Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: r2XqTGbP1ds9y68P9jjxW9XsNl9s8gCEdAxPlfQazXw=
Subject key identifier: FA:86:E7:50:55:A2:00:48:E0:54:07:4A:48:11:F3:18:5C:5A:78:95
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 019A51506FC23881078A6FA353C072162E3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0DEE
Signing time: Wed 05 Nov 2025 00:00:17 +0000
Manifest this update: Wed 05 Nov 2025 00:00:17 +0000
Manifest next update: Thu 06 Nov 2025 00:00:17 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: lvgEDaWmJAlRlY6N/GD9pVzqx4liDU/umcMyqS83LH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6f:c2:38:81:07:8a:6f:a3:53:c0:72:16:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Nov 5 00:00:17 2025 GMT
Not After : Nov 6 00:00:17 2025 GMT
Subject: CN=fa86e75055a20048e054074a4811f3185c5a7895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:75:9e:4f:66:3c:fd:44:f0:8e:8c:e2:af:
a4:d8:8c:29:90:77:6b:21:57:d3:88:2e:62:ab:9b:
04:4c:92:47:be:99:8f:da:c4:7e:dc:54:23:5a:9a:
f4:40:b2:e4:88:5b:34:00:b0:7f:67:61:c7:07:d7:
7b:02:65:47:c7:05:7e:e0:5b:9e:4a:69:c4:c8:c0:
a6:7b:19:ca:46:c6:cd:8e:f7:b0:55:b7:64:10:2e:
0b:b3:79:8e:ab:27:b9:ae:fd:4b:9f:2a:9b:cf:c8:
27:e6:20:35:44:41:fc:af:a0:ff:56:33:3d:6f:29:
40:ad:a0:c4:a5:4c:49:f7:81:d1:f3:52:7c:71:02:
c4:4f:c0:64:6b:c7:23:9f:fe:5f:c3:37:48:25:ea:
2a:cd:f2:26:33:f7:d6:a7:6c:03:3e:c6:c6:fa:a3:
fa:86:00:99:d2:ec:41:c3:b7:f5:70:a1:8e:48:fd:
15:87:b9:9d:79:c2:82:1f:69:7e:f5:d2:26:ae:69:
a6:1c:3f:fe:af:e4:84:e0:09:1c:a4:78:07:6e:6a:
46:3c:db:cb:d9:0c:a6:e5:fb:8f:42:e8:4d:5a:68:
3a:92:39:ee:2e:a8:93:35:bb:66:f8:cf:59:c6:0a:
97:b1:66:3d:26:03:cf:e8:9e:2c:20:9e:e9:0b:ef:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:86:E7:50:55:A2:00:48:E0:54:07:4A:48:11:F3:18:5C:5A:78:95
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:e4:5d:fa:0f:c5:05:04:04:39:e1:e1:9e:6b:3e:fd:d3:
c1:f3:5d:23:5f:52:3b:1a:85:05:6d:e8:aa:8a:a3:8e:fa:48:
bb:74:9b:45:50:e0:47:7d:cc:07:67:92:e4:47:4d:77:6e:5d:
c4:d5:85:35:c4:f2:fc:07:62:7d:a7:eb:ee:de:86:7a:31:13:
42:a9:20:9e:5f:99:1e:9e:34:b9:a0:d3:4d:a2:3e:62:55:5f:
89:86:8b:d7:b4:dc:f8:5d:b9:8f:59:cf:58:d7:74:fc:c3:33:
0b:1f:89:6c:9a:8e:d3:8e:4e:3b:44:c1:8f:84:df:b8:6f:02:
eb:26:a9:43:1b:1c:d4:da:ce:a8:8b:d7:85:84:a5:5b:9c:06:
a1:50:54:eb:86:6c:5d:32:20:e5:37:dc:f3:07:54:36:58:24:
9c:49:d6:cb:d3:0c:81:45:3d:0c:1b:1f:e0:a5:0c:f4:0f:43:
3a:51:6e:5e:a6:f4:7e:d7:15:06:b3:50:8a:db:c5:fd:bf:7f:
e7:1e:e6:de:44:35:99:47:6f:fe:e0:3e:da:f1:92:b2:04:02:
3c:fd:15:29:a2:1a:0d:1b:ec:16:ac:11:ce:03:7f:69:38:68:
6d:13:f9:0b:77:f5:0b:53:65:fa:7b:54:cb:dc:c2:db:a7:2f:
90:ff:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:44 2025 by rpki-client