Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: AJCLxFI/KK1z3w93FeN717bnBxWb1Ecpj3Qyu/bOKUU=
Subject key identifier: 44:E6:1B:E4:AD:EB:AF:DE:A0:78:18:FD:C5:33:96:8F:52:CD:37:D7
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019A53E39BE98C4D77283A393316BA1CEE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0DF6
Signing time: Wed 05 Nov 2025 12:00:16 +0000
Manifest this update: Wed 05 Nov 2025 12:00:16 +0000
Manifest next update: Thu 06 Nov 2025 12:00:16 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: LW5jaq8PT91MWcwynpl0Lvd1G1bfkoWQPPAZCwbcnhk=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:9b:e9:8c:4d:77:28:3a:39:33:16:ba:1c:ee:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Nov 5 12:00:16 2025 GMT
Not After : Nov 6 12:00:16 2025 GMT
Subject: CN=44e61be4adebafdea07818fdc533968f52cd37d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:7e:43:65:7a:25:bb:c9:f1:01:fe:27:de:
23:ae:fc:c1:5d:46:65:5d:b9:6a:e3:1f:1e:d3:38:
5c:6c:c0:25:db:4a:74:10:0d:ea:81:b1:b0:0c:f0:
9a:7b:cb:38:7e:ca:18:6d:0e:9a:6e:bd:cd:67:b1:
72:33:c3:d4:bf:5f:6f:0a:1c:15:df:cb:de:a9:b6:
de:ed:fb:50:ed:d4:61:84:68:1d:bc:3a:80:32:f1:
f9:46:c4:40:9d:0d:5d:34:0d:d4:92:4b:20:29:01:
70:58:49:67:10:95:bc:2f:91:90:4c:8d:e5:97:49:
1d:da:7b:71:54:b6:b1:73:6d:7e:03:d1:2b:6e:15:
15:a2:b1:8b:42:99:9d:74:0f:cf:60:68:c5:e2:aa:
eb:d7:0a:76:9d:cc:ed:ab:f6:af:17:a0:3a:be:a6:
37:7b:42:47:b7:09:18:06:eb:c4:35:0d:aa:57:5f:
0d:c3:d5:87:fe:01:20:1d:ad:95:72:c5:32:93:1e:
3d:cc:ad:5a:97:41:33:22:76:83:e4:82:9a:9c:af:
a7:59:80:90:e0:d3:61:d9:3f:c4:eb:f2:ce:94:ff:
b8:33:f8:50:a9:87:ce:75:54:65:a7:37:52:00:4a:
f6:ea:15:12:b8:87:70:ba:a5:57:05:a0:be:6a:5f:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:1B:E4:AD:EB:AF:DE:A0:78:18:FD:C5:33:96:8F:52:CD:37:D7
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:00:b3:67:e6:e0:a1:2b:08:be:90:4b:61:91:14:14:46:
47:a0:ac:02:46:14:1e:10:49:bb:31:38:10:33:b8:6d:0f:94:
68:3e:1b:c4:27:8c:35:ac:f4:b8:cb:41:a6:1d:a4:b0:de:de:
30:a2:94:db:45:95:23:da:a9:e3:b6:5c:dd:fd:33:b7:48:fa:
2f:7d:7e:0e:b0:58:46:78:61:2b:59:90:bc:bb:e3:a1:66:0a:
94:1f:ae:e4:9d:4e:b9:70:90:3d:09:f0:c5:78:b5:87:82:9c:
17:b0:61:5b:f4:e6:79:c6:14:0f:66:d9:2b:a1:39:ea:7f:f2:
52:3f:18:da:55:d3:75:c3:77:38:b9:94:7e:9b:0a:f5:b8:d9:
86:24:8a:28:66:1b:37:87:9e:e1:9e:b3:af:45:a7:bb:38:46:
7d:f3:f4:95:ab:96:a0:37:be:33:fe:c7:53:d3:81:b9:c1:c0:
b7:a6:27:3c:5c:55:e2:f4:1e:7a:12:9c:95:9b:61:2b:c3:a3:
85:fe:56:02:4a:b9:0b:e1:c8:a2:57:0d:1e:53:4a:46:8e:76:
29:c7:46:3b:dc:82:d6:42:4a:2c:f6:5b:ca:89:50:ff:83:54:
24:22:92:29:4f:3f:54:75:c3:9d:35:b6:b1:54:70:cf:6a:ea:
35:26:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:12:45 2025 by rpki-client