Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: Hni7KiSni+U9JWAazo4tp7uCK8IwSHoZRe+DmTMbpjY=
Subject key identifier: 4C:E1:1A:D8:BF:AF:02:5A:96:98:F5:89:48:C6:F3:43:22:02:F0:E3
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019A236519C97E32486E162834A081218C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0A16
Signing time: Mon 27 Oct 2025 02:00:19 +0000
Manifest this update: Mon 27 Oct 2025 02:00:19 +0000
Manifest next update: Tue 28 Oct 2025 02:00:19 +0000
Files and hashes: 1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: DIp+mAi3mmU5Ix3FQuFIr+Ub04+/oM3gJN7KpTDaIHU=)
2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:19:c9:7e:32:48:6e:16:28:34:a0:81:21:8c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Oct 27 02:00:19 2025 GMT
Not After : Oct 28 02:00:19 2025 GMT
Subject: CN=4ce11ad8bfaf025a9698f58948c6f3432202f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:32:ad:83:94:97:cf:bd:e6:77:79:c4:79:
8d:71:21:71:b4:95:5e:b7:a2:2d:74:93:c8:b2:bb:
ba:60:ba:e4:95:ae:a3:81:70:2c:07:c4:d0:c4:54:
3f:24:e6:78:a9:95:9b:78:c5:b6:93:6d:04:e0:37:
c6:f6:3b:0a:f0:db:d2:d9:bc:40:29:9c:95:72:76:
25:47:f7:01:fa:bb:e5:bb:3c:76:b3:1d:91:23:d2:
7d:b5:bb:fd:53:6f:a8:ca:35:62:41:d8:47:f9:34:
21:b9:f4:46:87:80:ed:b6:73:b1:d9:26:88:de:62:
90:42:1f:b5:0e:f2:91:6f:aa:3a:6e:9a:ed:8d:e8:
ea:9c:0a:24:0d:65:85:84:6a:8f:50:10:7f:45:0f:
f0:55:c8:ca:35:bb:91:dd:ac:d6:c8:f1:52:32:6e:
51:42:ce:59:16:ff:84:f9:49:b5:5c:f1:80:60:92:
96:5a:9a:5a:3c:71:21:d4:81:d0:4d:50:e7:76:78:
a5:b5:02:86:17:ee:2e:5f:9b:7d:65:56:17:90:9a:
0b:cd:81:3b:f7:4f:72:6f:c6:0a:b5:43:a3:9f:2f:
53:80:49:82:72:20:ae:ed:a3:ff:e0:30:03:b7:c8:
23:40:48:97:b8:c5:7a:1b:71:27:f7:17:22:ea:c6:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:1A:D8:BF:AF:02:5A:96:98:F5:89:48:C6:F3:43:22:02:F0:E3
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:95:88:09:0d:e9:62:ef:32:cf:42:cf:e6:fd:ed:db:79:19:
08:ee:d5:29:56:4e:cf:48:f2:e0:64:05:9b:85:53:74:35:27:
44:26:b6:c1:7f:81:51:3c:0f:32:e4:c7:28:45:be:84:ba:63:
d7:09:98:e2:b1:f3:00:9f:ef:33:d3:e9:d2:1d:3a:55:80:fd:
df:7f:1c:f1:d2:9b:89:60:e4:92:05:b9:b4:6f:d3:c7:65:ad:
4d:5c:13:e5:a4:b1:4f:58:65:41:68:85:ea:c4:56:9c:e8:ca:
a4:84:74:44:2d:e8:84:93:e2:bb:44:40:a4:e9:fa:ae:8d:11:
8c:12:2a:a1:21:9b:2c:2e:be:fa:5e:87:9f:fa:e9:8e:e7:f6:
c8:d8:67:61:a2:fc:f3:d5:e1:40:ea:1a:64:50:e8:4d:04:cd:
7f:ca:e8:05:e0:38:f8:f9:49:7e:fd:92:fd:7f:1a:31:02:a8:
6e:35:84:08:a8:c5:e7:af:3e:5a:d6:cc:59:78:ad:d9:a4:bf:
f7:23:7e:a8:7a:0c:0c:65:16:a3:c0:b4:0b:4b:55:a4:6b:85:
b8:79:fe:7d:1b:08:36:bf:12:5a:79:40:05:e9:5c:c2:ad:49:
96:13:1e:78:51:1d:ab:06:63:b7:79:bd:d4:31:c7:91:0b:9c:
5c:2a:5b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:50:31 2025 by rpki-client