
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
File: SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft (raw, json)
Hash identifier: cWOfqOAAdGuJZzR1OyiyqUL74WA6oMaeWmqaGK/WXSM=
Subject key identifier: 5F:F1:95:E2:C6:E6:58:6F:D3:52:FD:3D:E6:47:58:1A:F6:44:79:F2
Authority key identifier: 4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
Certificate issuer: /CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Certificate serial: 019A4FD001C1492B4BF311F7E92F14A64A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
Manifest number: 162A
Signing time: Tue 04 Nov 2025 17:00:23 +0000
Manifest this update: Tue 04 Nov 2025 17:00:23 +0000
Manifest next update: Wed 05 Nov 2025 17:00:23 +0000
Files and hashes: 1: SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl (hash: +BI0slpUiFKvqw6QDuvrkRrjpkH68HVAWeo5gGdpHiM=)
2: tZ9Z4ML8zhMNBVa9E96Yi9Jnntg.roa (hash: XsJXQI0tWIE+GAb6s9yORtZWbA379GfbGqFGrJ0uG8Q=)
3: vLGEnXeHKe1JvyRbs81GFKJa9lI.roa (hash: y85TW0QR8RD5vWjjj7XBtsfhuTrNhwWb7DCnCsRHfMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:01:c1:49:2b:4b:f3:11:f7:e9:2f:14:a6:4a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b20d5c78c107bcf9c715453d21444f696e44b11
Validity
Not Before: Nov 4 17:00:23 2025 GMT
Not After : Nov 5 17:00:23 2025 GMT
Subject: CN=5ff195e2c6e6586fd352fd3de647581af64479f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:07:20:8e:f9:5d:6e:0e:f9:70:69:fb:4b:
ef:00:c9:42:db:b3:7c:2b:b9:e7:71:9c:86:5b:03:
b4:e4:25:cf:11:b4:98:cb:21:39:6b:d6:42:e0:81:
3d:be:ad:e9:3f:be:b0:87:6f:f8:b1:1c:0d:5f:2e:
fe:64:20:bb:d3:51:53:b2:a5:2e:05:a8:ce:81:87:
75:fc:51:e3:f8:41:ae:bf:3c:21:fd:be:9d:2b:9e:
95:bc:ce:df:37:4b:e6:a3:d7:a8:0a:c7:e9:c7:86:
1e:b8:44:d5:82:62:d2:74:4f:43:b7:8d:e0:6f:a5:
c9:c6:44:2b:96:3c:27:5e:30:75:2c:e5:cf:84:f7:
ad:c4:6b:08:b1:d0:22:58:04:f0:c3:71:98:ef:06:
d6:41:1d:72:55:1e:33:1b:70:76:3d:42:29:9a:b2:
a2:2d:81:5b:53:57:39:f1:d6:b6:70:5c:79:86:9b:
d2:87:22:60:4c:20:d3:db:b6:54:7e:c7:6c:1e:d8:
ba:5d:dc:fb:94:ba:47:ce:23:97:ab:32:10:cd:b9:
05:2b:77:05:a6:2f:18:91:d0:5b:8d:d1:9e:d6:47:
1b:44:d8:30:63:83:b0:ae:fd:3d:8a:c2:a1:8d:17:
6a:0a:e4:01:ce:8b:bb:4c:56:eb:5e:23:c8:ff:22:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F1:95:E2:C6:E6:58:6F:D3:52:FD:3D:E6:47:58:1A:F6:44:79:F2
X509v3 Authority Key Identifier:
keyid:4B:20:D5:C7:8C:10:7B:CF:9C:71:54:53:D2:14:44:F6:96:E4:4B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyDVx4wQe8-ccVRT0hRE9pbkSxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1e48b6-7fb0-4a12-b3e7-4b9a6058b423/1/SyDVx4wQe8-ccVRT0hRE9pbkSxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b0:6f:bb:13:c2:cc:15:ed:34:8a:71:6d:7e:cb:57:f2:a8:
39:45:fe:5e:15:9f:52:4c:a5:57:ed:2f:ea:be:62:fb:ce:77:
66:44:1a:2b:0a:51:94:e7:0a:1f:b8:03:66:3b:b9:ed:c2:44:
30:45:d1:ea:de:5c:e5:68:91:46:76:9d:4f:e8:48:54:95:3a:
ee:82:58:9f:2f:04:99:c8:79:ac:b7:60:63:55:4e:b5:1e:9a:
87:1b:eb:fb:a8:5b:0c:3a:83:26:d5:94:48:1f:67:07:f9:c5:
43:0a:fd:73:98:13:23:74:9f:f1:dc:70:1d:6a:e5:69:bc:a7:
30:db:6e:2b:4e:9c:8e:db:51:cd:10:0f:8f:fd:c7:e4:a7:77:
b7:d1:41:0c:9e:c9:b0:fe:6c:22:2b:d9:18:db:ab:0e:94:2d:
9a:fd:46:09:b5:e5:02:f6:4e:90:2c:06:ff:af:b9:cd:c0:ed:
bf:80:a9:84:53:6b:b9:26:ad:a7:b7:08:1e:9f:bf:e1:cb:01:
df:cd:6e:36:17:c7:29:0a:db:d4:c0:ec:ad:e4:94:f4:fc:6b:
07:ba:40:92:ad:00:7f:29:c1:e0:88:2e:9b:9a:50:a8:5c:2c:
40:ba:55:f5:fd:3a:51:3a:30:6e:15:39:9d:46:73:fe:7f:28:
b7:08:da:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:33:53 2025 by rpki-client