Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: HWYvV8aDGfAkFhSvQtVjFz/7UGJx2ub/Eqz4hd1Fi+M=
Subject key identifier: 9E:6F:C2:87:7F:DC:63:CA:62:55:E9:65:E3:42:D9:65:D5:2C:03:A2
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 019A725CB181AAF5A80FCB3D8B52A4459FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 1684
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: tP4NJ+2fWl2YG+T9SNzC2vKVpaL+2nz7A4wSu5/kOeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:81:aa:f5:a8:0f:cb:3d:8b:52:a4:45:9f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=9e6fc2877fdc63ca6255e965e342d965d52c03a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:c6:8e:de:65:13:75:d2:f7:3f:3d:89:c2:
ef:24:38:62:6e:c5:4f:0a:e5:b2:e2:ea:fb:e0:d2:
53:fd:57:e1:3a:70:61:5a:93:ef:79:63:7e:79:49:
3a:9b:1a:29:06:8a:a1:7b:98:10:9a:ed:bc:dd:82:
35:a0:9c:1f:b4:7d:b8:b4:1f:69:b2:87:5d:88:91:
79:61:5f:0c:5f:66:af:e0:18:8b:ba:5d:98:1a:ca:
48:5d:86:ac:b0:14:1c:2a:11:b9:89:7b:53:98:9a:
8a:ab:d8:5c:2e:c7:4f:5a:da:14:64:a4:a1:9a:fa:
7c:ae:e1:c2:5d:e3:7d:ba:85:51:4e:63:c2:fa:f5:
6f:e1:1e:b3:72:58:33:6f:91:b3:75:85:1e:97:fc:
99:24:4b:06:fa:da:a2:92:e8:09:d3:93:47:4d:b9:
69:a6:51:8c:1d:d9:77:8a:5e:78:d7:73:89:c4:34:
f6:9f:08:a7:54:e4:0b:a0:b6:f1:45:34:3c:d3:f5:
b7:d8:d2:e8:5f:f9:e4:ea:bf:45:7f:92:40:a2:f8:
f6:56:55:9d:4d:7a:82:69:28:b0:c2:96:5f:f4:24:
e8:ce:ff:84:65:14:c6:c2:39:24:af:a8:85:e6:74:
0c:0e:ca:6e:e0:f3:37:35:99:e3:f2:33:ce:1f:12:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:C2:87:7F:DC:63:CA:62:55:E9:65:E3:42:D9:65:D5:2C:03:A2
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f0:75:c5:2f:4c:e3:77:c2:c3:4c:3c:a6:83:6f:80:bd:ea:
6e:e6:49:cf:22:45:6b:57:13:c9:e6:40:f2:b1:09:a8:81:91:
ff:19:9c:d7:cb:21:e5:5f:29:ab:c1:be:ad:6f:a6:5b:f5:4e:
1a:b4:b9:ac:03:06:64:42:96:ae:11:4a:ef:79:3c:12:c3:34:
83:cf:30:a2:52:5b:9f:49:ae:f8:17:7f:a9:08:d0:a1:1a:37:
03:49:ab:0a:e1:12:ee:72:cb:51:62:03:b3:aa:8b:0d:85:fe:
2d:9b:0b:70:ba:c8:90:f3:30:9f:bf:35:be:86:ec:ca:b4:18:
a5:f2:0a:56:d3:23:b0:98:76:10:9c:a3:40:f3:68:6a:51:fc:
62:d9:bd:22:74:6f:49:4e:25:a8:ce:f6:1f:83:25:bd:3e:08:
dc:36:59:af:eb:e4:37:dd:4e:4a:d6:3a:31:f9:6b:49:07:89:
f4:18:ac:d0:b2:1d:cc:07:f8:84:8d:b1:54:45:85:0b:cd:3c:
1a:75:21:78:7a:37:67:07:15:0a:ad:4e:22:36:0d:db:fd:a4:
45:2f:7a:7b:c9:76:bb:97:93:cd:69:c9:0f:ee:f7:16:f8:c0:
e6:70:cf:04:db:fa:43:7b:11:64:52:cc:48:69:64:94:42:db:
98:f3:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client