Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: v2agNNBUMgEhFH0qNiR6Fh/Phh6dR7Kx166ljKLIc14=
Subject key identifier: 12:44:26:F1:95:31:9D:8D:E0:CF:99:60:AF:D8:21:BE:01:F1:BD:89
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 0199C4C56F73DECCC71B9ABA3F7C0959F177
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 1497
Signing time: Wed 08 Oct 2025 17:01:37 +0000
Manifest this update: Wed 08 Oct 2025 17:01:37 +0000
Manifest next update: Thu 09 Oct 2025 17:01:37 +0000
Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: 5jFUUn7A7Qt6zIKxqesWK0xs6oTceOLLakYBBXjNPck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:c5:6f:73:de:cc:c7:1b:9a:ba:3f:7c:09:59:f1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Oct 8 17:01:37 2025 GMT
Not After : Oct 9 17:01:37 2025 GMT
Subject: CN=124426f195319d8de0cf9960afd821be01f1bd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:f4:05:41:7d:0c:7d:8a:26:6d:41:99:97:
b3:a4:2a:9b:7f:b8:04:dc:b8:be:5d:99:ca:8a:f5:
b0:52:4a:e8:4b:4c:82:e7:cf:f1:df:cc:79:8b:81:
40:f9:11:b5:49:64:8a:7f:a2:82:36:14:c4:5a:d4:
ee:f3:1f:d4:d5:75:38:34:4f:f5:b4:86:0f:5c:78:
cf:33:1d:f4:d5:01:a6:5b:d4:ae:b3:1d:7c:09:11:
5f:27:61:7d:bd:f1:8f:43:2b:4b:92:e8:6b:6e:41:
33:c3:0a:66:bd:7e:64:01:ea:0d:2d:a8:cc:4f:31:
c3:f4:24:bb:dd:7b:ca:4f:94:c7:97:96:50:ea:c7:
24:df:07:ff:e6:2e:49:00:ae:11:c0:8a:93:e6:c3:
fb:6c:c6:5a:b9:d7:21:48:6f:76:c1:0d:60:33:66:
4f:69:45:b4:ba:d3:7c:fb:10:89:f8:81:8a:e8:fb:
4d:36:ce:57:ff:e3:63:64:6d:f6:a3:8b:5b:71:8d:
12:ec:40:cc:d8:3a:a6:21:1a:51:da:8d:0c:b7:20:
64:a3:87:dd:87:de:f3:16:d7:eb:44:a9:9f:37:bd:
66:cb:91:a1:51:6f:51:ba:fa:f3:dc:cc:ab:ff:91:
22:9d:3c:18:4e:81:84:7b:f9:d6:0d:17:98:89:fb:
1b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:44:26:F1:95:31:9D:8D:E0:CF:99:60:AF:D8:21:BE:01:F1:BD:89
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:83:e1:d9:64:86:f4:17:ab:d4:0f:db:e6:a2:09:60:1d:a7:
2b:1a:d9:dd:fd:69:3e:04:3f:eb:df:d2:78:6d:21:35:d3:6e:
b6:09:9e:57:0c:78:4b:0d:63:42:ea:b9:90:70:d8:e7:9b:05:
6f:3f:17:1d:49:de:b6:6d:9a:a1:fb:39:11:44:e5:f6:db:5d:
ef:90:f4:cb:59:d0:2b:be:39:6b:7f:61:f2:8e:fd:33:f4:fa:
b0:8b:c4:25:82:0a:6a:aa:f7:18:9f:2b:72:f2:0f:cf:da:32:
89:72:5b:58:a9:b1:39:79:c7:ab:87:a7:fa:f9:c5:2e:bc:89:
fa:5f:db:e6:48:ca:6f:06:8f:90:51:59:8f:a2:33:90:90:dc:
63:71:61:d7:a0:d1:85:2a:b8:42:21:a0:e8:1d:f9:88:a6:04:
a0:c6:08:78:0c:20:46:96:a1:82:74:73:83:29:68:95:9f:84:
27:d7:c6:3c:1e:46:43:cf:ab:cd:30:58:26:6e:68:0d:ae:32:
af:44:e1:41:32:23:e9:a5:57:30:5a:6d:b8:46:9f:c2:fd:d1:
27:40:fa:06:da:a7:4e:a2:60:6f:0b:e8:88:29:28:ab:6c:96:
f6:ce:7b:58:4f:e6:c1:d2:20:ee:c5:37:e3:69:d5:02:ec:14:
69:7d:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:27:13 2025 by rpki-client