Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
File: sjby5CUi6Y03a-OKieXdUau_eZY.mft (raw, json)
Hash identifier: pEY1r10myMaBnlAKPHwjvrB0tfzpKJ27bxOI1fKf6Cc=
Subject key identifier: 18:69:DC:F9:3F:48:D1:54:F1:51:03:2B:62:4D:EC:36:07:BD:63:1C
Authority key identifier: B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
Certificate issuer: /CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Certificate serial: 019A4DE2173E58EFDF6F14AE95EAF349E2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: 6iKkuLhTnDFWaq3-3shTrwGrJ8g.roa (hash: ss9t8FqhS0xrNtCTKl7Xpo6Vl1ClWOF8J3Gh9ZaVFpU=)
2: I-Uqa1zPH3U2lg8ZFnzuOmPnTWg.roa (hash: u740YP79Lg/XA3U3RRNbSWSMGjpptyvItjaGSDwTCrE=)
3: sjby5CUi6Y03a-OKieXdUau_eZY.crl (hash: 3XbWr/L5Oy7fGwOqLQWcXVDaJ1x6av0oAE208ET05NE=)
4: v0rFapiuVgAPd3myx6BzGGJPu3Q.roa (hash: xPkjdAicyKc46/gVu1t411DskLBNUbMsE7SCd3XdA1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:17:3e:58:ef:df:6f:14:ae:95:ea:f3:49:e2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f2e42522e98d376be38a89e5dd51abbf7996
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=1869dcf93f48d154f151032b624dec3607bd631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9d:68:8b:ce:8f:49:8e:0e:52:da:74:7b:57:
51:9d:81:b0:20:f0:58:93:3e:5d:d5:a7:f4:53:df:
7f:c2:06:86:95:16:7f:2b:b0:50:72:ef:a6:b6:fc:
4e:ed:94:7a:d2:c0:6b:24:fe:75:6a:36:76:0c:a4:
4a:ed:26:12:6a:cf:45:4e:c2:8b:b4:a2:8c:ce:bc:
4f:49:16:ee:31:90:81:0a:89:91:83:2f:a4:f0:a9:
82:a8:87:2e:13:4e:48:a2:79:ad:81:66:50:ca:0b:
4e:3b:25:2c:b6:45:22:df:d8:9d:4e:10:5b:74:50:
43:15:00:5a:fd:e3:71:15:db:6b:8c:55:9b:c1:1b:
37:3d:0a:52:a9:95:ca:00:60:01:4d:d6:06:59:49:
41:4a:07:16:5d:fb:41:22:1f:40:a3:b0:a4:fb:fc:
56:f3:0b:af:13:9e:cf:4c:58:b7:a0:63:37:d3:63:
3b:89:6b:b7:5d:ac:f4:4a:78:3a:1c:9a:71:09:ec:
d6:d0:4b:c7:be:1c:37:4c:15:a2:32:f3:20:d6:29:
06:53:52:b3:75:26:48:f8:a2:37:b6:09:ac:fb:91:
ef:4a:f1:64:35:4e:70:51:2f:39:fa:9a:78:fb:88:
ac:11:c8:95:5e:86:e1:9d:8b:9d:30:a8:89:01:d4:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:69:DC:F9:3F:48:D1:54:F1:51:03:2B:62:4D:EC:36:07:BD:63:1C
X509v3 Authority Key Identifier:
keyid:B2:36:F2:E4:25:22:E9:8D:37:6B:E3:8A:89:E5:DD:51:AB:BF:79:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjby5CUi6Y03a-OKieXdUau_eZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/18b52b-5011-4309-bfbf-6eaa1c89824a/1/sjby5CUi6Y03a-OKieXdUau_eZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:bb:e2:a6:6d:18:9b:33:37:e9:f0:d7:62:bc:cc:9f:47:5c:
