Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: 6qcBPDn91v8V4H/swQBnBzdxK3mjI4UIRMJ6i8nsavQ=
Subject key identifier: 8E:BC:CF:12:52:F2:87:9A:A4:51:68:CB:D1:C7:7A:FE:C6:E1:FF:5E
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019A2108CCF28C1A63256EE71AB2DB2EF217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 02D2
Signing time: Sun 26 Oct 2025 15:00:16 +0000
Manifest this update: Sun 26 Oct 2025 15:00:16 +0000
Manifest next update: Mon 27 Oct 2025 15:00:16 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: +zQRGEdZktAhIG47OrwvGt2fl4zgh++YbHO9bgTo5uk=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:08:cc:f2:8c:1a:63:25:6e:e7:1a:b2:db:2e:f2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Oct 26 15:00:16 2025 GMT
Not After : Oct 27 15:00:16 2025 GMT
Subject: CN=8ebccf1252f2879aa45168cbd1c77afec6e1ff5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0e:22:a1:ad:1b:48:90:88:dc:b5:d6:4d:40:
f6:8f:e0:30:54:a9:22:61:37:00:67:56:30:e3:39:
38:2f:4e:4b:d1:4d:75:1e:82:f8:27:77:65:9b:5f:
a6:c9:35:a7:b5:1a:d8:44:c5:ce:fb:66:54:6b:a3:
a7:0f:b6:44:71:d0:93:d3:c3:be:7a:1f:0e:77:fa:
96:9e:49:88:6c:df:0f:a3:12:33:50:6b:03:ee:1f:
45:db:1f:d7:1d:fb:e0:b9:af:54:28:7e:01:78:96:
45:96:c2:40:90:89:6c:91:92:db:a1:ec:44:64:b0:
a7:e9:57:b9:7e:d7:b5:13:75:e1:f7:fe:d3:94:87:
c9:7e:22:fa:a7:4a:dd:f8:02:c1:2e:73:fb:06:83:
a7:18:fd:31:72:03:73:bf:7f:2c:3a:82:63:cc:0a:
6b:f8:3d:58:ac:68:5b:5a:06:34:22:63:7a:db:c2:
07:46:77:6a:34:1d:f4:29:22:63:d3:c1:81:ac:3f:
e1:77:d5:48:77:3b:bc:52:1d:39:8d:a9:9b:0f:06:
47:34:1f:5c:e4:ab:a0:a2:33:5a:72:fa:c7:d0:14:
10:8b:03:9f:cc:27:a2:79:27:5c:11:d8:c6:ea:f0:
97:62:51:55:85:bb:c8:0d:1f:55:a2:82:71:95:8f:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:CF:12:52:F2:87:9A:A4:51:68:CB:D1:C7:7A:FE:C6:E1:FF:5E
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:44:64:93:d4:9f:86:66:54:04:b5:79:50:5a:2b:4e:6c:e3:
37:56:5f:3e:f5:86:24:99:55:6f:97:d5:b9:74:9c:f5:0a:c0:
87:bf:b6:2a:20:fd:e7:e4:39:c5:08:80:10:98:01:5d:53:5f:
08:9a:97:16:e9:72:bc:e3:1c:36:dd:a1:ce:f7:f3:96:54:08:
e1:eb:a2:51:c1:b7:97:6d:82:5c:41:75:ca:69:95:d3:cf:9b:
78:f4:8a:99:b7:92:25:f4:4f:b1:8a:83:17:4b:07:11:0c:3f:
d4:07:dc:57:e5:04:3c:6b:f4:fb:a0:b6:e4:94:eb:a0:30:f2:
d9:55:3b:36:88:a7:8d:5d:88:04:ba:ad:ce:65:06:44:f2:58:
70:2b:fa:52:54:dc:00:ba:9d:01:9d:e9:ae:d0:27:52:32:4f:
8e:5a:48:0d:46:af:a3:17:e3:38:61:ab:ab:6d:54:bb:f4:08:
5f:d6:62:73:27:c0:b0:be:36:37:14:56:97:78:94:c5:77:88:
6d:ac:a4:f0:aa:64:16:e4:9d:4c:0c:df:f3:d0:d2:da:ae:d2:
f3:da:47:cb:cb:ae:76:89:04:46:7a:cf:18:ac:a6:19:14:c0:
7c:6e:ff:b7:58:5a:17:5f:16:00:d1:86:b0:5c:82:5a:28:ce:
9b:85:88:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 19:06:24 2025 by rpki-client