Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: lGa8S5DBX+msFvC3v9vnXhGb4rN6XPiqYalnDX2ni0w=
Subject key identifier: 25:0C:C7:B3:FA:F1:19:41:1A:12:C3:68:38:8B:C1:5C:CD:37:41:A8
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019A722616D5AD82B5CA86677975DCA41E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 172D
Signing time: Tue 11 Nov 2025 09:01:29 +0000
Manifest this update: Tue 11 Nov 2025 09:01:29 +0000
Manifest next update: Wed 12 Nov 2025 09:01:29 +0000
Files and hashes: 1: 45y2eM_9RmNAB44-r5-uKhDMD9k.roa (hash: a22xKNsQmcfld1bNQDJEKJ/sFCciZX8nT/TNrTr5YXk=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: lH/OLTXndN/BhBkpX/xi2cyCl4Opj/xdBjBiH8xPR3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:16:d5:ad:82:b5:ca:86:67:79:75:dc:a4:1e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Nov 11 09:01:29 2025 GMT
Not After : Nov 12 09:01:29 2025 GMT
Subject: CN=250cc7b3faf119411a12c368388bc15ccd3741a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:13:5a:c7:48:31:0d:93:fe:5d:2a:f4:11:
63:d4:b6:39:d2:2e:63:aa:6b:d3:51:d3:f8:69:2c:
63:92:1b:9e:c7:99:f5:52:a3:ce:12:43:3c:9e:29:
c3:cf:76:37:14:16:c1:43:b5:ba:59:21:ce:12:f6:
ae:95:ea:2a:c2:ea:ae:dd:47:a2:ce:b8:b3:2a:5e:
37:f7:aa:61:ba:2a:29:61:ab:3c:98:46:e1:d7:aa:
01:e6:84:cb:12:9a:b8:ce:fa:36:ac:dd:c6:ff:7f:
08:f7:44:be:f5:9c:8f:5c:57:93:b1:a3:a3:ae:f3:
63:01:aa:7c:41:8b:a2:e6:73:5b:46:c5:06:e4:7d:
64:bb:d9:4d:64:54:a5:2c:27:f5:a5:80:99:b8:5b:
63:17:88:87:f5:28:88:b6:63:3d:43:c6:98:f4:72:
af:4d:6d:b4:c7:e4:c2:52:fd:8e:e2:f8:5c:f7:1b:
b3:7b:a9:31:a0:f7:39:6f:25:1a:c7:21:19:05:59:
98:a8:41:27:4f:53:71:39:05:ca:e4:57:79:33:74:
e7:3a:0a:dd:b6:3b:d1:6f:a2:03:58:01:65:9c:48:
aa:c9:3f:14:a7:dd:3d:76:91:2c:b1:04:9a:ea:62:
3f:c2:53:12:29:be:77:89:0d:5a:a9:37:d5:82:06:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0C:C7:B3:FA:F1:19:41:1A:12:C3:68:38:8B:C1:5C:CD:37:41:A8
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:4a:42:53:17:64:b9:eb:ba:af:dd:d0:77:59:5f:44:07:c9:
c3:22:f5:93:de:69:1c:52:f0:ef:5f:80:d7:fa:18:e6:2f:c7:
6b:b2:a0:32:bb:a6:fd:ea:fe:4f:34:78:ee:aa:6c:0c:32:c4:
f6:19:7f:80:bb:06:85:0f:db:c5:37:be:c1:e5:f1:73:a8:20:
fe:86:a2:7a:91:6e:1f:6a:dc:10:4e:2f:3c:0e:98:0d:cc:c1:
ae:61:b8:c3:96:f3:c4:4d:6c:41:3a:08:05:da:b3:3d:de:05:
79:1f:f5:49:83:4f:e9:21:b2:5e:22:1a:af:76:10:1a:40:e6:
c3:94:22:94:2d:63:14:48:92:62:4e:bc:aa:3b:4a:8b:b9:92:
01:4f:92:ee:ab:5b:29:71:d6:ca:8e:8d:a3:72:77:f9:3b:e5:
a2:d7:d0:15:4f:c7:1c:8e:eb:8c:66:24:43:87:fe:57:a9:39:
03:e2:72:74:ca:16:0e:13:72:9c:ff:21:34:da:e1:34:8d:57:
f2:38:74:d4:d9:dc:8c:3e:0b:ee:55:5a:a9:1b:cb:9e:af:ff:
f0:52:76:3e:8c:23:3c:c6:22:af:34:b0:94:ae:09:98:f9:4c:
61:89:cd:8e:7c:32:01:28:7f:cd:0e:92:97:e7:64:a0:ac:ba:
2f:52:3e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:00 2025 by rpki-client