35:b2:59:13:89:3c:e6:ed:64:
de:67:76:93:08:8c:d4:2d:2c:61:79:a6:e5:bc:7d:
5e:97:4f:8e:7d:73:8b:f6:66:89:e5:86:04:a3:31:
f4:8e:c5:6f:6d:d7:15:4c:5e:e8:8e:3f:49:d8:30:
c5:24:40:a4:04:82:26:10:55:b4:2d:69:fb:fb:22:
38:b4:17:c1:45:bc:b1:eb:7f:da:04:b1:8a:4e:42:
ee:46:8a:73:da:41:64:1e:dc:74:e1:47:ff:30:92:
24:3b:e4:07:62:63:ba:98:b1:c3:99:a8:ea:1d:0e:
0a:b2:6f:e3:9a:49:e4:e0:7d:10:08:25:4b:91:37:
aa:ba:08:d8:60:c9:fd:94:39:99:eb:46:6e:40:27:
fa:65:e9:8c:ce:43:88:20:71:60:03:cc:fb:03:ad:
1c:88:1f:0e:05:f7:b5:4e:ad:52:40:cc:81:39:2c:
16:92:44:ce:6f:c3:2c:b6:e7:22:19:85:18:8b:ce:
57:aa:71:18:f7:5e:d7:47:36:d9:a3:01:b5:b1:f0:
78:5c:a5:41:45:13:b2:7b:06:38:42:42:8e:ef:3f:
f0:fd:ce:b3:b8:21:70:3e:eb:92:e4:65:2e:ef:8e:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:65:C9:84:D6:0B:9B:C8:60:9C:BC:9A:20:24:1A:F2:33:0A:B0:34
X509v3 Authority Key Identifier:
keyid:48:13:B9:C5:FE:83:15:80:7D:78:56:CD:23:00:03:AA:16:74:1C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBO5xf6DFYB9eFbNIwADqhZ0HA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/8f41a4-e140-4f65-80e6-28170ac02b32/1/SBO5xf6DFYB9eFbNIwADqhZ0HA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:62:b9:bb:32:ea:d4:00:69:a1:f1:b0:f0:b4:44:b6:18:c2:
f3:98:9a:f0:54:5d:6b:9f:1b:d5:74:27:fa:23:72:48:ea:60:
d0:fe:91:47:e9:fe:85:09:e3:53:09:f0:a2:17:4a:9b:92:a0:
95:a8:b5:a1:3e:89:fe:c0:94:fe:54:51:c0:02:a0:d6:c4:ae:
26:d8:c5:ad:2c:a5:c3:66:b1:a7:28:c3:a0:f8:c7:69:09:32:
ab:24:88:67:f8:b6:be:03:91:b8:f1:93:4f:1f:19:06:cc:7d:
c4:c2:a0:b9:e7:a4:10:e8:e7:dc:fd:b9:99:37:f2:0c:91:c6:
d8:af:c7:b7:a2:32:5e:42:69:72:b2:de:0d:5d:5d:e7:50:a4:
67:65:14:65:dd:60:aa:1b:a2:f4:09:6d:2e:f7:9a:7a:48:34:
27:44:01:6a:79:37:e2:5f:b0:fd:b9:54:e6:1c:d2:03:5a:66:
8b:fe:35:ae:1e:f0:b1:d8:09:a6:69:75:a6:0b:9f:50:75:a1:
13:0b:40:63:99:b4:83:44:b7:07:1d:81:81:b6:e6:2b:7d:1f:
11:11:66:be:f0:3b:7e:81:9c:57:0b:67:7e:18:08:a1:f3:55:
0a:b1:25:49:e2:0b:25:4d:54:d5:53:f0:56:4b:78:bf:da:0a:
be:55:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:48:02 2025 by rpki-client