ae:2f:c5:21:60:db:21:48:f9:c8:9a:ec:15:cf:ae:d2:a6:fa:
41:64:f3:3e:38:52:c7:1a:fa:71:44:f3:de:05:70:3d:98:6a:
a9:8a:75:00:06:9e:2f:89:50:d6:87:f5:de:d5:af:ef:a1:ef:
0f:30:9f:9a:00:83:6d:1c:fd:ef:02:0e:2d:6d:6f:d7:8e:8a:
f0:0d:03:66:18:af:2f:f5:02:cf:e1:7c:de:ce:92:08:12:6b:
e3:69:ac:44:73:4d:be:aa:86:76:28:98:7b:31:31:86:22:5a:
9a:4d:f1:dd:d0:a1:2d:46:cd:72:c4:6a:d3:6c:17:23:4a:fa:
6d:c4:a2:bc:be:20:08:23:1d:66:bd:75:ca:2e:8c:77:52:7c:
09:76:63:69:7a:54:68:18:d6:e2:b2:1c:b5:b4:41:1d:c1:4d:
57:43:d0:ee:f8:81:91:6c:df:02:29:c6:e3:3c:31:e8:a8:4d:
0f:a6:4d:db:06:c3:60:e3:b8:27:6a:3d:b6:ed:b4:f8:a1:61:
8c:cd:db:f7:5b:86:89:9b:ea:5b:7d:64:6a:3a:5b:5a:69:cb:
b2:cb:01:69:6b:88:55:23:13:fc:b9:7e:52:da:bf:95:ce:40:
73:5b:be:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4hc+WO/fbxSulerzSeLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzZmMmU0MjUyMmU5OGQzNzZiZTM4YTg5ZTVkZDUxYWJi
Zjc5OTYwHhcNMjUxMTA0MDgwMDUzWhcNMjUxMTA1MDgwMDUzWjAzMTEwLwYDVQQD
EygxODY5ZGNmOTNmNDhkMTU0ZjE1MTAzMmI2MjRkZWMzNjA3YmQ2MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5J1oi86PSY4OUtp0e1dRnYGwIPBY
kz5d1af0U99/wgaGlRZ/K7BQcu+mtvxO7ZR60sBrJP51ajZ2DKRK7SYSas9FTsKL
tKKMzrxPSRbuMZCBComRgy+k8KmCqIcuE05IonmtgWZQygtOOyUstkUi39idThBb
dFBDFQBa/eNxFdtrjFWbwRs3PQpSqZXKAGABTdYGWUlBSgcWXftBIh9Ao7Ck+/xW
8wuvE57PTFi3oGM302M7iWu3Xaz0Sng6HJpxCezW0EvHvhw3TBWiMvMg1ikGU1Kz
dSZI+KI3tgms+5HvSvFkNU5wUS85+pp4+4isEciVXobhnYudMKiJAdS43wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhp3Pk/SNFU8VEDK2JN7DYHvWMcMB8GA1UdIwQY
MBaAFLI28uQlIumNN2vjionl3VGrv3mWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYt
NmVhYTFjODk4MjRhLzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8xOGI1MmItNTAxMS00MzA5LWJmYmYtNmVhYTFjODk4MjRh
LzEvc2pieTVDVWk2WTAzYS1PS2llWGRVYXVfZVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7vipm0Y
mzM36fDXYrzMn0dcri/FIWDbIUj5yJrsFc+u0qb6QWTzPjhSxxr6cUTz3gVwPZhq
qYp1AAaeL4lQ1of13tWv76HvDzCfmgCDbRz97wIOLW1v146K8A0DZhivL/UCz+F8
3s6SCBJr42msRHNNvqqGdiiYezExhiJamk3x3dChLUbNcsRq02wXI0r6bcSivL4g
CCMdZr11yi6Md1J8CXZjaXpUaBjW4rIctbRBHcFNV0PQ7viBkWzfAinG4zwx6KhN
D6ZN2wbDYOO4J2o9tu20+KFhjM3b91uGiZvqW31kajpbWmnLsssBaWuIVSMT/Ll+
Utq/lc5Ac1u+QA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:50 2025 by rpki-client