
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: vxQbeBtVmgTMxPtManoM2eNUGD7JTigzxPs3gCnb1fI=
Subject key identifier: 43:C0:E1:7D:82:72:4A:4C:23:46:6F:10:81:A7:3E:F7:28:BD:87:76
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 0199FB7CA2E9509AB05D4F6E3AF123236639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: QwNwqeopvxjwdYHVlOugV1TayMZsAg71t5pDaw+1neI=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a2:e9:50:9a:b0:5d:4f:6e:3a:f1:23:23:66:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=43c0e17d82724a4c23466f1081a73ef728bd8776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c5:74:79:c3:1b:52:cb:44:da:92:bd:f9:35:
01:b7:6b:a6:5b:0a:99:64:4d:a6:4a:3c:e9:e0:50:
39:42:40:d0:32:a8:48:21:75:eb:52:14:ad:6c:d0:
a8:92:5c:3e:e2:e0:6b:3c:77:bc:01:d7:de:25:bc:
ac:f1:25:0f:d6:32:ed:90:82:8c:b5:7b:95:e7:33:
26:97:4d:34:6f:d1:cb:e6:28:d0:ba:b4:b8:db:a9:
6d:e3:d1:a2:f5:02:36:56:f2:48:04:35:d7:be:b8:
8b:0a:e9:ec:00:1e:da:52:7b:da:3d:f0:98:e3:69:
3c:0f:3b:f1:e0:43:8c:2f:65:49:6d:37:b8:dc:01:
28:f2:96:40:d8:fa:8c:64:be:76:8f:96:c9:1c:ef:
23:f9:3f:1b:8a:40:03:2c:f2:46:33:8f:9f:92:85:
d8:68:71:75:de:36:f2:14:cd:72:84:ec:68:7c:a7:
e7:a4:d4:66:15:4f:56:ca:9b:c1:8e:d2:48:2d:61:
2c:cc:a7:da:34:b2:aa:86:de:ca:9d:bd:18:30:d4:
03:74:88:ed:d0:f6:7f:79:ac:35:c2:45:fd:af:ed:
2a:c6:89:b2:47:1e:38:fa:1a:bf:b3:8e:c3:dc:28:
c2:97:5f:09:28:8d:9a:7d:84:41:6d:de:c4:d8:67:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C0:E1:7D:82:72:4A:4C:23:46:6F:10:81:A7:3E:F7:28:BD:87:76
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0c:4f:95:e6:07:9c:c6:fd:01:13:95:5d:20:78:23:d1:5d:
c0:a3:bf:97:97:e2:68:ad:60:b3:eb:c1:0f:56:36:dc:78:65:
0b:ad:48:c6:a3:85:6c:01:4b:05:67:64:ea:a6:fd:76:e0:da:
b8:a1:8a:17:dc:85:e3:6b:52:15:41:bc:39:f0:3e:32:66:48:
96:8d:51:bf:37:e3:1b:04:18:28:30:5b:b8:07:1a:c4:b6:6f:
ed:44:c3:d8:7b:26:b6:bd:37:20:a0:dd:23:28:e3:94:d9:3f:
90:99:b8:ca:87:30:12:fd:b7:3d:d0:27:f3:fd:d3:28:a1:79:
b9:58:00:ec:55:0f:75:e9:01:51:66:55:ab:f2:38:72:c0:09:
38:e7:28:2d:24:64:fd:a6:73:16:21:78:00:96:92:12:a2:6a:
1a:a5:6e:53:2c:24:0d:cb:8e:1f:02:81:75:21:b4:af:77:58:
4f:bb:b1:d6:a4:4c:5a:00:7e:b6:67:cf:3c:66:c9:a4:dd:4b:
ae:86:40:c7:18:65:9a:88:35:05:c3:83:04:b8:ca:30:08:7b:
5a:06:85:24:d8:47:cb:36:09:a9:ab:0b:4b:f8:63:83:f2:8b:
3c:c9:bc:e2:18:2f:2e:59:89:1c:b1:6c:67:ba:1a:ee:df:ff:
40:01:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:28 2025 by rpki-client