Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: i6q/yKU5qhlQ0OpX2GZt4wYXN2uHIZqDZ9j9IN2TObM=
Subject key identifier: 9F:5A:D0:BA:44:A9:FC:F6:D9:FA:71:1B:E5:56:21:27:F5:AC:E4:31
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0199FE4704DDCF55519970F130B0D1705F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 21:01:31 +0000
Manifest this update: Sun 19 Oct 2025 21:01:31 +0000
Manifest next update: Mon 20 Oct 2025 21:01:31 +0000
Files and hashes: 1: 45y2eM_9RmNAB44-r5-uKhDMD9k.roa (hash: a22xKNsQmcfld1bNQDJEKJ/sFCciZX8nT/TNrTr5YXk=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: tepgxRNbe8MePfsozWteRlGo9rprnxXgl5egeFNfDVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:04:dd:cf:55:51:99:70:f1:30:b0:d1:70:5f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Oct 19 21:01:31 2025 GMT
Not After : Oct 20 21:01:31 2025 GMT
Subject: CN=9f5ad0ba44a9fcf6d9fa711be5562127f5ace431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ea:9b:3b:c2:85:8a:f2:27:95:47:51:7b:d0:
1d:65:4d:3c:6b:63:ce:b6:c7:eb:5c:f9:3c:bf:d9:
bc:f9:01:d2:1f:bf:76:f2:06:b0:f1:5b:da:37:40:
c1:c0:70:f7:56:4d:2a:34:a3:cd:10:b0:c2:95:74:
66:a1:21:09:f9:4a:36:17:ce:b1:a6:7a:00:24:9e:
c1:b7:a2:34:93:6a:96:5e:1a:6c:19:05:c0:05:a9:
02:6c:d5:0d:fc:c7:0a:a9:38:59:d1:63:e1:b0:33:
c3:4d:1b:38:65:e0:c3:10:e9:55:d8:85:70:77:57:
67:3a:32:74:04:2f:f4:28:47:9c:fd:1f:05:8e:a8:
26:a7:cc:f4:46:10:90:32:98:ce:39:22:11:d9:58:
a4:d3:12:83:00:35:67:c6:d3:27:18:d1:a1:05:0e:
ec:87:ae:b7:99:52:91:cb:bf:ae:f0:e9:47:35:6c:
73:a1:a1:61:eb:9e:b3:6e:3a:15:fb:8f:1d:d3:20:
3d:43:62:81:ce:77:ca:69:bc:cc:d7:17:11:c2:96:
6d:38:35:ab:2e:8e:3a:e8:d1:6b:d5:7c:eb:ea:2f:
68:3a:be:a5:2e:d2:a7:11:27:4c:a8:c8:7d:0c:16:
81:3d:24:12:f5:be:57:33:a4:f6:c8:92:94:b1:0b:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:D0:BA:44:A9:FC:F6:D9:FA:71:1B:E5:56:21:27:F5:AC:E4:31
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:1c:31:cd:3b:9f:ad:3d:17:56:b8:17:ba:ba:14:d0:80:2d:
b5:37:7a:ba:e8:d9:47:bc:e0:f3:4b:a3:c2:1f:0d:fc:9c:a3:
d6:83:4a:22:22:7e:64:c2:42:a7:f5:f1:eb:c4:3d:89:ff:cb:
bb:8c:6b:19:ab:f9:05:00:e6:fc:f3:53:ed:63:04:b9:3a:7c:
be:d5:a7:70:f4:85:d0:73:4d:dc:7b:9d:75:1e:dd:79:1d:96:
6f:99:dd:61:04:72:11:0b:5a:4a:a4:6c:40:0c:32:11:31:bc:
9b:07:fa:08:d5:ca:e8:91:da:f3:5d:b8:54:4b:30:43:28:0d:
b3:bc:cd:dd:57:03:bd:18:42:49:6e:5d:89:a2:e0:ce:a5:a7:
7b:72:e2:c1:75:b0:61:85:f4:03:40:a3:a7:0b:27:78:b7:21:
b8:d6:fd:6e:2a:a9:cc:8a:2c:55:0e:62:8e:ba:ff:a6:94:43:
f9:e5:df:ca:6e:de:bc:e5:f6:8c:78:bd:82:1a:e3:63:2a:e5:
0a:01:ee:00:d6:24:1d:61:55:c4:ef:b2:b4:4b:f1:5b:a6:41:
a6:43:8d:da:cd:8c:e6:fe:85:1f:2f:7a:2b:0a:09:f0:35:d8:
7f:4c:94:e8:90:14:40:36:a2:9c:ef:b0:f9:58:79:22:d5:00:
1c:23:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:47 2025 by rpki-client