Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: 1FI0Xfz2dIm6Bp80CSMQramoEDvOk2LSalzx+5KP9es=
Subject key identifier: DA:97:B5:C1:D4:65:D3:88:1E:82:C4:7A:2D:06:BA:B2:09:48:00:E1
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019A21ADBAB67C6F1BD1B59BD7FA203EC720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0DDC
Signing time: Sun 26 Oct 2025 18:00:24 +0000
Manifest this update: Sun 26 Oct 2025 18:00:24 +0000
Manifest next update: Mon 27 Oct 2025 18:00:24 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: sUjdtIyS+ghvIFqQW308WV123F3YBuVWL40tzlJDeJE=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:ba:b6:7c:6f:1b:d1:b5:9b:d7:fa:20:3e:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Oct 26 18:00:24 2025 GMT
Not After : Oct 27 18:00:24 2025 GMT
Subject: CN=da97b5c1d465d3881e82c47a2d06bab2094800e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:8a:b6:34:cc:3d:3c:b2:a1:a9:b8:3f:5e:
e0:c1:e6:fa:a9:41:79:6b:7a:3e:84:e2:0b:65:e2:
83:15:96:a2:05:69:4d:55:d1:09:b4:61:61:0c:5c:
1a:f6:ac:48:9d:d6:ba:2f:40:86:10:8b:31:d7:5d:
b8:9b:d6:39:34:a1:21:38:0d:9c:6a:fd:60:74:2c:
05:1c:ad:49:e8:0a:d6:67:2d:c0:5e:86:02:5e:19:
b0:e4:f6:94:85:67:93:bb:8b:04:7a:29:39:3c:88:
2c:fd:de:de:2e:0d:3b:e6:dc:5c:62:4d:2d:9d:0f:
2c:d5:8b:06:ab:cf:1a:82:ff:94:09:ce:b1:fa:2d:
8b:e2:b3:35:9e:54:b1:a3:a6:1b:48:19:29:8e:ee:
44:c4:80:df:35:72:46:23:a4:9d:54:af:17:64:02:
92:eb:e3:e2:c7:b5:de:c4:6a:6b:fd:6c:59:a0:ec:
75:30:eb:dd:48:26:38:82:31:64:01:9f:4d:61:fb:
96:62:98:87:40:6c:99:fb:06:8c:6b:eb:3e:88:da:
db:7a:c3:c1:01:fa:db:18:a1:bb:02:51:b1:43:62:
27:01:59:4d:99:b9:ec:9a:6b:5e:ef:61:5e:73:2b:
fb:72:49:84:34:ea:fa:71:e8:ec:20:c0:28:2d:42:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:97:B5:C1:D4:65:D3:88:1E:82:C4:7A:2D:06:BA:B2:09:48:00:E1
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:56:04:1c:c2:55:c6:2c:32:2d:9e:bd:aa:4a:04:d2:4a:ef:
31:a8:9e:a9:a8:99:19:97:a1:43:aa:17:fa:81:2c:43:ce:b1:
24:bf:71:ba:51:37:96:69:cf:8c:4d:6a:7d:16:b0:57:f2:6e:
5b:c6:1c:c8:3a:ac:08:4b:34:43:58:b1:bc:a1:48:dd:28:c4:
c7:ea:03:c0:39:0a:62:ca:d9:64:d5:79:66:08:6f:84:f9:97:
e2:89:83:65:e1:fd:b2:a0:d3:ff:62:33:55:f8:d2:05:bf:14:
42:0f:03:93:2c:18:56:d3:4c:e2:3f:45:6b:45:fb:e7:90:d8:
03:5a:75:8b:14:3f:9d:fb:18:99:f3:42:d4:13:ec:8f:52:5b:
90:fe:d1:9f:64:bb:1c:c0:12:26:27:97:ee:e2:1d:4d:d8:8e:
46:87:ce:15:42:62:88:87:e2:28:ad:8c:f0:4c:1f:86:08:1c:
0e:2a:26:31:ed:7f:ea:00:b7:c6:61:49:b9:67:4d:65:0c:21:
45:69:10:a1:14:f6:7d:88:b5:a2:b6:17:22:00:4f:63:96:82:
f9:6d:41:57:7d:5f:e2:63:c4:7d:9e:b6:7e:5f:3b:9b:17:e4:
8e:bf:d6:d6:44:e2:35:3e:85:db:a6:55:26:09:4a:f6:30:da:
8b:30:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:28 2025 by rpki-client