Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File: sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier: 75H+mDSCnHcAFKrJy9BPkY61HguZgY+8jck12UyZO38=
Subject key identifier: 1B:54:50:0A:27:25:16:68:0C:AF:AF:73:E9:84:80:83:D8:F0:8F:71
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer: /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial: 019A541ACB7C00596FC5557C264C3FA33FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 13:00:33 +0000
Manifest this update: Wed 05 Nov 2025 13:00:33 +0000
Manifest next update: Thu 06 Nov 2025 13:00:33 +0000
Files and hashes: 1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: NM4o3UV82wuJXkm201R3fJfNLLFOiSRARGuPeJWh6rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:cb:7c:00:59:6f:c5:55:7c:26:4c:3f:a3:3f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
Validity
Not Before: Nov 5 13:00:33 2025 GMT
Not After : Nov 6 13:00:33 2025 GMT
Subject: CN=1b54500a272516680cafaf73e9848083d8f08f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:46:33:50:29:3f:aa:0d:d4:4e:ca:88:d7:
6c:1f:24:c3:dd:6f:e5:f7:41:19:84:0f:84:f7:1d:
83:e1:d4:7a:4e:10:d4:29:c2:74:87:5c:94:ba:da:
4b:00:64:f0:28:15:ea:fd:c3:03:24:4a:a1:9b:46:
06:70:a9:da:95:90:83:89:6c:97:7b:fd:8e:a8:05:
53:0f:72:9c:c2:44:01:4e:14:40:ee:f0:23:51:3e:
f0:99:f9:91:9c:58:fa:84:3c:7b:b2:bf:b6:26:bb:
56:49:6c:4f:d4:dc:02:ed:40:18:8c:c5:bf:1d:af:
43:7a:34:f5:0a:84:75:0b:38:c8:e8:61:d4:e1:00:
98:04:fd:fb:ba:c2:72:fb:3e:20:b0:b5:6c:7e:d5:
3f:f0:5a:26:f0:18:96:63:95:5a:a0:e7:e9:07:af:
68:36:8a:dc:c6:fb:70:28:3f:f9:11:fd:9e:ca:cc:
40:23:1a:4e:6f:f1:5b:08:28:fa:91:18:5f:5d:d1:
b9:e6:42:97:a2:27:fa:55:7d:f0:af:f9:f8:86:26:
af:8c:11:ef:4f:78:c7:9c:15:cc:75:40:c3:dc:7d:
66:b4:fb:4e:a6:04:e1:4a:6e:82:7c:f6:68:89:8a:
08:a6:4e:c4:ea:0e:0e:f3:a4:1d:b3:1e:f5:8b:32:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:54:50:0A:27:25:16:68:0C:AF:AF:73:E9:84:80:83:D8:F0:8F:71
X509v3 Authority Key Identifier:
keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f8:a9:f1:d0:a5:35:4c:bc:ba:96:eb:fc:29:7b:77:8d:37:
a8:2a:48:8b:d5:0c:35:4b:92:e7:e4:5f:3b:48:55:76:48:ec:
de:15:f1:c4:c0:b8:a6:cf:4f:33:12:53:70:dc:81:c2:b4:cb:
02:84:b5:92:2a:91:b4:31:6f:47:7e:3d:84:d0:f1:a0:0e:2b:
57:80:0a:36:f6:5d:a0:a8:d1:07:49:28:b0:41:42:9c:91:a0:
89:4b:43:2a:d3:47:d0:e1:35:11:ae:0c:31:25:b9:54:83:f0:
14:da:1c:cf:f9:90:c9:fe:03:6d:f3:d3:a0:3a:14:a7:81:2f:
76:df:90:58:71:db:35:55:98:e7:82:fb:5e:50:86:cc:7e:fe:
02:66:1d:c0:56:28:fc:82:55:da:59:4c:f7:c6:77:ed:f7:46:
2e:71:78:c7:bb:f0:b1:9f:ad:13:b9:1e:88:0a:df:f8:10:f7:
26:17:c4:0c:ac:3d:44:37:fe:54:8b:13:45:c3:8a:7d:25:5b:
bf:70:aa:7c:a8:5b:ed:83:af:d2:0c:8d:aa:e4:6d:e2:7a:f0:
2c:bd:7f:1d:7a:ac:fc:d3:0f:cc:53:ca:a1:72:85:aa:0c:ac:
b7:49:18:c4:83:ed:73:5d:17:72:91:b8:85:88:f5:e2:1c:9b:
82:ba:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:10:44 2025 by rpki-client