Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
File: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft (raw, json)
Hash identifier: gI3B1S1Uv3J6b+XM5Ddg314pM8C4qHh69UOqEH5/Rlc=
Subject key identifier: CA:B7:0E:C1:67:A6:CE:06:5F:AD:FF:C7:1B:8F:D9:01:16:72:C1:47
Authority key identifier: 4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
Certificate issuer: /CN=4be372f98d766586c118b796b742ee575297c839
Certificate serial: 019A54517234AACD3DAEF3A005C55813E5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
Manifest number: 01D9
Signing time: Wed 05 Nov 2025 14:00:14 +0000
Manifest this update: Wed 05 Nov 2025 14:00:14 +0000
Manifest next update: Thu 06 Nov 2025 14:00:14 +0000
Files and hashes: 1: Mto4d4IFbeBIsa6qUyocr2jWWK8.roa (hash: hLmX3yT44hxgxojTu+MlPrp+Zl/FamUEdVMXkmwsOEc=)
2: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl (hash: lANPCJqhjst2NUHbgquSdkhQhyyyW/evMWlgyv2NEKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:72:34:aa:cd:3d:ae:f3:a0:05:c5:58:13:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be372f98d766586c118b796b742ee575297c839
Validity
Not Before: Nov 5 14:00:14 2025 GMT
Not After : Nov 6 14:00:14 2025 GMT
Subject: CN=cab70ec167a6ce065fadffc71b8fd9011672c147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:84:de:47:8b:2b:d0:e1:a2:e8:3d:f2:f8:
8a:2c:e3:9e:18:e0:d2:4c:63:55:59:5b:84:61:9a:
9d:a7:1a:4d:b5:15:78:1d:ea:4d:8f:44:0b:a5:0c:
1b:e0:39:3c:57:bc:47:cc:c7:c0:fe:c4:da:33:ef:
2b:26:b8:9b:9b:72:2f:d7:00:6d:d9:11:1c:96:72:
59:17:2f:80:c6:9c:00:c8:40:53:4d:34:c5:96:5a:
af:db:f0:39:c5:1f:18:72:46:be:49:3b:bc:74:b3:
46:58:ce:97:05:1d:46:de:e7:89:76:91:33:18:e9:
46:5a:cb:3a:63:e4:80:56:9a:15:6b:09:e7:d2:14:
9b:ac:6b:18:8d:58:a7:4c:90:42:e5:7c:57:72:c8:
db:3b:81:9a:6d:f5:2a:00:4c:99:54:d9:76:ff:24:
78:2f:77:63:01:d4:d5:cd:43:30:0b:43:05:0c:ce:
fd:6f:b0:33:6d:32:bc:77:09:a5:6e:6c:39:1c:87:
10:ab:04:01:d7:fa:c9:e3:34:c2:38:ea:43:dc:33:
8b:7d:8d:30:f9:55:a0:bc:d7:c3:a3:f7:2b:24:b5:
76:9e:bd:ac:4d:8f:ea:e4:3e:99:de:29:1e:0a:f7:
02:2f:ce:ac:54:cd:6d:c1:70:75:1f:a1:1e:84:43:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B7:0E:C1:67:A6:CE:06:5F:AD:FF:C7:1B:8F:D9:01:16:72:C1:47
X509v3 Authority Key Identifier:
keyid:4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:f7:be:87:16:5f:f4:cd:bc:e1:80:88:e4:6a:47:f9:01:
67:10:09:74:44:61:e2:e8:73:2b:44:07:19:43:ff:c9:10:49:
90:28:ed:4b:f2:fa:24:88:d4:2d:dc:96:20:aa:42:1a:74:68:
97:fe:99:57:26:9b:8f:ca:99:a1:ea:b0:f0:b6:e8:b7:f9:95:
2a:fc:e6:9f:2b:35:8a:0a:08:8c:7a:22:e8:cb:21:17:dd:3c:
99:f7:d6:ec:f2:75:02:cd:44:5c:49:c1:37:44:e0:7c:f2:cf:
b9:a0:86:c3:4f:25:1c:69:41:b2:6a:2b:96:e0:59:46:26:d2:
b8:14:6e:84:b3:64:b7:f7:7d:28:65:a9:e9:57:dd:f4:bb:53:
b9:e4:ea:4b:a4:84:5c:72:d7:14:c6:d2:49:c6:f8:05:19:33:
02:57:a7:54:c8:b9:d3:bd:92:be:1c:24:84:2b:69:6e:18:7d:
ab:ad:1b:2d:87:a5:64:df:2f:7d:89:1c:46:41:07:6b:3d:63:
b4:89:b3:44:97:c2:5d:37:6e:59:3c:4d:14:ff:8f:92:14:2d:
16:72:19:dd:89:a4:6b:aa:c5:f3:ee:00:4f:04:bf:b6:c5:ef:
da:2a:2d:f2:91:a2:29:68:90:15:d4:53:0b:0d:fa:f8:af:06:
cf:54:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:23 2025 by rpki-client