Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: montZG2DHaoIWwRaZXqJOJaPPyF8GyU12TAKl9rkg6M=
Subject key identifier: F1:A6:72:C4:A4:77:F9:20:0F:F8:7F:0A:64:50:88:3C:C6:D7:D4:51
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 019A50073938442245E384F8C41EC3DFC22D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 021E
Signing time: Tue 04 Nov 2025 18:00:41 +0000
Manifest this update: Tue 04 Nov 2025 18:00:41 +0000
Manifest next update: Wed 05 Nov 2025 18:00:41 +0000
Files and hashes: 1: MhKg3zFeMWwt4nczszDXPl3rkdw.roa (hash: xWL0qt2yK+b8YqGsFpZ+gVcRydDsCjYBfNBZRZ/XtUk=)
2: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
3: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: Unfg+NOD2IMcXs2EWrWJhUJ3oFnYJgc9dfBj5V47tHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:39:38:44:22:45:e3:84:f8:c4:1e:c3:df:c2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Nov 4 18:00:41 2025 GMT
Not After : Nov 5 18:00:41 2025 GMT
Subject: CN=f1a672c4a477f9200ff87f0a6450883cc6d7d451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5c:28:66:8b:f8:3a:25:ad:13:ed:8a:51:03:
65:ed:1e:5a:31:a9:4b:d6:eb:13:4e:48:14:be:4e:
2f:b2:13:a7:3b:78:9a:77:a3:d6:63:5f:60:72:06:
88:d0:6b:50:fb:dd:ea:c8:2d:61:39:42:56:55:99:
86:be:92:b4:78:b5:6a:1f:78:89:d0:68:67:98:e9:
13:0c:6b:ac:30:c6:1c:05:ca:37:a6:1b:ad:81:06:
e0:40:a5:93:10:20:58:65:01:4c:e1:80:de:9c:0a:
08:e8:3d:6d:32:10:6e:c0:f0:ce:ea:f5:7f:21:14:
a3:b8:f3:f4:eb:ad:4d:21:a1:71:ed:e2:18:06:ab:
97:aa:5b:55:a1:76:bb:64:94:08:d8:ce:ce:bc:cd:
eb:6b:e7:dd:06:e0:ac:7d:d8:27:b7:68:30:c0:36:
5a:d0:34:84:45:3d:dc:16:a6:e1:e8:cc:8b:15:cc:
0b:4f:ac:9a:d7:1d:a3:20:6d:85:95:f6:67:09:f5:
d5:d0:6f:4b:8e:93:4e:c4:64:d0:63:41:88:70:e8:
9d:19:2b:8e:32:d9:84:3a:63:c8:f6:b5:b9:2c:15:
0b:0f:9f:88:b6:7b:78:bf:60:8e:10:4b:5e:c2:2c:
6e:14:30:93:0b:a9:eb:d1:ea:7e:4e:db:8a:be:71:
27:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A6:72:C4:A4:77:F9:20:0F:F8:7F:0A:64:50:88:3C:C6:D7:D4:51
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f7:7e:12:67:bb:2b:c4:1a:5d:e9:1b:fe:45:8b:0f:8a:69:
d3:b7:e3:3d:94:18:9f:42:94:d6:95:e8:2b:7f:66:33:f1:ea:
0b:97:f2:bf:8b:4e:1d:1a:86:c7:54:d3:c3:2c:32:3f:ed:58:
11:15:20:cc:5e:6b:c3:2e:b8:76:9c:8a:13:a1:b5:05:97:27:
5b:05:a6:ce:1e:f0:18:e5:39:72:6a:99:3b:47:60:7e:23:4c:
0e:87:70:f8:47:4c:ee:b7:11:f5:8e:2e:26:6d:fe:7a:25:f7:
be:54:a4:de:26:4f:b5:97:59:ae:f3:8e:04:fb:44:54:a3:0d:
86:66:91:27:7b:46:58:e9:86:e3:16:af:5c:98:2c:30:26:7c:
a0:f9:7d:e0:58:eb:2a:45:25:03:7e:a9:3e:f4:a7:bd:e0:88:
7b:18:c0:8a:33:a5:a0:cb:03:93:ca:8b:e3:25:7a:77:67:dd:
9a:f6:a3:fa:19:2a:95:3a:2e:14:1f:46:97:b7:31:08:a3:62:
14:7b:ed:df:1a:0a:56:6f:70:4c:e0:05:5e:ce:4f:dd:5d:a2:
67:ac:5b:47:fe:b4:ca:5b:f4:68:91:40:05:da:63:3b:da:f1:
d4:fd:e2:47:9b:0d:04:b1:11:fc:b9:9f:0e:7b:a0:3d:e0:84:
ef:ef:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:47:27 2025 by rpki-client