Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: KxNlmVYWnospRmHfMsJOD8GrT1YR7xqDgTtzQvIVbwo=
Subject key identifier: 2C:7F:FA:2F:3D:59:72:36:21:94:9F:47:09:6E:95:E9:01:57:75:16
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 019A1873EF659A172DF921B67030DA2B2609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0DF0
Signing time: Fri 24 Oct 2025 23:00:42 +0000
Manifest this update: Fri 24 Oct 2025 23:00:42 +0000
Manifest next update: Sat 25 Oct 2025 23:00:42 +0000
Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: wP2hOMwntP+mSgECklK5poqRGvP+jv+dyqe8zlT3+WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:ef:65:9a:17:2d:f9:21:b6:70:30:da:2b:26:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Oct 24 23:00:42 2025 GMT
Not After : Oct 25 23:00:42 2025 GMT
Subject: CN=2c7ffa2f3d59723621949f47096e95e901577516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:f1:37:71:9c:c9:cc:c7:55:af:a6:be:9f:
6e:48:5e:ea:3b:0c:3e:ec:88:68:1d:6b:d6:e6:1d:
a7:c7:d6:7e:a6:c6:70:47:ec:85:f5:eb:58:3a:f3:
2b:9d:a7:a6:40:4c:07:ac:f1:b6:ae:a0:2f:c2:d4:
35:16:bb:3c:7f:7a:9d:6b:f4:db:68:2a:11:89:07:
20:89:d1:8f:be:a5:8f:3b:7b:0d:30:8b:d1:5f:9e:
82:2f:b9:c0:ed:ad:2f:46:ee:be:ce:cc:81:cf:92:
e2:56:8d:c2:0d:83:e0:70:cd:01:80:9e:0a:7e:a4:
31:f3:ed:cc:2f:db:d9:f5:39:e9:bd:91:fb:9d:5a:
d2:77:3c:0c:fc:20:d3:6d:d5:f1:eb:62:02:54:a9:
56:d8:12:1c:9a:ee:df:ca:77:65:53:54:4d:a1:02:
a2:ed:75:4d:09:b3:aa:5b:a7:d7:55:fd:d7:a2:6a:
2c:34:bc:f0:eb:cb:1a:49:e4:cf:af:4e:c5:a9:d4:
2e:6d:75:0b:f3:3b:08:94:b2:0d:40:71:a5:3b:ef:
a2:14:6a:46:7f:83:e7:f7:35:d6:68:c9:68:cd:34:
10:93:ec:b5:17:5c:4d:31:aa:81:6b:26:8f:df:0c:
6e:b3:12:4f:82:31:d8:08:53:4f:4e:3b:50:c8:ca:
b9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:FA:2F:3D:59:72:36:21:94:9F:47:09:6E:95:E9:01:57:75:16
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:a9:9b:9d:60:8c:cf:b2:38:41:1b:b5:36:b9:e4:f8:67:
13:17:37:b7:ab:a3:c7:f7:25:21:99:b9:69:3d:9b:a9:74:10:
0b:b8:c1:89:76:7b:a2:02:87:7d:55:88:ab:07:b7:59:f8:32:
26:e8:e6:45:57:6a:10:a0:47:db:2c:f0:3e:64:30:92:cc:da:
58:49:4f:60:90:83:fc:75:5b:33:e4:a2:2f:4d:6b:5c:0e:bd:
c9:fc:1a:51:23:00:c3:ae:0c:e4:82:ac:fb:80:f7:17:0a:8e:
67:f7:b6:63:5a:75:57:2b:27:d6:9a:98:b4:d4:cc:b5:a0:73:
6a:f7:32:71:29:a7:93:70:f9:5f:46:9b:d0:a6:82:8d:2b:d5:
2c:c7:b2:10:68:34:c9:7d:ad:c6:3a:6f:57:15:b0:65:28:b5:
a3:77:45:6e:5f:de:57:d4:d6:68:e2:d6:2d:93:88:72:3a:22:
6f:e6:88:17:79:42:c4:ef:53:3e:31:7e:4e:6d:d6:ef:f6:ff:
ce:32:b2:fc:4c:bb:62:5c:a2:ab:db:53:ac:b7:16:bb:0c:4b:
db:59:c7:eb:d8:ba:c6:63:75:fb:b4:92:aa:53:b4:af:b9:70:
22:b7:e5:29:39:fd:f8:2f:8a:65:5a:30:31:6f:e0:5b:71:e5:
7d:18:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 00:35:58 2025 by rpki-client