Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
File: sYxKQwCDfE6hetHjghoJrVN2QIc.mft (raw, json)
Hash identifier: UoK075RUXefMDvZx5oDuPKlJB17DEgH7CYVmJ7YedtE=
Subject key identifier: AE:7B:EC:C7:52:98:C1:C4:B6:62:62:45:90:C9:C2:97:5E:A7:8D:BF
Authority key identifier: B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
Certificate issuer: /CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Certificate serial: 0199FDD8FFC29211D91C6EF11F58A2CB5F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
Manifest number: 0F7B
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: 2pelV4FedV45XCLKgpg6a9aqnGU.roa (hash: JAMnQ7Ljsuvl5vUTIxSzwNI1IGVq+RkAOKUEPceEiRc=)
2: sYxKQwCDfE6hetHjghoJrVN2QIc.crl (hash: S8iso40nZuQqUyIRlGrvwO6K9Trad3j2TWIJhW9awgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ff:c2:92:11:d9:1c:6e:f1:1f:58:a2:cb:5f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18c4a4300837c4ea17ad1e3821a09ad53764087
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=ae7becc75298c1c4b662624590c9c2975ea78dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4b:10:23:b6:92:57:6e:b5:f6:dd:eb:96:db:
f1:7b:4f:d1:3b:0e:3a:28:cf:da:a0:24:4d:fc:70:
1e:88:65:3b:87:67:fc:5b:12:0b:40:5d:f5:37:79:
21:b3:08:8f:53:91:49:a4:34:df:c4:dc:23:3b:a0:
98:eb:13:cf:61:2d:04:9c:66:b6:83:47:7c:be:b8:
d3:87:40:e7:b8:18:c8:29:de:c0:a9:88:16:55:bd:
92:eb:5b:51:09:4b:5a:0f:c1:08:36:d0:10:88:5b:
ec:0e:0e:5d:c4:f4:d1:a8:10:37:47:fe:9f:de:ce:
b4:84:b8:08:8c:64:b7:55:63:db:f2:43:c6:17:ef:
b0:92:ee:d4:94:59:6f:51:c8:e3:d0:6f:84:e2:75:
8b:0b:80:2a:39:f5:40:02:ee:88:23:8a:a4:1f:7d:
4a:bc:f1:67:95:f7:f5:20:6f:7b:33:42:ad:a8:80:
07:cf:d0:e9:1e:a6:5c:bb:fd:ef:cc:be:29:f1:1b:
06:2a:41:cd:a6:0f:1c:59:e0:29:5d:49:c7:7c:ff:
ff:df:9b:5a:7b:f0:ec:e8:6b:0d:32:69:60:36:48:
f3:0d:0e:44:6b:e3:2d:bc:87:1d:4e:85:11:d1:6c:
25:c8:da:31:07:53:a3:ac:81:fa:5b:ae:1e:96:24:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:7B:EC:C7:52:98:C1:C4:B6:62:62:45:90:C9:C2:97:5E:A7:8D:BF
X509v3 Authority Key Identifier:
keyid:B1:8C:4A:43:00:83:7C:4E:A1:7A:D1:E3:82:1A:09:AD:53:76:40:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYxKQwCDfE6hetHjghoJrVN2QIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/af4e4b-2026-4bbb-9628-f08a0ae92b8d/1/sYxKQwCDfE6hetHjghoJrVN2QIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:b4:eb:a3:4b:e1:de:6c:b8:32:c8:11:b5:0d:29:4d:76:
a4:aa:fa:b9:33:ba:df:22:b9:28:a0:04:07:e9:35:68:12:9c:
74:1e:22:7c:3a:f9:e5:4f:72:22:82:1a:b5:a9:54:8f:f6:7f:
bf:c4:d0:88:d3:fd:19:44:63:51:75:53:a8:67:d8:2c:19:ec:
dc:ea:15:f4:94:de:17:d8:95:89:ca:91:2c:40:d1:e6:67:db:
f1:af:3a:47:fc:24:a6:64:a0:e0:57:8e:f7:d3:b2:22:4a:b6:
62:f9:9f:b5:6a:59:51:f0:df:1a:6f:84:87:ad:b2:6d:77:80:
16:f4:2b:77:f8:1e:26:9f:f1:42:15:e2:e5:49:45:53:02:1a:
0c:1b:c7:b8:ae:8f:df:1c:8f:56:03:b6:97:8c:0d:21:ed:2e:
c7:cf:4e:f2:25:c6:c6:3f:28:3a:f4:45:ce:6b:4e:dc:74:a8:
d0:bf:31:1f:12:7a:fb:b6:20:95:c5:6f:84:01:57:75:02:38:
e8:a7:bb:8e:f8:06:60:6b:7b:ba:94:f5:46:62:88:e5:91:85:
f6:70:7d:9d:a7:9e:de:8e:4b:60:2a:9a:f4:c0:d4:b6:71:6e:
e8:d4:37:08:ba:d8:c2:fb:6a:00:d6:bf:2a:e8:ba:20:d4:f9:
a4:b6:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:08:35 2025 by rpki-client