
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: PHpD+ULgsOTZToLp+ZbXWd8mncdtJRbOcRyTKa4tzt0=
Subject key identifier: 34:40:60:A9:56:56:1D:BA:CC:71:47:92:5A:74:CC:98:2D:B1:58:09
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 019A5299DA34EB6D2153701521C7D8F20B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0B67
Signing time: Wed 05 Nov 2025 06:00:05 +0000
Manifest this update: Wed 05 Nov 2025 06:00:05 +0000
Manifest next update: Thu 06 Nov 2025 06:00:05 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: RTYz00lnz4KzSKv3a54SSpDVG2hbPUXrap1Vt15paiU=)
2: nBqkJ21E89xpdJHsjMjUY6q0t8s.roa (hash: cYjf2nhrD03sJ2C+YxabZIv8XeqfYPE9uhBxiZGoO6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:da:34:eb:6d:21:53:70:15:21:c7:d8:f2:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Nov 5 06:00:05 2025 GMT
Not After : Nov 6 06:00:05 2025 GMT
Subject: CN=344060a956561dbacc7147925a74cc982db15809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:ab:76:08:cc:c7:56:61:18:e6:15:f5:3e:
a0:84:8d:d6:c5:99:e3:49:31:9f:0c:8d:4a:76:88:
87:e1:e5:95:3b:10:4a:df:50:e4:9f:70:8d:8e:a8:
8a:0d:00:e1:86:53:f0:fb:b8:07:ae:b0:2d:9f:10:
0a:81:32:7e:c5:42:d9:54:a9:0e:c0:b0:45:b7:ab:
41:37:56:cc:4f:e9:32:1a:e6:4c:9f:04:35:97:b8:
09:17:42:1b:35:be:4c:d0:a4:99:a7:c8:a3:e2:e4:
a8:c6:2e:9a:94:0f:77:c1:fd:58:77:e5:9b:c2:96:
04:95:84:e9:12:e6:be:d6:33:13:55:de:98:3e:f1:
5b:d9:8a:3a:83:95:bb:5d:81:c7:eb:7c:bc:c6:05:
26:41:fc:7b:33:50:b2:0f:39:fe:3a:ea:8f:fe:0c:
a7:0e:d7:52:6a:e8:f2:8e:b0:fe:80:3b:33:6e:2b:
51:53:47:95:31:bc:07:fb:da:4a:77:e7:fa:67:c0:
40:52:27:7c:9c:5f:8b:97:27:4b:e5:1f:14:c6:6c:
3b:2b:01:e5:e8:f4:96:21:62:75:44:95:8a:8a:16:
58:26:f5:d8:5b:34:a2:22:96:2e:db:27:f2:1b:d6:
f6:5e:af:a3:ee:b5:2b:47:4e:89:9f:bf:94:7d:60:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:60:A9:56:56:1D:BA:CC:71:47:92:5A:74:CC:98:2D:B1:58:09
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:20:44:e5:62:22:87:4e:cb:c0:a3:c1:59:1d:e9:fe:4a:45:
6f:55:8f:87:ea:96:f4:de:02:5c:25:89:1d:8f:08:ec:56:00:
c4:c6:9d:7a:37:30:54:4f:9f:76:05:57:bd:8b:f0:13:50:0e:
95:1c:99:9d:62:dc:49:76:d6:d1:11:bd:f3:4d:6b:95:ca:eb:
8c:94:c9:b0:aa:72:f0:96:46:89:a3:8c:3d:b9:e8:67:83:61:
12:9b:f6:91:46:d6:4a:42:49:9b:56:88:1e:ee:4e:c3:9f:5e:
0b:ca:ad:0b:e5:c2:2a:a2:b2:68:e4:94:6c:cb:6e:91:1f:f1:
12:4a:e9:8e:84:32:16:90:cc:4e:f1:fb:89:c3:60:a8:74:5c:
6e:ef:a3:2f:2f:00:0b:bc:2b:77:a4:06:05:47:85:17:aa:b0:
41:d8:ff:10:ec:ea:30:30:8c:13:8d:3e:23:dd:dc:ca:50:57:
3a:0b:ed:d5:60:f1:cb:d7:ab:67:97:c2:e4:8d:cc:33:d5:ad:
d9:2e:50:94:56:2a:29:92:a6:0e:58:c4:70:c3:a3:41:d9:64:
c8:60:81:d6:24:9f:68:e7:a8:cf:a3:fa:d2:ca:c4:71:d8:9f:
8b:a2:6e:f5:e1:55:af:ab:71:df:ee:4f:ee:d6:f5:98:20:ad:
a5:1c:62:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSmdo0620hU3AVIcfY8gsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUxMTA1MDYwMDA1WhcNMjUxMTA2MDYwMDA1WjAzMTEwLwYDVQQD
EygzNDQwNjBhOTU2NTYxZGJhY2M3MTQ3OTI1YTc0Y2M5ODJkYjE1ODA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+rdgjMx1ZhGOYV9T6ghI3WxZnj
STGfDI1KdoiH4eWVOxBK31Dkn3CNjqiKDQDhhlPw+7gHrrAtnxAKgTJ+xULZVKkO
wLBFt6tBN1bMT+kyGuZMnwQ1l7gJF0IbNb5M0KSZp8ij4uSoxi6alA93wf1Yd+Wb
wpYElYTpEua+1jMTVd6YPvFb2Yo6g5W7XYHH63y8xgUmQfx7M1CyDzn+OuqP/gyn
DtdSaujyjrD+gDszbitRU0eVMbwH+9pKd+f6Z8BAUid8nF+LlydL5R8Uxmw7KwHl
6PSWIWJ1RJWKihZYJvXYWzSiIpYu2yfyG9b2Xq+j7rUrR06Jn7+UfWCgZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRAYKlWVh26zHFHklp0zJgtsVgJMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfCBE5WIi
h07LwKPBWR3p/kpFb1WPh+qW9N4CXCWJHY8I7FYAxMadejcwVE+fdgVXvYvwE1AO
lRyZnWLcSXbW0RG9801rlcrrjJTJsKpy8JZGiaOMPbnoZ4NhEpv2kUbWSkJJm1aI
Hu5Ow59eC8qtC+XCKqKyaOSUbMtukR/xEkrpjoQyFpDMTvH7icNgqHRcbu+jLy8A
C7wrd6QGBUeFF6qwQdj/EOzqMDCME40+I93cylBXOgvt1WDxy9erZ5fC5I3MM9Wt
2S5QlFYqKZKmDljEcMOjQdlkyGCB1iSfaOeoz6P60srEcdifi6Ju9eFVr6tx3+5P
7tb1mCCtpRxi5g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:31:00 2025 by rpki-client