Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: W1etdeyQf8Jl2yZHonNXw7j16xlcqL+hUujxSVSnIjE=
Subject key identifier: AF:00:8E:C2:C0:37:0F:56:F9:E4:17:1D:5B:E1:6D:4A:A6:E9:E4:97
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 019A71B8F7D2C39899EABB6844D9D2FC6069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 1029
Signing time: Tue 11 Nov 2025 07:02:18 +0000
Manifest this update: Tue 11 Nov 2025 07:02:18 +0000
Manifest next update: Wed 12 Nov 2025 07:02:18 +0000
Files and hashes: 1: 349nznGmuYln7Euzs0toW3LL2Co.roa (hash: 2VcvoHu/ySd5oGJHcQApUau1Ip2UjCUmUdstoqEVP0Q=)
2: MhO0JIjv07z_oORlZPzio-JDr68.roa (hash: IGEtItNNMXdu/fJfMOFzDjAygiojo6AjHJXRHHSwZpo=)
3: cjuo7risFY0maWmiB6zw_cynUR8.roa (hash: fwEm242Ve1m7/7m7QExBWA9lRss1xiZPUH/+LoEjd/Y=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: TKpqyO84WlW9xrctySnd0CwpdOBdUmL8YrYhx4Nge5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f7:d2:c3:98:99:ea:bb:68:44:d9:d2:fc:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Nov 11 07:02:18 2025 GMT
Not After : Nov 12 07:02:18 2025 GMT
Subject: CN=af008ec2c0370f56f9e4171d5be16d4aa6e9e497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:e0:3e:41:f6:85:c7:cf:79:67:1e:41:74:
7a:ec:8b:b2:4e:8c:33:97:3c:0f:ca:b7:58:88:1c:
a1:86:c3:32:82:84:02:d1:bd:f6:91:a8:00:94:d3:
dc:70:db:ac:c4:64:dc:65:44:0d:ce:ef:0a:88:a7:
23:f6:42:8f:22:61:92:b7:0e:18:ea:d4:ee:29:7a:
5a:98:15:c3:45:92:71:bc:a1:03:bb:d2:a2:ed:66:
9f:ad:d2:54:8b:82:48:22:b9:41:19:02:6e:06:02:
a8:53:2a:9a:bf:8a:0c:79:ad:07:f9:65:18:55:7b:
4b:20:b1:61:e5:3e:26:61:a5:e6:6a:1d:01:e3:86:
e5:d2:0b:a1:22:59:69:ce:72:82:7e:b7:93:05:70:
18:9a:3d:0f:d6:03:4e:eb:2e:31:ce:61:0c:1e:a4:
ec:05:c7:9a:c8:22:f3:9e:fe:ac:4f:07:c6:3d:40:
d9:34:f4:e2:d4:d8:d6:c3:5e:26:a3:b8:03:bc:6c:
23:04:70:58:2d:a2:08:ba:d0:66:f7:a9:45:37:1d:
61:10:8e:b4:86:38:c2:d0:53:39:3a:01:b3:4d:f7:
63:a5:10:ee:a9:ec:75:48:6c:fb:ed:3e:b4:93:88:
2a:2c:38:1c:38:43:3e:a6:a2:4d:35:89:f7:c5:bb:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:00:8E:C2:C0:37:0F:56:F9:E4:17:1D:5B:E1:6D:4A:A6:E9:E4:97
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d4:94:17:59:e6:70:8e:b7:45:2b:07:71:cc:b1:9a:2e:d8:
01:b0:76:08:73:95:85:79:86:ed:bf:05:27:3f:e5:4e:95:a3:
d3:10:a2:d2:58:e0:41:f0:88:97:42:de:4a:f3:6b:5c:8a:39:
4b:7b:83:7f:3f:c7:12:6c:ce:c5:c3:e1:a0:49:19:6e:6b:cf:
7d:7a:25:95:77:7a:6f:36:c7:be:b8:cc:04:63:2d:4d:41:04:
bb:b7:0b:0d:b1:19:4f:64:80:1b:8a:f1:66:e6:52:7e:44:64:
ab:85:5f:1c:69:2b:56:cb:91:8f:99:63:8d:0d:0f:47:17:47:
5e:c2:5c:1a:96:84:b1:15:14:39:54:6c:33:41:73:44:58:dc:
01:83:88:57:81:f4:5d:34:c1:cf:b5:2d:a4:09:49:f4:87:5a:
7f:e6:35:f6:c2:17:b3:e2:fb:0a:a8:1b:f6:f3:5b:b5:8b:3f:
59:f0:d2:e7:48:48:c8:b1:3a:02:3e:ef:08:a4:a8:2a:53:4f:
c6:ec:74:4c:98:74:0d:bf:23:fd:54:43:f1:06:51:59:f6:38:
56:06:f1:6f:fa:85:72:aa:1c:50:c5:8b:be:be:f1:0b:ce:c0:
76:f3:dd:e2:37:56:c3:73:8e:6e:b2:3e:fa:6b:f7:5a:8e:b7:
c2:a5:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:03 2025 by rpki-client