Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: +ONn/wiJJ2oO1Vx8vsS7hvCLjm7zAH+haeriE/D3WOA=
Subject key identifier: 9A:FB:B7:2A:4B:B9:3E:77:61:87:82:FB:BA:05:1F:9E:A1:98:92:4E
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 019A209C5849F136248F3869D84F1C704F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 13:01:48 +0000
Manifest this update: Sun 26 Oct 2025 13:01:48 +0000
Manifest next update: Mon 27 Oct 2025 13:01:48 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: pFmXsRYqTyhoIH9axGgQbM+NmIlh7qjxisgRq8tTzq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:58:49:f1:36:24:8f:38:69:d8:4f:1c:70:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Oct 26 13:01:48 2025 GMT
Not After : Oct 27 13:01:48 2025 GMT
Subject: CN=9afbb72a4bb93e77618782fbba051f9ea198924e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:62:e5:0e:33:01:dd:b2:74:78:be:97:4c:
77:85:bf:81:af:a8:bc:09:82:5b:04:3e:47:a2:b5:
d9:95:cf:83:14:56:02:1c:a0:39:06:f5:89:17:ec:
9b:1c:94:04:76:f1:d9:30:19:cd:ab:0e:90:61:db:
ea:cc:a3:4e:5d:72:52:86:d2:93:df:c0:81:5a:e2:
10:f9:90:5c:be:8c:07:4a:24:e3:2c:a8:fd:66:74:
3e:23:6a:6a:bb:7e:83:12:12:c1:97:14:6f:5a:28:
96:16:d3:aa:2e:f3:9b:a0:fe:15:4a:b5:30:db:bc:
42:a2:bb:38:ce:12:fe:5f:2c:71:b1:6d:c8:97:4e:
69:70:19:d3:bc:8d:2d:ed:9a:1a:2a:ea:94:b9:82:
3c:7b:0e:16:41:fa:7b:40:6d:73:aa:ce:b8:3d:a6:
d8:f3:4f:61:05:77:cb:64:63:60:92:cc:e5:80:9f:
a5:99:5c:fc:1d:f2:7f:de:52:be:0b:97:05:8e:78:
7c:ae:77:75:f7:7f:98:14:c4:5e:d3:97:8a:01:24:
6a:b2:99:fe:e0:ef:b3:da:d4:6a:8a:9f:e3:dc:62:
4d:71:2e:c4:89:37:44:23:85:26:a0:69:22:20:5e:
16:56:39:ee:68:fe:3f:a0:b9:34:2d:2b:b0:d4:5e:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:B7:2A:4B:B9:3E:77:61:87:82:FB:BA:05:1F:9E:A1:98:92:4E
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:1d:a9:5c:25:91:a9:cf:2e:7a:99:01:7b:35:a6:f2:8d:0d:
21:27:2a:26:df:9a:8c:0e:4d:20:6e:06:ef:02:7b:b5:b2:ea:
db:8d:71:3d:b2:ac:f9:1b:6b:ee:f8:cd:d5:c8:bb:e5:8e:ee:
a3:28:7f:d1:7a:b2:e9:05:6a:ba:63:dc:35:a5:02:d4:0b:1e:
d3:bc:96:8d:34:6b:88:43:0b:e8:47:ef:ba:94:1e:a7:f6:f8:
de:e8:48:99:19:70:6e:c7:b8:9e:70:68:7c:74:ba:b1:ed:13:
ea:e5:8e:e3:c9:61:be:9e:e0:ce:ca:e4:bb:0c:e6:78:8a:47:
0b:05:ce:6f:5a:ff:3b:9f:b1:cf:b1:24:63:d5:4f:d0:12:7e:
44:44:16:65:78:61:a4:a0:2d:60:83:b0:e8:7a:f4:11:15:cf:
fb:47:af:86:29:0b:da:70:7a:fa:59:56:e1:20:05:9e:26:92:
69:07:c9:29:02:55:01:d4:6f:dc:ac:94:ec:78:50:75:09:66:
82:9a:bf:02:9b:0b:f4:13:9d:3a:0b:52:1a:34:4d:67:07:a8:
a6:ad:36:ee:61:8d:e9:84:8d:a1:6c:32:46:00:59:3a:12:62:
32:09:17:b0:08:b7:d0:bb:c0:c1:e7:e6:f5:75:cc:e6:81:b9:
e9:a1:39:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:31:03 2025 by rpki-client