Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: KyLLTXmeuA2pHiLHWq14WTrIE9fUtZhwvm8A2aQvgew=
Subject key identifier: 83:E6:82:C1:59:87:5E:1F:A7:38:AA:0B:F3:38:78:D6:0D:37:AB:9A
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 019A71B7969929B6B46E5CE37636DEE2E0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0F0C
Signing time: Tue 11 Nov 2025 07:00:48 +0000
Manifest this update: Tue 11 Nov 2025 07:00:48 +0000
Manifest next update: Wed 12 Nov 2025 07:00:48 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: FSM3TzAKJM6o3aLqna/UFIbxb+3+OzD9rBbIcrVipEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:96:99:29:b6:b4:6e:5c:e3:76:36:de:e2:e0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: Nov 11 07:00:48 2025 GMT
Not After : Nov 12 07:00:48 2025 GMT
Subject: CN=83e682c159875e1fa738aa0bf33878d60d37ab9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e2:bf:74:eb:ad:ea:2f:d6:b0:9f:3e:0b:5b:
32:8d:cd:34:8a:cc:1d:9a:c4:c3:9e:03:9f:2b:a3:
c1:5f:93:d6:ef:a8:99:c0:01:ca:4a:4d:bd:b7:a9:
94:8b:8c:09:e8:ce:f9:d8:cd:c9:20:b7:02:40:67:
60:63:c6:7c:06:32:6e:c8:3a:97:be:d9:c2:72:5a:
ea:b7:b9:0a:fd:17:bf:a1:5e:6a:de:cd:7c:ca:ab:
30:7c:70:5c:a4:e7:06:84:3c:d7:8d:ae:55:45:f1:
3b:f2:63:37:6c:81:20:04:d4:84:08:83:ca:57:eb:
82:27:93:3d:6a:c0:cd:d5:c1:1d:ec:cf:50:e3:5b:
fe:c8:93:1f:e5:af:eb:b2:90:9d:e8:5c:c0:99:9b:
b4:1f:5a:3f:82:6f:63:1a:39:1b:49:ae:ca:b7:f4:
95:a8:7e:bc:2b:6d:3a:7b:5e:dc:a8:1f:14:99:12:
a9:2e:49:92:9c:49:f2:d9:d2:d7:c3:19:10:d8:a7:
9f:8d:af:09:c4:04:94:6f:e8:56:a5:9f:53:20:ad:
df:2a:19:00:07:c6:29:9b:f7:98:1c:66:6e:f2:b9:
4a:5e:0c:0e:00:f1:2e:2d:a7:df:28:6f:4e:21:c7:
f6:df:5c:b8:da:c1:0c:b6:8b:2b:b4:b8:db:49:7e:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:82:C1:59:87:5E:1F:A7:38:AA:0B:F3:38:78:D6:0D:37:AB:9A
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3a:9c:87:87:27:02:9d:bd:d1:c5:8a:f3:05:b1:f4:e9:89:
a4:26:02:16:8f:02:47:cd:39:64:96:50:51:05:8b:54:86:9f:
87:9f:81:ed:27:1e:71:8e:d8:91:b8:e5:a8:a4:59:b9:86:1b:
f9:a6:d7:48:1d:f6:cf:58:d4:92:4c:a1:21:28:1c:c5:1f:dd:
4e:54:f0:7a:45:6f:64:15:c4:17:8b:a4:28:22:73:91:b8:15:
4c:c3:14:e3:fd:07:51:eb:60:ad:b5:1f:a0:c5:a5:fa:63:a7:
24:14:2f:a9:e9:07:03:2e:a2:87:ce:e1:69:94:40:9c:82:4c:
62:8f:e2:7e:93:f0:b2:7a:7e:50:58:d1:24:62:9e:92:c3:e3:
e5:ba:b9:21:2d:31:cf:77:0f:ce:96:15:80:3b:04:8d:e1:44:
a1:55:57:b8:38:fe:31:5f:5b:ea:dc:b5:c5:2c:25:1d:7b:c9:
c5:e5:55:48:a1:6f:2b:b4:d6:40:58:f7:d3:e3:66:bc:77:b8:
ad:17:c6:26:cc:54:29:01:b6:f8:50:dc:dd:24:74:7c:80:4e:
e2:51:b6:34:fe:8c:b7:8a:f0:52:cd:16:c4:85:d7:fd:86:99:
61:ff:40:67:39:d6:e0:b9:c9:d5:ce:b5:bd:c1:97:ac:01:c1:
28:a3:2a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:57 2025 by rpki-client