Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: 0y6ciKzfgkTAmVsJwT4NT6znl1xcnryA2EP3o7iBcAA=
Subject key identifier: 9B:8B:D0:4B:CB:52:B2:19:C4:D8:00:CE:F8:6D:92:22:F0:51:24:0D
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 019A52D1FA4BD0F5AF559C939667B847EA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0FA7
Signing time: Wed 05 Nov 2025 07:01:23 +0000
Manifest this update: Wed 05 Nov 2025 07:01:23 +0000
Manifest next update: Thu 06 Nov 2025 07:01:23 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: vsaDL3jdlV5fZaf9C7NT2m3RQLbzQJb3a4+DRKOgBSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:fa:4b:d0:f5:af:55:9c:93:96:67:b8:47:ea:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Nov 5 07:01:23 2025 GMT
Not After : Nov 6 07:01:23 2025 GMT
Subject: CN=9b8bd04bcb52b219c4d800cef86d9222f051240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:83:26:d1:06:67:5b:d6:85:b7:88:91:8e:3a:
d3:5c:10:1f:94:44:f5:a8:d1:f0:83:7d:2e:2e:c6:
e1:4f:f0:46:ff:cb:dd:82:0e:51:fb:f7:a7:29:bc:
17:07:1c:dc:d5:82:a0:e8:df:44:0c:97:9a:e8:67:
98:f7:2c:bd:74:f1:92:75:6e:3a:0c:9b:5e:e6:1e:
cf:f8:b6:3b:16:92:b7:1c:95:4d:b8:b2:ba:90:50:
ea:55:c9:79:2c:5e:c2:03:57:70:28:d0:d6:9e:76:
9d:37:4e:4a:af:76:0a:90:48:25:93:c9:fe:77:66:
b8:ef:d6:53:8e:4e:36:5a:72:e2:e9:67:48:28:ef:
6c:f8:ed:31:79:00:f3:02:57:68:70:c5:2e:dd:d8:
15:98:40:bf:2b:cd:4f:6d:8d:50:66:d2:40:b5:7e:
6c:27:38:25:a1:c7:31:dd:fb:37:28:26:99:c7:0a:
db:17:78:3a:01:5c:35:ba:d5:f3:0c:48:c3:66:c7:
6e:8e:cb:7c:c9:7b:08:8c:90:61:26:15:68:c3:e3:
2c:98:07:94:9f:00:99:68:c8:3f:0a:96:47:01:f4:
3b:e0:ae:37:59:e0:85:94:d1:e5:26:d9:a3:37:e2:
36:1a:bd:28:ae:11:fa:11:61:81:82:b2:11:cc:a7:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:D0:4B:CB:52:B2:19:C4:D8:00:CE:F8:6D:92:22:F0:51:24:0D
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1f:c7:e1:0d:1a:f9:75:2d:09:ed:6b:0d:26:33:8c:23:f2:
cc:5d:77:7b:9b:a6:7e:31:b8:c6:9d:78:9c:b8:ac:fe:99:5a:
d2:72:4d:ee:1d:50:f3:b0:43:bc:99:22:f1:b9:b3:0a:31:da:
aa:61:2a:e6:94:1c:5b:e3:43:2d:21:72:07:15:ff:b6:97:0d:
6b:13:bf:c2:fa:bc:c3:23:e0:7d:68:86:33:8e:a9:38:6d:03:
9d:69:9f:44:dc:23:27:e0:58:76:89:b4:af:f7:21:26:5c:2b:
54:38:80:d8:19:13:0b:a4:0e:b7:96:9e:28:87:74:20:db:d0:
62:fd:dc:f1:06:27:3c:86:65:51:cb:8b:3b:de:d7:59:c9:51:
3a:a1:d2:c1:6c:30:3e:57:c0:cc:7b:be:0b:26:45:bf:19:9b:
88:7e:b8:23:ca:ed:43:61:58:55:4f:6b:ad:ef:95:86:b5:74:
8a:65:c6:d4:90:92:1a:4a:39:5f:23:07:d4:fa:01:3f:94:9b:
29:1b:3f:88:e0:cf:4d:12:86:f2:ec:51:a1:93:39:22:a2:ce:
ca:3a:82:8b:00:8c:ad:d4:9c:df:3e:e7:22:54:e5:2b:2d:04:
cb:41:9c:92:55:34:da:c9:ee:6b:3d:e2:6c:9b:f7:f0:14:eb:
b5:04:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:16:08 2025 by rpki-client