Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: ChYexwtYaLzeR7fNuVtBVr3AFHeE3dsBQExDx8i4IAU=
Subject key identifier: 7E:E7:92:95:11:14:5B:57:AA:AB:EA:92:AF:90:73:D3:8D:6D:77:8C
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019A55643A5F910ADD8FA5A90BE6339836B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 19:00:23 +0000
Manifest this update: Wed 05 Nov 2025 19:00:23 +0000
Manifest next update: Thu 06 Nov 2025 19:00:23 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: mz+O89vF5GiW/IDKg2NxBvF++wKainI+d+PQ7NfXotc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:3a:5f:91:0a:dd:8f:a5:a9:0b:e6:33:98:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Nov 5 19:00:23 2025 GMT
Not After : Nov 6 19:00:23 2025 GMT
Subject: CN=7ee7929511145b57aaabea92af9073d38d6d778c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:22:4e:57:79:2e:6b:ca:01:de:8b:aa:1e:
7d:e0:0d:d5:cc:ac:40:2f:64:fb:2b:b7:68:f6:c2:
c0:54:2e:fc:9e:bc:21:ae:07:51:61:32:51:bd:ad:
1e:43:92:93:d7:2d:de:12:46:85:4a:c9:68:43:3a:
8a:c3:6f:8b:ce:04:95:b2:62:4c:7c:98:01:3f:97:
68:b2:c9:05:e5:a6:f0:1e:fc:18:37:fb:2c:14:cb:
33:04:00:f6:db:0c:6a:82:ea:4e:5d:48:1f:99:2f:
9a:76:03:42:67:d9:22:dd:54:a5:a4:8b:7e:ae:e8:
53:d8:0f:8c:fd:2b:ee:45:b3:57:8b:bb:9f:fe:0b:
cf:e6:1e:c4:4a:39:5b:75:69:eb:c9:bc:59:a7:3a:
da:da:0e:a8:81:ca:bb:58:ce:20:f8:7b:03:1c:c7:
16:73:30:d1:13:80:74:06:8a:e5:61:1c:06:14:34:
64:4e:c6:14:ed:e1:11:2b:88:95:02:36:39:45:1e:
5d:f4:d1:60:79:f5:a3:f9:95:4a:b1:62:ca:23:9a:
57:f2:e0:ed:c0:c5:c6:0e:ca:ca:6f:6e:96:31:28:
b7:a2:38:62:b8:0b:85:f6:06:5c:be:0b:19:03:65:
ae:81:b8:a0:1b:b5:cd:40:99:54:96:c9:cf:19:e3:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E7:92:95:11:14:5B:57:AA:AB:EA:92:AF:90:73:D3:8D:6D:77:8C
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cf:23:00:a2:a8:f3:f5:a3:4b:c9:38:cd:15:e7:5b:8e:74:
b1:1b:12:3a:53:17:0f:72:74:f9:86:17:cb:32:6e:73:72:5a:
92:93:8b:78:d6:63:28:72:56:b4:fd:7f:5b:a7:1a:82:ba:7f:
3a:0c:8a:e7:f1:4c:68:2a:e1:da:87:11:f3:e5:c8:a2:b1:c4:
f9:22:ce:ad:97:9a:66:e4:b1:da:f6:e7:cf:8e:1e:77:8f:e1:
3d:56:9d:ef:e0:23:1d:6b:02:ee:81:33:51:f9:e3:cc:30:1b:
5d:4c:cc:af:a7:f4:c7:b0:00:5e:c2:0d:df:37:2e:54:c7:d8:
f3:17:fb:ab:7d:56:d5:ef:fe:0a:04:45:bb:ca:8d:c5:ed:a9:
59:7b:46:3b:46:0a:c6:1a:83:2f:fd:44:9b:da:60:07:21:a0:
1f:76:25:f2:09:b3:b5:ba:f6:7b:b6:a0:40:ad:4d:98:09:cf:
66:27:ae:62:ab:c0:4e:b3:63:e8:56:72:3b:e4:8c:7a:4c:24:
7b:3a:61:be:aa:2f:eb:56:af:f6:62:86:80:35:a2:f6:9b:13:
55:f7:d2:a0:51:92:3e:e4:bb:7f:6c:fe:39:03:a4:f6:c3:f0:
3b:0c:39:dc:99:92:a6:12:a6:46:c7:f0:cc:d0:2f:05:a5:87:
71:39:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:37 2025 by rpki-client