Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: zPY8VcLlQZrQAS0AeISqEDDqSrR2qp6amXoGrJBL1gI=
Subject key identifier: 21:8D:2A:7A:10:F0:1E:54:B1:AD:FD:B8:39:07:D0:9F:7A:DF:55:18
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 019A4F2B7C5E881667D913344CF590C66906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 0FE4
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: QZgmXeg8g4+oWIFzvAKxxRbZh7RfuM1wnJ8tNdSmWZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7c:5e:88:16:67:d9:13:34:4c:f5:90:c6:69:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=218d2a7a10f01e54b1adfdb83907d09f7adf5518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:11:cc:cb:92:e6:5f:fb:3c:8c:ff:a8:07:
dd:68:53:09:87:f6:e0:50:48:d1:bf:83:8a:f0:83:
fd:ce:ed:bd:e4:26:23:0f:b9:b9:3e:d9:1d:50:d0:
9d:1c:db:ce:08:00:82:e7:47:d5:46:95:e5:13:8a:
8f:ba:f7:04:63:24:f4:f8:44:5d:eb:4c:4f:9b:b4:
8b:9f:f1:3a:5d:d5:00:a5:17:18:c0:5d:f4:d8:cf:
a0:06:10:d1:ab:b2:bf:57:22:6c:d2:f4:5c:b9:d4:
d4:3e:6d:65:6b:43:e0:96:db:2c:9d:89:7b:94:9d:
86:e4:9f:49:73:01:db:fd:78:1d:76:f4:ea:7f:9b:
37:3b:67:8e:34:fe:0c:4b:df:0b:2e:23:17:5b:82:
83:c8:e9:db:8f:99:27:e1:4a:21:89:1a:37:dc:8c:
fc:2f:ce:1a:19:02:c9:05:e9:d1:4e:41:48:08:99:
88:c1:80:01:44:4c:1e:b5:83:11:32:8a:ef:5b:83:
38:08:95:42:18:50:71:d6:31:65:f4:86:59:3d:14:
c7:f4:f1:72:3e:4b:11:45:97:4f:1b:e8:d9:1b:9f:
92:3c:09:5a:1a:3e:c8:df:44:f0:0b:89:88:75:4e:
f0:e7:da:97:05:46:92:85:42:89:54:8c:95:62:9e:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:2A:7A:10:F0:1E:54:B1:AD:FD:B8:39:07:D0:9F:7A:DF:55:18
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:03:28:7b:2f:ce:c8:4f:71:e2:66:9e:8c:61:3a:cc:ea:ea:
6b:20:89:0d:f4:74:17:a6:8d:24:4c:32:31:07:05:08:d0:be:
39:ea:0c:17:bb:3a:58:2c:d0:d4:56:3f:dc:f4:ec:65:16:d0:
06:59:8f:06:76:c1:40:c9:77:4f:1a:c1:5c:a3:dd:d6:94:2e:
a1:47:52:40:57:a9:4a:29:72:bd:68:12:e0:38:c5:2e:45:59:
1d:a6:f4:5b:4e:82:e4:b0:30:2a:e9:95:8a:e8:8f:ab:a8:2a:
4e:53:7e:a1:fd:81:31:19:bc:9f:35:c8:6f:69:fa:c0:1d:27:
a4:74:b4:ba:94:fb:d5:ea:9a:4b:fb:c4:dc:29:20:80:cf:77:
ca:86:df:22:30:74:3b:c3:b8:e1:3d:80:7c:5c:52:47:5f:c7:
85:49:cb:c7:03:b2:c3:5a:fe:95:a5:92:dd:0a:bc:f0:c8:51:
95:9e:ff:48:0d:df:67:1c:94:f2:58:97:db:42:13:68:57:17:
23:d3:e4:27:88:e4:6c:6a:0a:87:87:e9:f6:1d:d4:df:c8:5e:
76:05:6b:a5:61:c3:25:b8:c2:df:12:da:9d:da:54:35:28:cb:
e3:5a:1a:e7:4d:1c:6d:5d:1c:b2:8d:e4:66:3d:9f:6f:ea:73:
8d:ba:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:25 2025 by rpki-client