Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: efKR6z/bF2Ypux+ldVibthzPmHPA706fVmNzHMfURJ4=
Subject key identifier: 82:4C:C6:5C:07:AF:97:D1:FF:40:E8:39:79:A0:D2:66:2E:E7:C4:B5
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019A522C40B1E964A0E4AD09D66E2187D49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 04:00:23 +0000
Manifest this update: Wed 05 Nov 2025 04:00:23 +0000
Manifest next update: Thu 06 Nov 2025 04:00:23 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: JRgLxsGzK1hi/wLUD27tfXOq9IRYvENopEiM211wRWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:40:b1:e9:64:a0:e4:ad:09:d6:6e:21:87:d4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Nov 5 04:00:23 2025 GMT
Not After : Nov 6 04:00:23 2025 GMT
Subject: CN=824cc65c07af97d1ff40e83979a0d2662ee7c4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:70:c3:57:05:d8:8b:8d:28:13:61:04:10:
6d:b4:9c:1d:64:11:1f:9f:bc:36:5b:04:84:0d:89:
f8:f1:29:90:6c:25:82:f8:66:fe:a7:a3:07:70:11:
3e:dd:2d:dd:b1:19:5d:03:a0:c7:85:0b:02:aa:bb:
6e:09:4a:11:12:04:b3:a1:f1:54:bb:4a:3b:b2:ff:
52:01:16:db:c8:ea:11:ea:9a:f7:56:ee:3e:3b:e1:
4a:a9:ce:0e:8f:46:53:df:e2:7c:03:d9:41:92:d7:
6e:5e:5f:b6:b2:c7:2b:72:bb:be:dd:80:08:0d:c2:
f2:7b:ce:ac:a9:31:ac:b7:59:cd:34:c7:b1:34:81:
72:48:4d:d5:dd:37:11:a5:15:3b:e5:0c:2a:ec:be:
0f:52:25:4d:83:cb:2f:48:25:46:cd:d4:19:55:fb:
a2:3e:dc:24:a9:5b:6b:5d:dd:df:84:0e:27:d7:15:
7d:2d:1d:c0:fd:ed:f0:56:e9:15:8d:47:0a:b7:eb:
4c:df:2a:e3:af:a9:75:4a:84:e3:09:79:18:f9:03:
4a:18:0e:77:94:d1:e6:8b:a7:b9:79:13:b3:69:42:
b3:a4:51:13:43:d5:b4:89:41:4b:27:87:6c:e1:72:
11:a1:ee:06:33:b9:8f:f9:c9:15:09:f3:7c:1b:b2:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4C:C6:5C:07:AF:97:D1:FF:40:E8:39:79:A0:D2:66:2E:E7:C4:B5
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ec:39:22:a3:05:e9:70:07:a6:17:84:01:77:2f:bd:47:bc:
e8:dc:1a:6e:51:a9:1e:02:4e:27:69:bf:66:c2:c5:a7:60:97:
d1:a2:a9:32:65:4a:94:27:87:4a:7b:c2:af:fc:68:1e:37:f7:
1f:e9:c9:87:7b:92:bb:7a:e9:5a:cb:be:5c:1c:a7:b1:fc:05:
6f:df:c0:5b:9d:60:26:f5:91:c4:d4:a6:70:ba:dc:1c:b6:4b:
71:48:5d:58:5d:bc:db:09:60:e7:c1:77:cc:aa:af:54:bc:69:
42:c5:d6:bc:67:fc:d0:76:e0:51:36:83:5d:fe:95:63:29:8c:
6e:2a:7c:35:8e:78:cc:b5:94:19:ab:78:f7:7a:29:8b:7a:fb:
1a:0c:8f:c9:f6:ca:26:c6:d1:3d:25:c2:3a:48:29:c4:04:fe:
fc:f0:ff:b9:3a:60:28:fb:65:75:b8:86:d1:88:0b:a4:a9:50:
d7:61:d9:5f:f4:b1:41:28:05:4d:7d:84:ff:ef:4a:78:ae:c9:
f9:6d:80:9e:59:0c:a1:bd:27:35:db:f6:7d:ef:04:2d:8d:22:
36:fb:20:97:5d:93:0b:5a:f4:12:18:56:8c:cf:92:c5:c1:08:
81:2e:92:0a:1d:e8:c7:b2:44:7f:c2:88:25:ab:67:db:11:49:
5f:3e:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:51:53 2025 by rpki-client