Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: dsWexTFC6EIIREJA1UEHLbM3e1mP2ZDugSg+Qs5cW+I=
Subject key identifier: 69:0D:4B:14:A4:83:89:EE:AD:97:CF:41:94:5C:F0:68:D8:D0:80:8D
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 019A4E86877FAC626BB74ABCCC3C0FC2E2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 0508
Signing time: Tue 04 Nov 2025 11:00:30 +0000
Manifest this update: Tue 04 Nov 2025 11:00:30 +0000
Manifest next update: Wed 05 Nov 2025 11:00:30 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: ktTpMlWIGCsZRltz88uu9mm8dYiczigwL2D89E6fSrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:87:7f:ac:62:6b:b7:4a:bc:cc:3c:0f:c2:e2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Nov 4 11:00:30 2025 GMT
Not After : Nov 5 11:00:30 2025 GMT
Subject: CN=690d4b14a48389eead97cf41945cf068d8d0808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:44:be:06:30:fd:45:64:aa:dd:8e:f8:80:
dc:97:f3:b4:d1:57:de:c0:86:ac:1d:64:ad:51:a4:
7b:2d:c2:d6:2e:b5:27:23:40:b9:4f:65:be:b9:ac:
93:04:67:d1:e1:ba:b4:e8:92:67:11:70:3f:8a:a1:
a7:93:f1:4a:4b:64:cd:9a:71:1a:c9:37:b1:ee:f3:
e1:3a:53:52:de:d8:39:3e:3b:8e:c3:82:c2:e0:46:
a0:17:67:68:07:4a:ac:66:a3:5a:89:7c:b2:ab:2c:
9f:95:a7:6e:d0:b7:6e:4c:8a:01:dd:ea:5f:f7:8f:
2b:7f:f6:2b:fe:bd:47:19:0c:5d:47:08:0b:24:0c:
73:ae:0a:b7:32:b7:64:bc:7e:47:ef:74:37:5d:4c:
dd:e1:e1:ec:19:a4:14:c9:6a:0a:71:35:8a:0b:f3:
74:b2:b6:d4:8c:c8:d1:db:14:a2:c0:d4:ca:63:81:
47:5a:15:1d:37:8f:44:a5:1f:34:ff:2b:d4:6e:4c:
1f:0b:ba:ef:65:90:80:71:c1:f8:53:15:c2:15:83:
71:e4:ba:8f:e2:06:b6:05:88:5b:cd:83:a3:10:ad:
98:31:10:fa:91:e2:91:8c:b9:c0:9c:55:b8:a9:80:
53:a6:89:e6:7d:9e:a4:02:05:6d:26:52:24:ec:1f:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0D:4B:14:A4:83:89:EE:AD:97:CF:41:94:5C:F0:68:D8:D0:80:8D
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:97:8a:07:b0:15:c2:f4:b6:05:1f:6d:85:a7:29:c6:4b:
46:87:84:c9:5a:39:15:0e:48:8c:99:55:61:62:2b:32:01:0c:
1c:5d:fa:a3:f9:d7:b7:48:ad:a8:95:58:28:58:53:d0:d8:05:
0f:e6:0f:60:7a:79:bb:7f:a1:b5:70:0a:e0:63:db:32:5d:1f:
36:bf:5b:23:4c:86:15:e5:ea:84:66:f4:8f:58:42:f2:1f:1a:
18:8c:2c:09:31:15:60:1f:9b:10:bf:d3:08:4c:19:c5:7a:23:
d4:3f:ef:74:4c:55:79:9e:66:aa:ba:99:50:9b:cd:5b:6a:27:
35:d6:33:b6:5a:00:7e:72:c2:47:d4:80:e8:89:7c:bf:41:65:
b9:97:2c:ee:c8:fb:91:c7:21:18:97:10:04:7a:18:30:3d:f0:
78:68:0c:7d:47:f9:34:01:f7:8f:40:67:84:cd:0b:65:55:a7:
5a:b1:9f:81:2f:f1:c5:5c:d6:0c:9c:90:03:53:f9:87:4a:65:
06:bf:c7:f4:89:84:27:3f:5b:15:3e:bb:4c:44:be:49:4c:a3:
ca:3a:59:21:19:dc:44:e1:d1:1f:ba:5a:b9:51:ae:7e:5f:e8:
52:b1:07:53:0b:e6:02:ee:29:b6:35:b6:10:ef:fb:3c:1a:69:
ca:b1:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:38 2025 by rpki-client