Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: RfBGxgsSwvDdVrrehOWU5J9H47gzHwENw8v7aq6nIW8=
Subject key identifier: 9D:80:45:6B:A4:E3:2A:2F:E3:E4:90:21:8F:E8:53:34:E3:9B:3C:B9
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019A54C06CFF7A9273B2DA66D8FAB596C8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0A38
Signing time: Wed 05 Nov 2025 16:01:28 +0000
Manifest this update: Wed 05 Nov 2025 16:01:28 +0000
Manifest next update: Thu 06 Nov 2025 16:01:28 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: 2gZf9ErbBOYT6iNkGblRtcgC9SbGU/VGU+czWTjLCj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:6c:ff:7a:92:73:b2:da:66:d8:fa:b5:96:c8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Nov 5 16:01:28 2025 GMT
Not After : Nov 6 16:01:28 2025 GMT
Subject: CN=9d80456ba4e32a2fe3e490218fe85334e39b3cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c4:62:cb:ea:22:36:15:a5:b5:9b:15:e8:2f:
53:95:ac:7e:4f:42:58:f3:85:d6:4b:4f:3f:b9:58:
e9:5d:39:e1:db:75:05:f6:53:02:a7:a8:a0:60:05:
79:f4:65:2e:81:30:dd:e7:e7:3d:12:21:20:80:1b:
12:2c:81:34:bc:be:f5:c4:b3:a5:e4:13:08:73:bd:
3d:6b:95:0e:b9:b0:e3:4f:48:b6:38:aa:1a:13:c7:
a0:7d:24:91:e1:71:55:e3:7c:a8:fa:9a:59:6d:5e:
b7:12:f9:8e:de:bd:10:46:f0:f5:44:3a:6b:7b:b8:
7b:0a:16:91:6e:98:30:9b:57:25:56:67:97:59:30:
7c:18:65:7f:20:4d:ea:09:f5:a7:96:c2:5c:c9:f2:
87:5c:5b:58:49:0d:e8:04:a5:b5:b4:b0:07:27:23:
52:91:09:95:ad:c1:0f:6a:78:5b:10:c7:4b:f8:3c:
e4:71:35:0e:4a:3f:43:d2:c0:1f:1d:09:13:d9:09:
6c:f6:04:f6:2f:20:3d:c3:ce:bc:4d:fb:91:89:80:
bf:91:41:22:77:ea:67:52:02:af:9c:49:6a:20:57:
57:7c:19:0c:3e:07:71:ac:53:66:61:f8:d6:ab:85:
f5:47:0c:20:2c:67:30:68:b5:2e:79:ef:57:52:bc:
dc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:45:6B:A4:E3:2A:2F:E3:E4:90:21:8F:E8:53:34:E3:9B:3C:B9
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f4:88:4a:0e:70:5f:b2:27:e1:66:d7:02:a9:dc:27:4b:f7:
05:2c:19:60:c8:07:6e:0e:b1:7b:66:1c:e3:23:6e:33:6a:33:
d0:d9:75:be:94:a1:e4:87:8a:37:98:b1:e9:2a:f7:46:4d:c7:
60:14:da:87:8b:18:b8:c3:5d:96:fc:d3:ef:5c:4e:1f:f3:2e:
ed:05:b9:d3:1e:72:8f:a5:2f:6b:e5:d9:9e:a7:6e:05:85:72:
5d:77:e5:b8:dc:3b:bc:90:3d:b8:17:a2:2a:0b:a9:2a:d7:2e:
bc:ee:7b:d4:3c:5a:01:52:48:fe:a8:bf:4d:8e:b2:01:3d:83:
f9:f8:32:39:7d:62:f2:ac:eb:d7:fd:2b:f6:7e:2a:e7:62:3a:
da:fd:0e:d2:f4:b2:9a:4e:ea:9d:b9:77:87:5a:6a:9c:0a:ef:
46:56:46:6d:54:c1:c0:e3:ef:c9:5c:81:c5:c4:f5:3c:d3:ec:
cf:42:05:ce:02:bf:b4:34:28:0f:a0:99:6b:68:42:84:b1:29:
b7:36:ca:bf:ff:b7:41:92:26:c3:4d:9d:29:8d:04:73:b4:7c:
2b:b9:b7:8a:fc:3d:bf:78:04:c1:1e:06:b9:f1:17:99:08:84:
5c:e1:80:5f:f6:63:07:0a:bd:f7:76:d7:8d:08:2d:ef:83:65:
25:6e:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:38 2025 by rpki-client