Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: rMwnRWIxEvAYjCiaEJsMZP35a5KyJYjJn7KSEksdhBs=
Subject key identifier: CD:53:84:DF:B0:CF:87:16:2D:2A:C3:4F:17:F7:E0:B2:C2:29:62:2B
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 019A4E8669333EFDED6582DB59F7BD8517DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:22 +0000
Manifest this update: Tue 04 Nov 2025 11:00:22 +0000
Manifest next update: Wed 05 Nov 2025 11:00:22 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: nEuEOqF5nYqQz10QAB2KouwrXOPsAScUOSarRZ9sPfw=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:69:33:3e:fd:ed:65:82:db:59:f7:bd:85:17:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Nov 4 11:00:22 2025 GMT
Not After : Nov 5 11:00:22 2025 GMT
Subject: CN=cd5384dfb0cf87162d2ac34f17f7e0b2c229622b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:8a:3b:cc:86:8a:49:6c:33:98:74:a7:e8:
cf:b2:ed:05:cc:ed:bc:5b:66:34:45:46:6f:49:15:
1b:dd:27:3c:9f:22:4b:64:ac:aa:32:3e:94:09:ac:
b3:ea:ae:5c:cd:56:13:a1:6f:31:2f:b7:24:c7:87:
e5:06:1b:a8:f0:35:dd:89:44:0f:c6:c0:39:07:c4:
3e:c9:a8:6e:c8:f1:1a:1e:f0:8f:a7:0a:a6:2b:a2:
a3:c8:5d:2e:e5:ae:0b:9d:c4:01:96:18:8a:d3:42:
bd:ef:1f:aa:de:09:10:1f:72:72:ca:5d:dd:dd:10:
9a:0d:fc:56:c7:db:01:32:ff:b0:fb:6f:f7:64:73:
fd:f5:8e:47:70:45:6a:11:d6:a0:a8:e5:33:12:37:
2d:03:42:f0:a3:84:0a:ab:69:9c:93:05:47:b5:29:
ee:2a:0d:ca:c5:d1:50:46:74:69:0a:a0:d9:71:5a:
e3:a8:8c:ec:14:97:4f:13:0f:a3:03:91:f3:c8:b6:
55:52:9e:79:51:91:06:0c:09:bc:83:41:f8:af:30:
93:9a:6f:ba:0a:c3:ab:d3:03:82:bd:41:36:b1:b3:
83:9f:b7:ec:1b:00:04:71:3d:52:da:39:8f:b1:6e:
ec:30:75:64:9e:78:7b:5e:d0:93:e7:40:52:5c:a3:
8f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:53:84:DF:B0:CF:87:16:2D:2A:C3:4F:17:F7:E0:B2:C2:29:62:2B
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ca:94:71:6d:10:6c:ca:9d:77:47:29:88:16:94:27:8b:5a:
df:ff:6f:e6:b0:42:1a:e7:43:4f:54:cf:f5:86:f8:7f:72:c6:
ef:e6:27:b4:91:27:fa:7d:0e:5e:39:27:3d:ed:b1:36:37:e2:
53:63:88:06:9f:82:b6:11:94:6f:67:8f:b5:8b:55:44:f1:44:
ba:2f:0d:9b:11:65:3b:32:4b:b6:c6:6f:d5:74:93:59:4c:c6:
be:44:04:12:99:5b:b1:cb:8d:b2:70:5c:36:47:48:56:e0:86:
33:4b:62:77:93:b7:06:7e:02:0e:27:ed:de:52:a4:4c:44:26:
5d:82:65:a4:7e:6d:82:52:9c:f8:35:24:ab:cc:8f:ba:04:9a:
3f:e6:7f:14:f8:5a:c0:05:bd:66:af:0a:a7:1d:5c:5e:6a:20:
87:95:a3:42:4a:30:a8:a7:17:32:02:83:9e:d0:d1:c9:15:ba:
24:69:04:e8:52:8e:6e:f9:95:e6:36:a3:d7:7d:fb:65:3f:54:
3e:6c:25:90:0b:03:de:3d:ce:93:3a:fe:82:b3:98:1e:da:4b:
29:9a:e2:7e:b5:21:01:cf:8f:3f:2b:c6:ec:0f:2b:ad:c3:1e:
b2:30:15:dc:cb:98:17:64:79:82:20:11:a6:45:18:a4:cb:b3:
f6:7a:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:44 2025 by rpki-client