Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: K6f5TwSpOe1LDmDZNuNeS2VkLlbZ6Gksn17Ps30c83w=
Subject key identifier: 91:8A:9D:29:5D:85:D6:5B:05:BE:9E:D4:7A:26:6B:4D:DA:12:4A:F0
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 019A51BE20A13702EDCA8ACC8CE7B83C519C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 14E0
Signing time: Wed 05 Nov 2025 02:00:05 +0000
Manifest this update: Wed 05 Nov 2025 02:00:05 +0000
Manifest next update: Thu 06 Nov 2025 02:00:05 +0000
Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: N+0cxp6b8SOsuThuIWCGa4xWApCRto4yKylSJ2lwFj0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:20:a1:37:02:ed:ca:8a:cc:8c:e7:b8:3c:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Nov 5 02:00:05 2025 GMT
Not After : Nov 6 02:00:05 2025 GMT
Subject: CN=918a9d295d85d65b05be9ed47a266b4dda124af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:a6:17:a1:42:af:05:e0:6a:e1:b8:39:e9:
98:c5:16:39:28:25:11:48:29:99:d7:eb:0b:0e:32:
fa:84:bc:32:15:ae:4c:2b:e0:af:11:e6:4e:b1:b7:
48:f2:25:dc:a0:2d:7c:8d:04:bd:ec:4d:f7:b8:19:
7d:aa:c2:3f:8c:82:72:05:d4:94:0c:4f:f0:5b:54:
17:a1:d8:77:6a:18:ba:77:63:ce:1d:7f:5a:13:44:
c3:0a:b7:92:b8:b5:d8:f9:27:69:33:c1:e8:65:06:
63:57:ec:a7:37:cd:84:33:12:2b:3a:7e:40:fe:b7:
ba:cd:cd:dd:6a:92:ef:6e:46:66:53:6c:39:3b:e2:
eb:b3:ca:e3:e5:25:ba:a3:8a:d8:1b:88:a6:a7:8d:
1d:b6:91:29:b4:fa:ae:c5:2f:87:3e:c4:7a:c5:6f:
fa:06:b9:f4:7e:57:48:2f:70:c7:10:60:86:1e:18:
7e:36:6c:42:4f:1b:74:8d:91:cb:aa:a4:ed:60:90:
1f:ad:4c:67:22:0b:aa:d5:1d:2c:76:40:11:ee:1e:
65:da:8e:8c:7b:5d:f9:8c:b9:b7:1b:73:f9:f9:0a:
fa:52:9a:88:77:ef:6c:a1:18:e2:29:c6:4e:99:21:
3f:c4:62:08:40:42:72:6d:8b:dd:3b:13:f2:35:7d:
c8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:9D:29:5D:85:D6:5B:05:BE:9E:D4:7A:26:6B:4D:DA:12:4A:F0
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3f:0c:44:4a:04:3d:d5:78:4e:3f:45:eb:a6:5e:1b:d0:de:
4a:df:ce:2f:27:23:8d:ae:77:80:fa:41:9b:9a:0d:92:ca:c9:
2e:c3:6b:25:f8:7e:cc:cd:5d:50:6e:cd:87:53:68:83:97:7f:
33:21:99:9d:94:74:ea:8f:b7:e9:9f:ab:02:12:cf:f8:bd:22:
89:14:0e:25:08:00:3f:2d:52:f7:f0:97:41:d9:d0:0d:9d:88:
6b:4e:93:2e:7b:7e:2c:a1:c0:c0:07:26:44:5d:63:2b:dc:d8:
21:ca:5d:ad:d7:ca:bf:70:80:1d:f5:b8:6f:a4:d5:16:26:c7:
22:61:93:90:2b:a8:bb:7a:59:65:38:46:a9:f7:fc:31:9a:67:
57:95:25:75:b3:8a:f5:7b:40:e5:0d:96:8e:57:62:9d:92:23:
0f:23:32:e4:2f:52:be:1f:5b:9e:41:ef:fa:12:7d:82:23:fe:
d2:f3:0e:f3:f2:1e:20:5e:32:fc:11:e4:16:29:ea:f4:f5:60:
84:2f:9b:97:76:03:ec:75:c0:92:ea:7c:8b:39:8d:59:c4:91:
e4:67:0b:c8:3e:a2:3b:75:c0:10:c0:fa:ab:5d:fd:65:0d:8b:
75:a6:98:3e:f1:7a:24:36:19:ee:30:1c:43:83:53:e7:b4:13:
93:ad:d3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:51 2025 by rpki-client