Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File: sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier: 0+eANtASGVyzeq1x/GE+TGYBfLFUfyCavKUPU0S2PbI=
Subject key identifier: F7:F9:BA:28:41:03:A8:8C:0A:EE:A2:26:59:8C:A3:12:40:73:63:E8
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 019A4EF45455CB72E53B86F597F39002ABFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number: 1017
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: 349nznGmuYln7Euzs0toW3LL2Co.roa (hash: 2VcvoHu/ySd5oGJHcQApUau1Ip2UjCUmUdstoqEVP0Q=)
2: MhO0JIjv07z_oORlZPzio-JDr68.roa (hash: IGEtItNNMXdu/fJfMOFzDjAygiojo6AjHJXRHHSwZpo=)
3: cjuo7risFY0maWmiB6zw_cynUR8.roa (hash: fwEm242Ve1m7/7m7QExBWA9lRss1xiZPUH/+LoEjd/Y=)
4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: ZkCcja03OE6nd0EtIoGeNoVsFjbQtoCIxtIQgJGZSPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:54:55:cb:72:e5:3b:86:f5:97:f3:90:02:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=f7f9ba284103a88c0aeea226598ca312407363e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:38:82:eb:e5:74:57:fc:12:c3:0c:37:ea:
bf:31:d0:fd:49:84:40:d3:36:d7:b7:8d:50:64:0f:
ff:4a:21:65:b0:8a:1b:d1:a6:ba:a4:31:82:5c:73:
b7:db:fb:ed:b2:1b:ca:b2:91:48:35:32:bb:18:6a:
ab:5a:ee:b5:98:c8:68:2e:6f:6a:aa:77:15:c5:de:
13:c0:66:2d:ec:f6:10:b0:7c:22:b0:5f:bd:29:8d:
3b:af:83:d3:5c:c4:49:a2:42:e6:4f:3b:70:4a:28:
29:05:16:ca:9c:bf:0d:24:8e:6e:80:43:ee:e4:6d:
ff:8b:b8:2a:61:b7:b6:51:34:fc:be:a1:b6:5c:44:
12:e4:61:29:f6:4a:77:10:9b:e5:01:0b:a2:f0:5d:
e9:96:97:0e:10:9c:76:01:c7:e0:8d:c1:ac:85:e3:
f1:d6:03:57:9e:6d:b2:ff:75:77:1f:e4:94:36:6e:
52:9e:f2:a9:82:88:55:0e:89:d9:c6:06:00:bb:73:
9c:38:e0:f6:15:e0:3a:f1:1d:b5:06:3a:62:5c:a7:
57:a3:a8:4c:0e:89:71:af:3c:ee:ba:05:61:29:c6:
bb:3f:f0:4e:63:53:b0:12:70:11:28:44:b0:92:96:
ff:3e:1e:0c:95:71:72:24:46:c4:78:a7:c9:f2:9b:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F9:BA:28:41:03:A8:8C:0A:EE:A2:26:59:8C:A3:12:40:73:63:E8
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c9:07:96:2f:ba:84:d7:db:b2:3d:c5:88:d7:e8:81:3f:5a:
8b:c9:ae:11:3d:97:a3:37:45:c5:fd:c5:41:21:14:ba:58:5a:
93:47:0c:d5:44:a4:22:f8:21:9a:b5:2c:11:de:14:2e:ae:3b:
5f:7b:92:b9:e2:e4:f5:2f:d3:88:26:d2:ea:ca:6f:ad:f5:a9:
c7:ee:7a:6f:af:15:a2:ee:5e:94:61:57:31:33:c8:28:1b:4a:
04:94:eb:fd:d0:6b:ca:6b:6e:8e:9e:10:c6:7d:29:4b:5a:8a:
cb:cd:b7:51:53:6a:d3:b9:26:97:6e:2e:b1:58:d5:a6:af:9b:
24:eb:ee:74:52:26:9e:27:41:ac:2f:85:c1:ad:8f:d2:d9:92:
68:36:2f:d5:d5:37:71:67:2a:61:3d:50:0e:cd:67:e7:2b:97:
09:9b:5d:1c:8a:9b:61:3e:c5:51:b6:ac:cc:cb:97:6b:fb:1b:
5b:28:d6:71:7f:89:db:33:dc:15:a2:15:73:28:ec:f2:ae:f8:
4c:3c:8c:02:98:d3:d8:dc:94:17:17:21:4c:19:eb:ae:d7:b2:
18:b8:0d:25:ac:c1:4f:c9:30:37:c5:ee:cf:a7:6a:58:a4:17:
64:9c:d1:80:27:c9:22:dd:b9:7a:86:37:e8:fb:03:87:0e:fa:
d5:be:ea:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:51 2025 by rpki-client