Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: d3P0pWKhqlI74JN6MX52scFLq1x9laALdgabpJGOCgg=
Subject key identifier: DE:DB:6F:13:D6:18:3F:80:3A:F7:78:C4:75:0D:CA:B2:15:AF:01:5C
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019A4EBD3E9431EEB402CE375ECB6BC84641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0B65
Signing time: Tue 04 Nov 2025 12:00:16 +0000
Manifest this update: Tue 04 Nov 2025 12:00:16 +0000
Manifest next update: Wed 05 Nov 2025 12:00:16 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: l+RoqkyK/kA9ru/CKCrw07/KsfoKzithFA7zr+m9bGc=)
2: nBqkJ21E89xpdJHsjMjUY6q0t8s.roa (hash: cYjf2nhrD03sJ2C+YxabZIv8XeqfYPE9uhBxiZGoO6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3e:94:31:ee:b4:02:ce:37:5e:cb:6b:c8:46:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Nov 4 12:00:16 2025 GMT
Not After : Nov 5 12:00:16 2025 GMT
Subject: CN=dedb6f13d6183f803af778c4750dcab215af015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:1a:dc:ff:cc:98:5b:05:71:8f:e3:01:fa:
03:f9:ea:94:b8:28:5c:54:26:c8:01:69:2c:4b:eb:
f1:a3:01:ff:39:2a:37:48:45:f6:a4:d5:f8:e6:41:
14:64:b3:37:9d:52:4f:e7:70:97:4b:5f:ae:8b:35:
dc:8c:b6:ae:bc:ee:ce:81:11:db:98:84:58:2d:96:
d8:99:14:ee:20:18:8f:48:e7:fa:4a:bd:cc:df:7f:
8d:11:91:1e:f9:ff:bd:e5:9f:c2:fa:8f:94:6a:05:
44:e1:f1:85:af:05:9d:52:9a:15:77:fb:6d:75:fc:
5c:69:9a:8e:46:9e:d6:55:31:71:a6:f5:91:26:7e:
3b:2f:63:2f:6b:c1:ae:f8:70:f8:18:26:4c:ee:9d:
23:13:49:17:3e:9f:7c:98:79:6f:31:a0:14:54:96:
62:70:fe:2d:f0:e8:49:dd:47:dd:87:23:2f:92:73:
33:5b:61:58:3e:c2:1b:25:7a:bf:d6:af:c3:6c:67:
1a:cd:6b:62:78:45:e2:3b:4f:cd:fd:7a:02:bb:c3:
24:d5:a6:f0:a0:f9:e1:b6:c8:88:5e:4c:51:d5:c7:
47:ae:0d:06:5f:7e:1a:b9:7b:64:2d:3d:71:dd:1d:
6f:56:f3:53:fa:6d:5e:51:f8:31:9f:7a:c8:3b:ac:
75:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DB:6F:13:D6:18:3F:80:3A:F7:78:C4:75:0D:CA:B2:15:AF:01:5C
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:48:c4:4e:ce:56:db:d5:8e:a7:51:3b:39:0f:52:65:c8:57:
d9:1c:eb:f4:30:89:9f:4d:7d:7d:4a:d7:9b:eb:1c:e2:6a:c3:
bd:f0:ed:62:fe:ad:73:b3:6e:ca:36:c0:28:ba:8f:ad:83:cc:
f7:38:f3:30:51:d0:77:56:01:8f:af:c9:58:8d:33:cb:79:26:
9f:b0:4f:55:b4:40:39:c5:65:bf:8d:d5:b6:4a:33:29:37:58:
c5:8d:4c:6e:46:7f:5d:a6:c1:30:fa:5b:28:27:cf:6a:36:32:
48:67:fa:51:72:38:f4:92:7b:7d:2f:d6:d7:33:81:6d:6b:33:
85:ff:65:a4:66:d1:24:f7:8f:33:b1:3a:5d:77:4a:48:22:f1:
e2:55:f5:66:90:35:56:5b:b3:f3:0d:cd:c0:0b:81:41:95:f3:
79:ab:83:12:56:d3:94:65:6d:52:4c:da:a0:7c:9e:73:a2:c4:
c3:37:3e:10:80:32:cb:db:d7:72:52:cf:6e:52:bf:c6:6e:be:
a4:f7:01:22:8e:a7:b7:3d:6b:a4:1e:3d:89:5f:a9:b5:64:29:
01:15:f9:b5:b5:f0:ce:35:b7:78:c3:75:28:fb:88:bd:25:63:
a6:67:1c:24:5c:8b:77:73:33:9a:95:2c:0d:fa:0c:e9:65:96:
b5:6f:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:52:43 2025 by rpki-client