Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: sk2iCSaAHa1QhCFjcYjP5LPWwWSAG+C9ZWyST36pfrg=
Subject key identifier: 32:EB:2F:8A:34:44:08:A1:9B:38:CB:26:E5:E1:2D:F4:C0:F5:5B:25
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019A72936D197EE48139FE56D7383DFEAB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 11:00:55 +0000
Manifest this update: Tue 11 Nov 2025 11:00:55 +0000
Manifest next update: Wed 12 Nov 2025 11:00:55 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: YDs5FmzmJBVwhrvK2LXWX1c4y1RoRgm0wiOc9sHZhkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:6d:19:7e:e4:81:39:fe:56:d7:38:3d:fe:ab:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Nov 11 11:00:55 2025 GMT
Not After : Nov 12 11:00:55 2025 GMT
Subject: CN=32eb2f8a344408a19b38cb26e5e12df4c0f55b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:9c:dc:3d:dc:79:61:b4:0f:11:1d:e1:6c:
41:ed:82:3a:0d:2d:56:1c:5a:21:fc:1e:8f:56:f6:
f3:8b:87:a9:b2:aa:08:1b:df:41:2e:79:da:e3:f2:
c3:51:83:5d:f0:09:4a:0c:ea:b3:1c:f9:52:57:33:
80:8d:a4:cc:a3:70:af:9e:f5:36:6f:99:61:fd:62:
d0:7f:b1:9b:cf:f6:8b:1d:c3:12:ab:54:ee:86:54:
58:53:c7:e7:5b:6e:7d:62:bc:d7:a7:e6:4f:5c:58:
ea:a6:17:08:80:14:73:3d:a4:e2:f6:19:22:ab:37:
99:e9:00:f2:7c:9b:c5:b6:7e:23:51:97:e1:a8:83:
80:b6:e5:4c:82:81:b2:14:ac:f9:4b:8e:86:52:68:
5f:1f:68:c6:30:42:49:53:8f:3f:e5:61:12:22:c1:
38:2f:94:63:28:2d:2e:da:c1:c3:40:45:5a:8c:ab:
ec:a5:79:06:9b:66:60:55:d1:2f:96:72:de:91:6c:
27:cf:bb:49:cf:1e:80:8f:1d:8c:a5:5f:12:77:03:
80:d3:44:6e:18:3a:32:a0:1e:f3:4e:48:ae:73:83:
4b:ef:b4:c0:23:0f:79:bf:d1:4f:e7:eb:53:1e:cd:
18:ca:b8:fd:e4:37:0e:59:9e:83:6c:e6:9d:fc:c3:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:2F:8A:34:44:08:A1:9B:38:CB:26:E5:E1:2D:F4:C0:F5:5B:25
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:98:e3:29:14:5c:16:e4:80:b5:71:2b:2f:4d:ea:c5:bb:2f:
8d:81:64:3b:99:d3:27:bf:11:1b:c0:be:11:9d:cf:b9:1a:9f:
c2:f7:7f:bd:de:99:da:c9:d3:c9:4b:8d:cf:62:33:d6:e4:98:
e0:c1:c5:85:5c:d3:bd:02:7c:68:33:05:3f:78:bd:9a:b1:50:
f2:ec:b4:68:49:be:b0:06:71:f6:d2:e0:41:0f:c1:20:bf:b0:
93:03:08:55:a0:9f:40:86:c1:16:1f:78:18:3e:37:af:5a:a2:
ff:56:be:1a:19:62:cf:47:47:9f:30:99:f7:ef:c3:8b:7a:ef:
98:01:5b:2e:f4:96:31:b5:0e:7e:af:06:f8:d9:0a:4b:d5:a9:
09:87:b5:6d:58:3d:b5:0e:09:97:d6:c2:f8:f4:24:ea:30:0c:
05:f3:4c:88:3c:1f:9f:a8:27:e3:61:d3:b9:82:56:12:7f:11:
1b:db:f0:e1:7d:bc:95:4b:d6:d1:bd:6c:b3:36:c9:2f:de:b3:
b6:bc:6e:52:93:0a:c5:e1:e0:a3:37:a2:1b:23:b8:bb:59:ee:
d7:6a:55:d9:93:67:1a:55:95:ee:db:ab:a2:25:4e:7e:e8:1d:
95:b1:c1:2b:25:d6:18:0b:13:2c:9d:59:c4:f4:d8:c7:71:4c:
aa:b2:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:37 2025 by rpki-client