Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
File: 1-SB1W_Z7p9e009ABAnYE6imyPtE.mft (raw, json)
Hash identifier: sJI0y5b/4y1yF/eydF7j2FidTSAa3jAyuJuM1NKh80A=
Subject key identifier: A3:D5:A4:94:05:3F:E5:B1:3D:6C:87:1A:7E:44:D2:FC:67:AE:97:F7
Authority key identifier: F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
Certificate issuer: /CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Certificate serial: 019A70A503BB5C42300E4ED951F560B7FDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
Manifest number: 0374
Signing time: Tue 11 Nov 2025 02:00:53 +0000
Manifest this update: Tue 11 Nov 2025 02:00:53 +0000
Manifest next update: Wed 12 Nov 2025 02:00:53 +0000
Files and hashes: 1: 1-SB1W_Z7p9e009ABAnYE6imyPtE.crl (hash: AUQBr3OQAX8oPsPFn2eBY5h1/mRKyQHAGe3pJdRtjdk=)
2: 8nQwwbTKR2QHt6Bol-B0GBvbksM.roa (hash: SHforER0sbIvAI5iADwv0gU7LdmKAhXUjkcLwpFZRTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:03:bb:5c:42:30:0e:4e:d9:51:f5:60:b7:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f920755bf67ba7d7b4d3d001027604ea29b23ed1
Validity
Not Before: Nov 11 02:00:53 2025 GMT
Not After : Nov 12 02:00:53 2025 GMT
Subject: CN=a3d5a494053fe5b13d6c871a7e44d2fc67ae97f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:d5:52:3b:2a:46:0c:43:42:65:b9:b6:b6:
c2:b3:ea:8a:65:d2:d5:5f:9e:68:4c:c0:30:d6:ac:
aa:96:0d:13:ca:d6:fd:b8:b5:66:97:19:59:a0:be:
78:bc:a5:ce:7c:af:db:47:cf:62:8d:84:97:06:ae:
76:82:67:b6:65:5e:84:55:67:e3:2b:09:4d:71:ad:
12:be:30:f7:f3:ec:03:0b:92:04:57:a2:ea:c4:44:
9b:cb:9e:ba:bf:29:db:81:8d:46:be:ac:f1:69:02:
58:50:aa:7f:9d:92:8f:54:a5:5d:cf:c3:07:32:84:
e5:a6:7e:b3:1d:42:aa:1d:5e:b3:63:0b:fc:7b:5f:
82:ca:6d:af:bb:fa:9d:ab:86:7b:b3:c1:f8:d1:70:
95:83:53:d5:85:82:98:b4:ef:3d:17:2e:b9:73:2f:
38:96:ea:d1:2a:1d:da:f7:aa:c8:77:99:fe:34:7b:
3e:84:67:2a:35:d4:af:24:f3:92:34:2d:71:b6:dc:
99:ca:c5:22:58:f0:7b:02:d9:84:d2:07:03:ed:a4:
2e:e5:b0:6e:04:55:c5:5a:53:c3:e4:2e:dd:a2:27:
d8:94:55:5d:67:82:af:75:bf:d2:d4:c0:a2:c1:82:
3b:18:02:06:db:4b:b5:f3:47:f4:13:47:03:98:a4:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:A4:94:05:3F:E5:B1:3D:6C:87:1A:7E:44:D2:FC:67:AE:97:F7
X509v3 Authority Key Identifier:
keyid:F9:20:75:5B:F6:7B:A7:D7:B4:D3:D0:01:02:76:04:EA:29:B2:3E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-SB1W_Z7p9e009ABAnYE6imyPtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b7c3d-84cc-4c70-bc6f-9e544d246fd7/1/1-SB1W_Z7p9e009ABAnYE6imyPtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:4c:16:fd:7f:91:02:d5:dc:1b:22:a6:12:a8:ab:f2:0c:88:
e6:16:57:00:47:8d:10:37:ea:d2:01:f1:49:c4:8d:d5:92:7a:
af:40:eb:5c:cd:13:bb:d9:93:e7:a9:21:63:bc:12:f9:9e:ce:
01:01:e5:c5:15:2f:54:61:83:08:92:bc:68:16:ae:f3:6e:4d:
cb:e4:3e:22:a6:b1:b9:59:db:7a:69:ed:23:85:de:9d:ac:0e:
8d:7f:c7:a3:73:99:9a:00:30:a9:ef:55:03:13:af:b7:49:af:
4c:df:b4:83:c0:87:4a:28:05:79:33:b0:3b:15:49:b5:a0:1f:
2c:62:fc:97:4e:c2:87:1a:01:33:b0:74:41:ef:ce:18:f4:1d:
3b:03:53:12:ef:37:63:bb:93:b7:3d:db:53:99:06:7f:38:46:
7d:a4:2c:66:84:5f:b9:47:4b:47:99:2c:38:b6:fc:af:18:44:
3c:eb:00:81:3e:83:dc:97:e7:32:30:15:c9:a0:e6:d1:2a:fc:
f9:c2:ed:49:ee:c3:97:34:d2:52:0f:78:fe:d6:de:95:1a:7d:
0d:c0:37:e9:26:61:ca:2c:01:f7:e7:71:4a:43:17:ec:7e:e3:
12:b9:72:a1:26:9f:ee:90:0e:c5:6f:6c:dd:0c:0e:98:3a:df:
2e:27:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:19 2025 by rpki-client