Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: /P5yCI/g8Vik5mUzXgfijVuFIAK79b++n/fVVWoKhhY=
Subject key identifier: B4:B0:58:10:20:0C:E3:FD:72:17:FF:4F:97:3D:14:B8:BE:13:DD:84
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 0199FB7CD76BDD470C5B30F0984803EE4C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0DE1
Signing time: Sun 19 Oct 2025 08:01:26 +0000
Manifest this update: Sun 19 Oct 2025 08:01:26 +0000
Manifest next update: Mon 20 Oct 2025 08:01:26 +0000
Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: +ZRpnFnCe9mUrbDeXYYBHLMb1w3Urp5+lrpnGqDB8Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d7:6b:dd:47:0c:5b:30:f0:98:48:03:ee:4c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Oct 19 08:01:26 2025 GMT
Not After : Oct 20 08:01:26 2025 GMT
Subject: CN=b4b05810200ce3fd7217ff4f973d14b8be13dd84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a3:f5:30:aa:d7:f4:05:fb:df:71:85:fc:01:
79:98:a3:3e:be:4d:5e:c6:39:61:aa:79:9b:9a:fa:
98:8f:54:0a:4d:d2:d6:6f:a6:f2:9a:48:66:eb:a4:
07:95:47:3c:88:ee:3f:88:19:81:cf:34:c3:3d:dc:
8b:4f:34:99:c6:c9:7f:1a:a4:27:30:97:f0:5c:fe:
0d:05:71:dd:c2:c1:1f:2f:e8:9f:2a:f0:f5:4a:42:
21:e4:40:00:d1:05:14:a1:1a:61:a1:f5:29:0b:51:
16:b0:2a:01:e1:5c:9f:a1:47:a9:d3:76:a2:e9:a1:
a1:1b:34:67:17:14:eb:c5:24:a1:c9:27:90:a9:79:
97:13:6d:70:53:34:6b:45:66:8b:e3:b3:07:7b:45:
80:f3:7f:b2:e5:fe:9f:b4:19:67:c6:e6:5f:10:df:
f7:4d:43:75:03:e4:db:a1:ce:04:69:e9:ab:ad:a7:
fa:ae:3c:d5:b0:06:47:61:46:dd:46:29:a5:8a:f3:
b4:f9:98:68:ca:f9:22:dd:64:d7:76:b7:e8:fe:0e:
9a:d2:4c:42:ec:15:3b:05:9d:fd:25:0e:02:3c:43:
ed:ef:fa:cf:4c:bf:e0:85:50:04:80:b2:22:07:f6:
06:c5:36:02:38:f8:d4:66:1c:b1:c1:77:50:aa:0f:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:58:10:20:0C:E3:FD:72:17:FF:4F:97:3D:14:B8:BE:13:DD:84
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:39:4c:08:df:34:67:01:59:bd:71:d3:a6:a3:b7:98:f2:79:
3e:48:33:4b:30:62:16:6b:c2:c6:3e:2b:23:13:76:ae:1c:8e:
21:c2:99:63:fd:5d:bf:44:c8:7d:49:5a:b9:b4:31:5b:7e:a1:
67:bc:24:91:8e:01:0c:e4:57:d6:71:46:98:87:9d:20:e9:dc:
37:02:a8:c8:16:8a:b2:72:f1:98:b3:03:63:1d:6c:1a:e3:77:
ad:60:4f:5e:70:72:be:13:bf:76:e9:e8:3a:8b:23:1d:d5:8c:
f8:ef:9d:3d:84:2a:82:7c:14:47:de:1b:17:f4:93:b4:4e:bc:
20:58:c9:a7:d8:a5:f1:f9:df:cf:8a:6b:e4:a6:8e:18:2f:53:
70:30:e2:80:bd:9a:fa:65:ef:03:ef:06:8d:3e:20:8b:bf:5b:
67:d7:6d:95:11:78:6d:96:5c:da:cd:21:24:85:75:b0:21:a2:
a2:04:53:2d:8a:80:2b:cf:ba:7d:85:c2:df:7b:7c:e6:3f:38:
77:40:d8:4c:8b:7d:4f:70:57:ec:bc:6a:13:46:90:a2:8e:05:
b6:7f:3b:16:7f:38:c3:03:f3:ea:51:a6:0c:13:bb:95:3c:96:
3b:4a:0b:e1:24:bf:f9:c4:27:f3:37:07:10:2b:c6:24:bc:40:
a0:5d:f8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:47 2025 by rpki-client