Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File: SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier: VUYq3jlQCBxgYUjgFf9j82negDR8UWjADO2boXC8jTc=
Subject key identifier: DA:6F:C1:67:FA:E0:1E:29:72:16:51:30:12:B8:B5:22:3D:C6:6A:C5
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 019A7293A0512B1F1B3A7D7F5A0910719D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number: 163C
Signing time: Tue 11 Nov 2025 11:01:08 +0000
Manifest this update: Tue 11 Nov 2025 11:01:08 +0000
Manifest next update: Wed 12 Nov 2025 11:01:08 +0000
Files and hashes: 1: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: aV2ejiR9SJy6JDxeCdO7WBLxhfxxMm81saln7MxS7NM=)
2: tZ9Z4ML8zhMNBVa9E96Yi9Jnntg.roa (hash: XsJXQI0tWIE+GAb6s9yORtZWbA379GfbGqFGrJ0uG8Q=)
3: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (hash: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a0:51:2b:1f:1b:3a:7d:7f:5a:09:10:71:9d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Nov 11 11:01:08 2025 GMT
Not After : Nov 12 11:01:08 2025 GMT
Subject: CN=da6fc167fae01e297216513012b8b5223dc66ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:cb:13:48:01:4f:a8:90:dc:25:8f:f4:65:
3e:a9:8c:74:55:18:cf:97:c2:da:24:cf:3e:94:d9:
07:91:6d:95:03:8a:30:b4:cb:89:f6:2c:d6:3a:f9:
2b:20:65:b0:f1:cd:48:89:95:1f:05:b2:9c:e4:cd:
68:9a:b3:cd:f6:b6:c3:2d:60:78:ab:4e:3a:e4:62:
71:29:de:f9:da:b2:a9:fa:a8:e8:24:7f:2f:67:e3:
94:7e:c7:0f:7d:c3:62:8e:fb:a4:06:82:06:ea:ee:
6e:36:a0:49:37:b0:5d:ab:20:21:92:79:1e:bd:d7:
9e:c4:77:ac:87:59:d9:d3:4e:4f:77:dc:a7:e7:37:
9e:76:44:fb:ca:e1:2e:48:cf:e8:9b:19:97:f8:6c:
24:90:ed:24:ef:1a:07:b5:6f:77:0a:3b:93:b5:b8:
72:12:1e:10:f2:ba:c1:5e:ab:ef:66:16:c0:84:47:
84:cc:4e:9f:2a:00:68:f1:01:71:fa:65:78:5f:1d:
7e:d3:e3:31:25:e6:92:7b:1b:79:bb:c6:7d:d9:b2:
22:de:f0:33:f5:73:7c:c2:e2:45:6a:53:01:e1:5a:
55:ae:a0:84:ce:e3:f5:37:88:51:72:5f:b8:2d:ca:
5c:ac:16:e5:69:ae:d1:3e:7c:0b:36:d6:73:6e:53:
dd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:C1:67:FA:E0:1E:29:72:16:51:30:12:B8:B5:22:3D:C6:6A:C5
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:39:bc:7b:5f:c3:6d:b5:24:45:97:d8:ee:ef:bf:af:cb:77:
e1:91:64:0f:04:2c:bd:21:24:b4:ab:c4:62:14:f4:a0:35:a9:
d8:0f:eb:02:bd:3b:6b:60:c1:55:18:23:60:51:41:6c:ad:c4:
bd:95:e8:e2:cb:4f:a6:f3:7d:9b:a3:fb:90:3b:ea:af:77:b8:
cb:a0:0b:7e:4d:89:20:38:52:b1:cb:1c:1a:5c:0e:38:56:5d:
53:55:76:98:f4:9e:e3:71:e4:96:79:1d:70:95:b3:3c:7d:d7:
a7:e5:c0:e8:a9:53:f7:1b:47:d7:b6:32:de:0c:21:ad:23:e2:
96:e7:3f:09:2c:de:ce:2a:64:c1:f5:10:12:94:6f:f0:5c:e6:
36:ba:39:a4:01:3f:35:c3:5e:63:15:cf:1f:29:7c:54:c3:2b:
8e:67:51:57:2a:71:bc:b5:50:87:07:01:36:e9:0d:9f:f9:94:
d6:b5:e3:ad:5e:27:a3:40:4d:98:06:f2:07:b1:a6:63:af:11:
72:cc:ba:35:d1:ae:14:4f:3e:4a:8d:1c:91:24:67:a9:22:ad:
5f:c3:8f:b3:4a:a1:7c:86:74:b7:bd:2d:f3:36:cc:6b:64:d6:
69:45:e3:a3:43:5f:db:18:7e:78:d3:eb:ad:1f:f9:87:24:6d:
cb:67:8e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:45 2025 by rpki-client