Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: V7tiD5rqaXI+ttNAG5O0Ik6Drj2Y7F8I8PKcKFc3Tjg=
Subject key identifier: 00:81:FD:6C:A4:C6:39:E3:BA:9C:51:8F:8D:34:6A:F4:45:7D:17:68
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 019A2A7A46623AF398386925B50731D4AFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 123A
Signing time: Tue 28 Oct 2025 11:00:47 +0000
Manifest this update: Tue 28 Oct 2025 11:00:47 +0000
Manifest next update: Wed 29 Oct 2025 11:00:47 +0000
Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: Kt1XQr/8pwnAWplQKGS1etHHFhCmwsHpoVmOAu5TJhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:7a:46:62:3a:f3:98:38:69:25:b5:07:31:d4:af:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Oct 28 11:00:47 2025 GMT
Not After : Oct 29 11:00:47 2025 GMT
Subject: CN=0081fd6ca4c639e3ba9c518f8d346af4457d1768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:96:ba:6f:d5:81:1b:d0:7f:ec:d6:cf:41:
1f:e4:a3:b8:7e:a9:72:f2:6e:9f:3b:ae:42:b9:19:
bd:f8:ac:bb:6f:43:c7:15:aa:f6:86:66:d8:96:52:
27:18:db:a0:eb:26:e3:84:f0:a0:dc:01:ad:5b:a2:
f0:4e:85:61:df:8d:95:71:69:49:fe:09:39:65:15:
ee:16:fe:9e:83:1d:75:31:42:8c:b2:72:a6:69:23:
2a:e3:5a:70:44:44:d5:81:ca:b1:30:8a:e5:a9:15:
af:c9:f8:72:b8:77:ef:c1:4d:c9:aa:53:38:d3:72:
fe:0c:f0:4b:c8:a0:fe:ca:fb:7c:fe:2c:f4:78:b1:
c3:3b:d5:94:1d:c7:c7:36:44:c2:7d:8a:5e:37:4d:
95:52:e5:5e:7d:27:dd:e3:ba:89:54:98:68:69:b3:
8c:d9:9a:92:9a:a2:48:ae:ba:6f:67:06:62:ec:b6:
7e:60:ba:24:18:cd:0c:8d:92:10:e2:17:6a:56:2d:
42:56:b5:31:a4:c1:02:9e:6a:08:9b:4e:26:cb:66:
0b:ab:0a:a8:cf:43:c2:92:83:c7:93:3e:8b:fc:64:
3a:04:b0:63:7c:aa:2b:e0:e5:33:3b:93:c9:ab:3f:
9f:f0:61:1f:34:fd:26:0d:ca:6e:fc:fd:48:55:bd:
f8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:81:FD:6C:A4:C6:39:E3:BA:9C:51:8F:8D:34:6A:F4:45:7D:17:68
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:97:f9:15:2a:6e:99:de:e6:62:fd:df:f9:df:dd:7d:38:b3:
3c:16:83:73:13:5e:1c:02:c0:1b:eb:05:bb:2a:d5:56:49:28:
10:18:6b:3c:60:89:52:8d:cb:c2:61:24:f8:47:32:72:6c:ec:
8f:a6:d4:71:9d:64:79:45:b2:af:45:1f:25:84:f6:50:b8:49:
13:e6:6f:07:93:b6:06:68:d0:80:4d:8f:54:b0:4a:94:c3:b2:
0e:ec:2e:5b:84:df:59:b4:9d:a4:54:73:f7:8e:8a:e5:09:23:
01:e6:27:cb:5d:07:25:71:8d:69:31:2e:c5:ca:e5:27:51:54:
b8:f4:fa:1f:86:66:7a:29:86:c3:09:bb:19:bc:29:d1:94:a8:
fd:05:89:24:07:b6:fa:a5:fa:4d:a6:bc:1a:4b:d7:f0:ec:8d:
73:26:52:2a:be:3c:ce:e0:19:98:e5:23:3c:7e:e3:b7:c3:16:
52:66:6a:ae:af:ba:59:24:65:98:f2:94:42:64:c3:56:10:4e:
95:40:f8:1c:2c:5b:91:52:90:f4:a6:5f:09:a5:13:81:77:a8:
9e:e3:cf:03:e5:c5:33:6d:94:9d:1b:dc:31:69:70:b6:39:be:
d9:cc:73:bd:b8:de:e8:31:3c:e4:31:22:d1:21:4d:03:d7:9f:
8a:74:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:39 2025 by rpki-client