Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: xMn3G3tW2/P4Sx5vSZSuMTilUnukyX7FUZulX4Tjsv0=
Subject key identifier: 9A:F6:D6:01:A0:72:B0:32:66:BB:98:21:83:57:A3:1E:28:1D:2D:3A
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019A2E1FC763E4F28F03D7B32492299100B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0A24
Signing time: Wed 29 Oct 2025 04:00:25 +0000
Manifest this update: Wed 29 Oct 2025 04:00:25 +0000
Manifest next update: Thu 30 Oct 2025 04:00:25 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 3PBKtYrcvdB4dhmDJz3KvH+y87xkUVfP0/Wva0ObRBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:1f:c7:63:e4:f2:8f:03:d7:b3:24:92:29:91:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Oct 29 04:00:25 2025 GMT
Not After : Oct 30 04:00:25 2025 GMT
Subject: CN=9af6d601a072b03266bb98218357a31e281d2d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:dd:62:4c:68:07:d5:bc:b8:1f:cd:3f:99:
5c:de:11:a6:f7:34:01:cd:9f:05:65:75:81:2d:02:
18:9c:89:73:01:d6:d9:49:f7:82:25:c3:5b:94:6b:
e4:99:49:28:dd:03:e2:9f:93:49:12:1a:a2:7f:a0:
70:41:42:be:86:33:1d:90:b5:96:42:4f:48:25:20:
40:eb:66:f8:a9:a4:5e:1c:e3:f6:5a:ca:df:62:15:
d4:95:e4:e3:f8:4c:9e:bc:01:7d:16:92:f2:ae:ce:
d9:b2:6f:e1:a9:99:3b:0d:70:eb:2b:e5:9c:de:45:
84:32:45:b6:76:c9:4c:3e:06:5e:87:ef:46:f8:3f:
57:5a:ed:7d:89:be:53:60:d8:9b:53:62:09:db:c4:
28:c7:51:d8:70:49:c2:fd:38:30:a8:f3:50:e5:e3:
b5:4b:bf:75:a1:67:0a:d6:f5:68:21:c5:0a:38:9f:
9e:d8:b6:f7:a6:75:64:36:4f:40:47:ff:04:17:5d:
f1:4b:d8:99:11:1b:93:93:92:9d:3e:4b:18:6e:7f:
73:f4:8e:2e:5a:09:e2:b7:10:d0:b0:c1:73:48:6b:
ec:ec:7b:4c:12:39:31:6f:1d:fc:62:ca:7a:2a:e5:
36:c8:dd:5a:03:2f:8e:0f:fe:0e:fb:0f:47:1e:20:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F6:D6:01:A0:72:B0:32:66:BB:98:21:83:57:A3:1E:28:1D:2D:3A
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:a6:b5:3e:aa:91:ca:d9:be:85:0b:4c:4c:3d:33:44:9a:
58:87:45:dc:ca:d1:4d:c5:7b:63:03:c5:28:e3:00:57:e4:80:
a9:8e:e4:c3:db:a7:e4:28:62:56:6f:0c:b1:84:04:40:94:55:
07:58:ac:de:d8:6f:85:60:06:f9:18:40:5d:93:66:9b:f2:c4:
41:1d:4f:4c:fd:ed:9b:bc:61:8d:fd:0f:81:d8:04:a0:37:16:
7b:59:e8:d1:92:1b:78:8e:bf:32:ba:a3:b6:8f:e6:ee:3e:38:
a9:38:1e:bd:0a:c5:64:be:37:2c:e2:06:72:1b:4d:5f:78:97:
af:e8:81:50:99:e3:e5:a0:3d:5c:94:5d:2d:a1:c8:86:a7:81:
64:e0:94:f0:3f:c8:f0:46:18:15:87:a1:bb:1a:c2:d8:20:0e:
44:a6:63:10:23:05:72:d5:63:5a:29:51:a9:97:a2:3a:93:ff:
fd:20:92:60:ab:f0:1e:25:c0:98:cc:49:0e:aa:d2:17:67:3b:
57:be:1c:6e:65:73:7f:e8:86:da:97:d5:4b:f9:32:09:41:cb:
53:7b:97:87:6e:d0:92:ac:d0:b1:dc:39:21:0a:72:f8:a7:cd:
77:36:f4:8b:29:07:ee:89:b3:68:c8:16:5e:12:69:c6:38:3d:
84:d1:92:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouH8dj5PKPA9ezJJIpkQC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjUxMDI5MDQwMDI1WhcNMjUxMDMwMDQwMDI1WjAzMTEwLwYDVQQD
Eyg5YWY2ZDYwMWEwNzJiMDMyNjZiYjk4MjE4MzU3YTMxZTI4MWQyZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjHdYkxoB9W8uB/NP5lc3hGm9zQB
zZ8FZXWBLQIYnIlzAdbZSfeCJcNblGvkmUko3QPin5NJEhqif6BwQUK+hjMdkLWW
Qk9IJSBA62b4qaReHOP2WsrfYhXUleTj+EyevAF9FpLyrs7Zsm/hqZk7DXDrK+Wc
3kWEMkW2dslMPgZeh+9G+D9XWu19ib5TYNibU2IJ28Qox1HYcEnC/TgwqPNQ5eO1
S791oWcK1vVoIcUKOJ+e2Lb3pnVkNk9AR/8EF13xS9iZERuTk5KdPksYbn9z9I4u
WgnitxDQsMFzSGvs7HtMEjkxbx38Ysp6KuU2yN1aAy+OD/4O+w9HHiAhuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr21gGgcrAyZruYIYNXox4oHS06MB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+2mtT6q
kcrZvoULTEw9M0SaWIdF3MrRTcV7YwPFKOMAV+SAqY7kw9un5ChiVm8MsYQEQJRV
B1is3thvhWAG+RhAXZNmm/LEQR1PTP3tm7xhjf0PgdgEoDcWe1no0ZIbeI6/Mrqj
to/m7j44qTgevQrFZL43LOIGchtNX3iXr+iBUJnj5aA9XJRdLaHIhqeBZOCU8D/I
8EYYFYehuxrC2CAORKZjECMFctVjWilRqZeiOpP//SCSYKvwHiXAmMxJDqrSF2c7
V74cbmVzf+iG2pfVS/kyCUHLU3uXh27QkqzQsdw5IQpy+KfNdzb0iykH7omzaMgW
XhJpxjg9hNGSIA==
-----END CERTIFICATE-----
Generated at Wed Oct 29 05:22:49 2025 by rpki-client