Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
File: sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft (raw, json)
Hash identifier: YgUDKRXUu7y0zdzqKYKN2v9Q5HCiHoGvhV6BjZN+rrY=
Subject key identifier: EF:AD:1C:56:F7:BB:88:1C:79:38:F1:E0:B7:1C:B8:45:6D:6B:2F:B5
Authority key identifier: B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
Certificate issuer: /CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Certificate serial: 019A4FCFCFD5DCA61AE921ECED94222FBEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
Manifest number: 0A2D
Signing time: Tue 04 Nov 2025 17:00:10 +0000
Manifest this update: Tue 04 Nov 2025 17:00:10 +0000
Manifest next update: Wed 05 Nov 2025 17:00:10 +0000
Files and hashes: 1: sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl (hash: 4qCrY4uduk8UOt9OnaW/u0EdXY/ccoZAHlbsiB0UJMg=)
2: zGycLxq7YqbVlBvuNEd47CRzT-U.roa (hash: o72/nsIKF1YG4XUjUYVm0HFMSGLne+bRa8vjHOf30pI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:cf:d5:dc:a6:1a:e9:21:ec:ed:94:22:2f:be:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1859f3d2cd283e7db90f02fe1b0d4f615605947
Validity
Not Before: Nov 4 17:00:10 2025 GMT
Not After : Nov 5 17:00:10 2025 GMT
Subject: CN=efad1c56f7bb881c7938f1e0b71cb8456d6b2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ce:0a:00:5e:30:12:57:dd:c4:42:f8:4f:27:
82:20:84:2b:21:b8:56:04:8b:3e:8e:30:59:12:ac:
c7:db:58:f8:0d:be:e5:b3:23:50:0d:93:6e:09:44:
11:fe:87:f6:bf:be:98:bc:e0:50:fc:3c:8c:cd:58:
77:5b:9f:d0:ec:7d:9b:34:68:db:e0:ab:ee:54:93:
1c:96:26:6e:9b:d7:67:82:77:7b:34:9f:2c:6a:49:
15:a0:7e:ee:7c:15:52:82:81:66:60:bb:64:3d:04:
30:4d:f2:df:37:26:77:63:f6:db:dc:78:9b:19:14:
9f:00:d4:52:b7:3e:66:03:68:2d:39:de:f5:8e:91:
f8:fa:97:0f:7f:31:c9:1d:35:57:60:8e:f9:1b:c6:
5b:a3:ae:db:72:0d:cc:24:8e:e7:b2:12:d1:35:d1:
4c:19:1f:59:62:fb:74:dd:8f:6c:e4:8b:95:50:ab:
09:c9:be:fa:ed:b1:c6:f9:9d:76:3a:d2:3d:04:7d:
fc:23:bc:27:79:d4:b1:5a:88:e0:0e:84:75:b5:e5:
d8:dd:c5:b9:b6:14:3a:13:9e:9d:dc:16:96:f0:e3:
35:56:23:45:31:29:1e:5f:a5:12:f1:e0:6b:4a:43:
85:fb:32:cf:65:12:eb:b8:37:c9:20:be:f6:bc:af:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AD:1C:56:F7:BB:88:1C:79:38:F1:E0:B7:1C:B8:45:6D:6B:2F:B5
X509v3 Authority Key Identifier:
keyid:B1:85:9F:3D:2C:D2:83:E7:DB:90:F0:2F:E1:B0:D4:F6:15:60:59:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYWfPSzSg-fbkPAv4bDU9hVgWUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/f7a560-8873-40ee-a7c5-2aadc5c3c57d/1/sYWfPSzSg-fbkPAv4bDU9hVgWUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d7:6d:91:00:6b:32:3a:16:78:c6:4a:62:bd:b5:d5:c9:62:
a9:e6:87:8b:84:10:d3:e5:df:a0:94:cc:f2:63:89:b4:9d:f3:
70:8e:1a:c1:6a:95:a7:3b:89:b9:a7:82:4a:84:3e:8e:7b:be:
0a:af:1c:59:94:bf:ce:d8:db:4f:05:fb:80:b3:26:99:95:ee:
bd:db:12:f0:cc:f4:ab:a7:d2:93:db:e0:2d:c2:02:1b:05:c4:
5c:e2:27:2c:9e:fb:00:62:6e:2e:8b:e0:56:70:31:96:e4:c6:
39:95:c4:94:0e:92:72:ca:c3:82:e3:6e:10:28:6f:78:e6:98:
32:88:bc:a0:07:92:9d:ef:e1:7b:77:00:d4:cd:38:ff:5d:5c:
44:42:9c:a1:98:79:a6:2f:02:eb:49:8d:4e:3c:e6:23:24:33:
3d:94:74:86:eb:5d:1c:f1:b1:3f:cf:9d:5b:32:38:9c:f1:f3:
2f:5d:4f:40:0e:94:ec:07:da:7d:0a:33:bf:4e:a3:ee:bc:93:
4a:74:35:43:87:26:e6:cb:ec:49:20:92:49:ec:f0:35:b6:dc:
6b:80:d1:0e:35:2b:f1:d7:44:09:14:d9:11:05:76:0d:0d:72:
f3:f1:f1:b1:64:c1:fc:d6:5f:17:98:8a:21:29:9d:85:4b:99:
d6:4c:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:12 2025 by rpki-client