Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: o1X5MWRjsmKwevz8UtCn1R0P1QOlFl1npd/+J2aYKug=
Subject key identifier: 79:D5:CB:61:B9:EF:71:41:5B:13:36:6E:7D:FF:CC:A8:5A:F8:C6:75
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 0199FCFD60D5BF41C1D8E1FAFDE3EE115ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 15:01:27 +0000
Manifest this update: Sun 19 Oct 2025 15:01:27 +0000
Manifest next update: Mon 20 Oct 2025 15:01:27 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: o9t48F0IqcLOciIehM9fPqkUCuSTAnQJ+1fcxNCwPwQ=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:60:d5:bf:41:c1:d8:e1:fa:fd:e3:ee:11:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Oct 19 15:01:27 2025 GMT
Not After : Oct 20 15:01:27 2025 GMT
Subject: CN=79d5cb61b9ef71415b13366e7dffcca85af8c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:20:8a:35:5e:90:2d:8f:cf:94:e4:49:ee:74:
c8:d7:10:ce:3b:ad:94:8b:9b:43:cc:45:7a:e4:b8:
15:ec:2f:91:41:45:f9:f1:63:cd:be:82:52:7d:25:
9c:30:b1:c1:22:6a:cb:3d:e9:3e:89:95:31:1b:97:
a5:0e:7a:dd:0b:e6:7f:fb:3d:ab:12:a9:cc:d0:a2:
8b:66:e0:b3:ae:ab:fb:25:b7:56:dd:d0:17:d5:c5:
a2:c6:7c:b5:e0:6c:60:f6:d4:fb:de:de:e7:6e:a0:
0a:8d:39:94:f0:42:f2:55:a6:25:0f:99:bc:eb:39:
88:80:4e:69:00:2a:20:72:56:d3:26:74:0a:d6:42:
32:af:8d:92:68:7a:f3:d2:22:b4:53:b4:ca:55:f7:
6d:ad:3b:b4:c8:58:4c:87:45:6a:4a:97:ca:8f:5d:
53:dd:c7:83:1e:22:9e:0b:0e:45:ac:c8:84:d0:71:
4c:ef:9b:90:fb:6b:4f:fc:83:34:50:89:51:3c:ab:
bf:cf:7a:c8:92:af:d4:d1:1f:93:10:20:30:9b:ed:
d0:6a:de:4d:52:b1:53:8a:a3:1d:33:3d:c2:eb:32:
56:99:53:9c:3f:6a:2b:d9:5f:54:c2:33:2e:21:8b:
05:f6:4f:d4:86:e9:99:0c:23:73:80:15:31:7f:ff:
85:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D5:CB:61:B9:EF:71:41:5B:13:36:6E:7D:FF:CC:A8:5A:F8:C6:75
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:c0:0c:94:d6:fc:c3:9e:64:ce:ae:75:26:e1:e0:ac:5d:ed:
d3:3d:32:79:2e:c0:a3:30:d8:7f:24:55:57:c1:30:07:c4:68:
77:9e:c3:dc:82:64:70:ee:f9:33:a3:b4:33:74:4a:d4:37:bd:
c2:c4:93:3f:62:19:c7:99:fe:40:2f:5b:84:3e:b9:21:5c:d9:
62:75:7f:74:41:fb:ef:89:2c:3d:df:05:5a:60:35:7b:b5:4e:
85:4b:b4:e0:a6:6b:c4:a3:77:dc:20:bf:75:a8:77:5e:2d:13:
bc:dd:dd:50:22:98:19:df:28:3b:e4:53:94:a5:a3:18:1e:8f:
28:03:63:b9:7f:dc:49:d9:14:d1:e2:1b:f4:7e:d8:99:bd:be:
dc:24:e9:b5:f0:4b:34:e5:2a:08:d4:c2:53:32:6d:31:b4:39:
a6:43:d5:b9:60:01:a0:4b:94:a0:5a:b3:15:f1:f3:d1:97:a2:
58:85:83:67:3b:43:6f:73:6b:5f:f3:37:69:b1:3d:ef:7a:eb:
32:b7:34:3e:d8:ad:67:79:01:83:dc:bb:60:8c:14:e7:29:d1:
86:43:a0:ee:ba:48:f3:92:5e:2c:d3:1e:fe:74:4f:e4:a0:46:
ee:f6:88:db:08:84:2f:e4:2b:f8:b3:f8:4b:87:c3:61:c7:7a:
60:7e:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:13 2025 by rpki-client