Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: m0poEaHk0fAwWmdIrz4bawuK2z0hnVT9Sf0uLcOIfek=
Subject key identifier: C5:5A:F8:77:9F:65:A6:2B:7A:8B:EB:1F:81:60:DB:7E:83:11:19:B8
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019A4EF5A5AC36D1CB19F99991B9E3BC41DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0E7E
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: NyLKLyRWyyjub1HJwK4UykvanxD9R2ckCYx3918pQ84=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a5:ac:36:d1:cb:19:f9:99:91:b9:e3:bc:41:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=c55af8779f65a62b7a8beb1f8160db7e831119b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:07:fa:e2:08:9c:04:d8:77:e6:d2:d1:c4:
5d:57:87:27:b7:3f:6e:b4:2d:5f:7f:d4:e1:43:00:
31:93:0f:80:9d:fe:d7:fd:8b:7c:72:6a:ac:f1:26:
6f:1f:53:cd:e3:4a:83:b3:00:b5:ea:4b:84:b9:65:
5c:bb:7d:de:0c:b3:57:0a:3d:27:c8:36:75:b4:9d:
6f:19:d8:93:af:2a:f7:ec:7a:21:7a:f3:cc:92:9d:
06:5a:9c:a6:56:11:49:f4:77:d9:07:a3:9c:1a:b2:
d4:40:5c:d1:5b:1a:4d:e6:c0:8d:e2:30:af:2e:42:
93:7a:6b:df:79:09:82:00:63:88:85:d0:e9:70:25:
f4:4a:53:7f:4c:c5:07:55:0c:67:ef:90:07:aa:1b:
b9:92:86:30:da:57:f0:a1:36:21:23:bd:80:86:53:
2b:5c:cd:28:a7:55:c0:39:ac:d8:b0:48:00:5b:8f:
9e:b3:67:1a:a1:5e:f7:8b:c2:54:c3:45:9b:43:70:
30:04:1a:2d:79:39:d5:ea:b5:8c:05:77:c9:d7:6a:
bb:da:6f:fc:17:89:58:08:1d:9e:5f:12:b4:02:21:
0c:eb:d0:c9:a5:5f:47:0f:65:f1:28:52:dd:8e:7e:
85:40:e8:60:c9:17:55:cb:72:15:92:a5:39:42:5f:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5A:F8:77:9F:65:A6:2B:7A:8B:EB:1F:81:60:DB:7E:83:11:19:B8
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:c5:73:86:ae:93:e5:b5:f4:bf:47:dd:dd:ed:b6:57:ee:19:
83:cf:76:dd:62:3e:74:c1:25:55:a9:a3:4c:6d:59:12:77:e5:
b6:83:b4:58:78:26:bb:5c:1e:b1:59:65:30:fe:e5:64:af:ad:
cb:0f:e9:d1:a2:87:94:99:79:61:bd:4b:45:19:04:24:0b:17:
74:90:4f:4c:24:38:e3:2b:83:22:37:1c:f7:2d:c2:2e:b9:8e:
b5:ca:4e:15:9d:d6:50:fb:d3:0d:6c:a1:ce:d5:c4:93:36:73:
ad:2a:2a:da:f7:d9:c8:42:18:81:46:eb:a0:a4:b5:3e:6c:f1:
cc:f2:30:57:9d:83:bb:48:06:19:bd:d8:e4:19:ff:0a:56:f1:
55:5f:dd:bd:2a:85:8c:57:19:00:d6:ba:63:b0:fb:ad:4b:bf:
30:40:5d:12:9c:89:e4:14:d6:a7:99:60:aa:ae:90:48:d4:01:
49:5c:af:98:df:f9:88:cc:5f:58:a3:ba:7b:02:01:04:f8:32:
cf:6a:30:80:a6:cb:5d:d8:de:70:71:cc:6c:b8:aa:77:48:d7:
b6:09:db:b1:53:2e:41:dc:eb:25:f6:59:32:42:cf:f7:ea:6d:
51:91:93:e4:1c:e6:6d:ba:9f:03:f2:ee:d3:4e:70:18:90:bc:
f9:8e:31:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:49 2025 by rpki-client