Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: 6z1nHXUe0CkjN0HeTSDcjYidNZMUDRtmSDKngE3ZBT4=
Subject key identifier: 2D:4C:7E:48:C9:2E:9E:9A:31:01:3F:B9:91:DF:B6:BF:FC:CF:CC:E9
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019A552DAB8EE402DC4149EA229246C78B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 171E
Signing time: Wed 05 Nov 2025 18:00:47 +0000
Manifest this update: Wed 05 Nov 2025 18:00:47 +0000
Manifest next update: Thu 06 Nov 2025 18:00:47 +0000
Files and hashes: 1: 45y2eM_9RmNAB44-r5-uKhDMD9k.roa (hash: a22xKNsQmcfld1bNQDJEKJ/sFCciZX8nT/TNrTr5YXk=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: QmNKMGbt8AG0fyne0G9AHBBmmOsAJ7jStHtSe8oDn4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ab:8e:e4:02:dc:41:49:ea:22:92:46:c7:8b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Nov 5 18:00:47 2025 GMT
Not After : Nov 6 18:00:47 2025 GMT
Subject: CN=2d4c7e48c92e9e9a31013fb991dfb6bffccfcce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:78:e0:dd:c0:c3:5e:7b:10:0b:e5:b0:5c:48:
0f:1a:82:38:e7:1e:9d:02:af:24:c1:af:cf:b5:f1:
53:d0:5b:07:e8:34:3f:2c:45:06:cf:dc:ad:b4:4f:
23:93:86:f4:a2:d9:cc:5c:61:6a:f0:3b:d3:01:10:
21:95:66:44:e1:b9:05:e6:2f:aa:d3:d5:0b:54:c9:
a0:9c:8e:f7:64:ca:f1:79:49:2d:95:9b:ed:6f:10:
88:98:21:00:43:4f:fb:05:33:b4:bd:b3:69:8e:4e:
7a:1b:68:5c:8f:2d:e5:99:7a:77:9b:4e:89:85:a3:
4a:82:4f:92:3f:e3:d5:78:d4:8f:8c:1d:b4:64:d7:
e3:de:73:a3:44:70:ee:49:70:2e:1c:ca:f9:e2:72:
f3:7d:22:fc:18:af:e6:31:b9:82:95:25:cd:f5:72:
02:67:23:cd:d3:06:3e:ba:40:63:ae:47:fc:03:41:
e1:b0:33:d3:e3:29:ad:a2:37:59:ff:d9:3c:a7:ba:
c2:40:5a:e2:6e:81:1a:07:ae:8f:5d:15:1c:43:e0:
48:2a:9b:ea:2e:a5:03:da:79:96:6e:0b:8e:c5:77:
18:c9:18:2f:4c:25:34:82:87:b3:f5:14:7d:86:e9:
1a:1d:11:b4:47:80:3c:e2:01:64:a0:5e:63:42:61:
a5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4C:7E:48:C9:2E:9E:9A:31:01:3F:B9:91:DF:B6:BF:FC:CF:CC:E9
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:69:c7:72:42:5d:da:22:fa:59:ff:78:65:d1:03:25:d9:
b9:96:f7:bc:03:98:81:dc:b3:53:51:dc:ba:42:a1:a6:2c:31:
e6:6b:1b:c0:da:a2:f5:b9:0d:c2:9f:24:fc:05:97:00:74:5d:
2c:00:e1:d3:dc:69:fe:d6:c9:cf:62:0e:ef:f8:83:44:e3:18:
ec:94:6d:77:63:c3:70:49:d0:57:34:fd:c5:07:d1:3d:95:ed:
63:74:7a:11:e3:97:4f:a0:b8:d0:2a:51:1c:72:ee:f9:4a:95:
4e:5a:d8:67:b5:57:71:b0:a8:54:5f:6c:4d:88:3d:bb:b7:d9:
74:79:03:76:cf:0a:42:a7:ce:7c:65:3f:8f:bb:14:35:d8:b1:
40:ea:89:af:1c:78:7f:0b:5c:8a:84:e5:8f:bd:62:4c:60:16:
83:29:5b:97:58:8a:a6:50:27:37:2f:ce:47:c8:64:70:99:96:
c5:f3:59:9e:21:77:fc:43:cf:7a:0f:96:f8:6a:29:42:90:2f:
2a:d7:87:d0:fa:e5:0f:9f:18:0e:70:0f:68:72:c3:2d:ef:61:
46:d3:1f:32:29:83:c5:87:dd:c8:d0:c5:3a:9e:13:38:6f:12:
a7:7b:97:13:64:ae:3f:45:b9:04:13:9b:3d:1a:8f:a3:ec:e6:
ae:b9:60:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:42 2025 by rpki-client