Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: +cnLXkFSZsaPGalCtv8+apaoWi+AOrYpIl33v+aDHug=
Subject key identifier: B3:21:D8:B7:B2:9F:71:DB:0B:3B:F8:8A:88:86:E6:6A:A7:CE:69:BF
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 019A51F5877DFF1DFB05D87A1139DDEC83E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0DF5
Signing time: Wed 05 Nov 2025 03:00:36 +0000
Manifest this update: Wed 05 Nov 2025 03:00:36 +0000
Manifest next update: Thu 06 Nov 2025 03:00:36 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: HAlmChnc3UYUXEIXqQ8FWQ0XNp2DVvSn79RWBy9pfCE=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:87:7d:ff:1d:fb:05:d8:7a:11:39:dd:ec:83:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Nov 5 03:00:36 2025 GMT
Not After : Nov 6 03:00:36 2025 GMT
Subject: CN=b321d8b7b29f71db0b3bf88a8886e66aa7ce69bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:4f:b1:01:c7:f8:c1:52:82:f6:58:e0:26:
73:92:a7:d1:d7:db:a9:f5:0f:71:66:ac:82:52:9f:
b3:1a:41:0f:53:96:97:a4:db:8c:6b:bd:3a:b1:de:
d2:7b:23:67:f0:0b:3c:81:ed:9e:56:dc:41:3d:0a:
c4:6f:8a:7f:db:26:f3:fe:95:23:80:f5:de:58:e5:
e5:1c:00:d0:c2:93:5e:17:f7:a8:07:45:0d:fe:1f:
c5:3e:0f:2b:02:65:66:f4:7f:82:0b:62:5a:23:71:
6c:7a:de:4b:04:d1:7a:9f:6f:be:09:44:d3:01:82:
0e:a3:e4:38:fb:7c:2f:43:4f:36:09:2e:9d:60:c6:
14:47:7b:17:e9:db:ac:cf:75:e6:46:18:cc:ce:bd:
c5:86:79:74:a4:db:a2:1a:bb:28:1c:f5:fd:8e:66:
1d:fb:ca:d1:60:b0:6d:bc:79:a7:3f:8c:1b:a3:aa:
02:8b:67:ab:4d:47:b8:a7:70:11:c1:c7:46:6b:83:
19:b0:33:79:12:24:bb:a8:59:12:62:09:94:2a:8e:
f5:a4:24:74:1a:6f:77:e7:99:e5:50:d1:7e:14:a0:
84:a9:28:08:ea:3b:f7:73:74:83:b0:3d:93:a3:12:
00:34:a0:01:f3:43:0f:3b:a3:ba:91:9e:42:1c:22:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:D8:B7:B2:9F:71:DB:0B:3B:F8:8A:88:86:E6:6A:A7:CE:69:BF
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:93:d2:d2:db:06:39:87:4a:51:f7:b8:50:46:9c:a8:a1:09:
3b:29:00:d5:6a:c9:96:94:98:30:34:4e:43:ea:1a:13:18:7d:
60:5f:7e:f3:56:f4:14:62:11:f6:3b:4d:da:9c:b6:0a:c3:a2:
68:4c:31:61:49:81:c8:77:f9:73:b9:63:8a:d9:d2:b9:87:e9:
3c:3b:75:15:be:c1:9c:55:76:62:c7:6a:fe:02:a3:f7:28:df:
69:59:09:e1:ad:57:8e:04:a4:36:31:d1:ff:8d:bd:f4:6f:6c:
43:09:f6:63:ef:6f:65:3f:f9:bd:f6:fe:d3:af:6d:d1:6c:32:
1f:13:ad:9e:98:3c:2a:67:08:23:ed:4e:57:4c:56:ff:8a:31:
54:d3:53:2e:e5:be:d0:ed:64:e5:74:7d:c0:1f:e6:07:6c:3d:
77:e4:51:33:d1:ff:30:f5:df:fa:fe:3c:eb:ac:06:3e:55:ce:
b6:be:9b:68:b0:df:39:27:de:69:b2:66:79:63:40:b5:41:3d:
c9:8c:69:d7:7a:17:58:f6:38:44:04:75:55:d6:bd:34:da:1a:
a4:d1:e4:4e:f0:f2:57:60:26:8a:52:72:55:ea:72:1e:9f:22:
41:45:66:cc:bb:b8:a3:04:f4:2a:a7:59:b6:07:8a:72:9f:3b:
f8:d6:d3:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9Yd9/x37Bdh6ETnd7IPpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjUxMTA1MDMwMDM2WhcNMjUxMTA2MDMwMDM2WjAzMTEwLwYDVQQD
EyhiMzIxZDhiN2IyOWY3MWRiMGIzYmY4OGE4ODg2ZTY2YWE3Y2U2OWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6VPsQHH+MFSgvZY4CZzkqfR19up
9Q9xZqyCUp+zGkEPU5aXpNuMa706sd7SeyNn8As8ge2eVtxBPQrEb4p/2ybz/pUj
gPXeWOXlHADQwpNeF/eoB0UN/h/FPg8rAmVm9H+CC2JaI3Fset5LBNF6n2++CUTT
AYIOo+Q4+3wvQ082CS6dYMYUR3sX6dusz3XmRhjMzr3Fhnl0pNuiGrsoHPX9jmYd
+8rRYLBtvHmnP4wbo6oCi2erTUe4p3ARwcdGa4MZsDN5EiS7qFkSYgmUKo71pCR0
Gm9355nlUNF+FKCEqSgI6jv3c3SDsD2ToxIANKAB80MPO6O6kZ5CHCI3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMh2Leyn3HbCzv4ioiG5mqnzmm/MB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJPS0tsG
OYdKUfe4UEacqKEJOykA1WrJlpSYMDROQ+oaExh9YF9+81b0FGIR9jtN2py2CsOi
aEwxYUmByHf5c7ljitnSuYfpPDt1Fb7BnFV2Ysdq/gKj9yjfaVkJ4a1XjgSkNjHR
/4299G9sQwn2Y+9vZT/5vfb+069t0WwyHxOtnpg8KmcII+1OV0xW/4oxVNNTLuW+
0O1k5XR9wB/mB2w9d+RRM9H/MPXf+v4866wGPlXOtr6baLDfOSfeabJmeWNAtUE9
yYxp13oXWPY4RAR1Vda9NNoapNHkTvDyV2AmilJyVepyHp8iQUVmzLu4owT0KqdZ
tgeKcp87+NbTug==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:59:26 2025 by rpki-client