Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: LUc3jNqKTch6lBaz6KNtoS/fysZHW5kRnuSHDvmepEs=
Subject key identifier: E0:86:6D:23:85:24:A3:02:90:5B:B1:E7:FC:61:DA:8A:6B:AE:A8:D8
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019A01B4CDAEAD4CFCEECAD5FA5552134ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0A0D
Signing time: Mon 20 Oct 2025 13:00:17 +0000
Manifest this update: Mon 20 Oct 2025 13:00:17 +0000
Manifest next update: Tue 21 Oct 2025 13:00:17 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: AoQSElSqnahoHWGkt4SssWt9cfCQJlZN/fQ88KsPoFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:cd:ae:ad:4c:fc:ee:ca:d5:fa:55:52:13:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Oct 20 13:00:17 2025 GMT
Not After : Oct 21 13:00:17 2025 GMT
Subject: CN=e0866d238524a302905bb1e7fc61da8a6baea8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:9f:67:e1:1c:45:57:d6:a8:e0:54:86:1a:
eb:bb:c0:1c:b0:01:c3:48:48:7f:03:92:34:99:36:
95:8a:c8:91:a7:20:a5:0c:17:9d:f2:2e:c6:b7:e7:
53:82:5b:df:22:65:d1:b6:84:f3:8b:8b:94:4d:4c:
60:f0:4f:a7:df:a2:5e:8a:e7:ac:bd:9c:ce:e0:04:
72:30:2a:8a:8b:72:7a:ac:b5:ec:41:8b:6c:65:d7:
51:d1:30:45:c1:18:d5:c9:8c:af:7f:27:f0:71:31:
23:c4:fd:bb:3e:07:3a:a4:c4:46:0c:0d:e9:de:0a:
70:88:0a:b5:6b:cb:bd:7a:16:b9:3c:22:e0:3b:b7:
21:32:d8:e6:3f:08:4f:52:9a:4e:d9:50:25:d7:0a:
79:77:4f:0f:56:70:5c:35:22:9f:12:96:95:c4:e9:
bd:ad:96:d4:a2:8f:d0:53:61:b1:d2:ec:3d:7c:4f:
c6:5a:fe:23:ba:d6:ab:c3:a5:e5:43:81:5b:bf:86:
14:3c:0a:45:44:80:05:01:1a:44:d4:f5:1a:16:8e:
39:8c:67:b2:4d:5a:19:c1:dc:a6:b0:24:2c:42:14:
dc:47:6a:2a:37:6a:68:ba:e8:83:72:78:a0:f3:9c:
48:0d:d8:66:13:b3:a6:90:f4:57:17:84:28:54:5a:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:86:6D:23:85:24:A3:02:90:5B:B1:E7:FC:61:DA:8A:6B:AE:A8:D8
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:7c:3a:65:55:2d:7e:cc:48:b6:43:ac:53:53:13:70:dc:
ca:48:a6:16:c3:f6:30:37:0a:c1:1e:4b:1f:7a:77:40:dd:6b:
f3:57:5c:65:44:18:82:39:11:b4:50:a4:6b:6c:b3:42:ab:89:
77:04:7e:61:b1:cd:fd:68:0d:9a:e3:4b:22:65:5b:a3:6b:e7:
f1:9d:a9:de:c7:16:4c:b4:44:07:b9:76:b6:5b:0f:31:c8:a1:
b4:4a:b8:b8:18:97:d6:2c:45:16:1c:e8:04:5a:04:d9:ae:13:
bd:5a:9d:15:bc:2f:f4:ff:53:52:bc:1c:52:cd:8f:af:89:e0:
f4:02:00:e5:0b:a0:52:0d:9a:df:09:bd:3c:4a:b6:f8:56:39:
c5:5a:25:58:c2:57:23:a2:0f:45:b8:a0:0d:93:ab:dc:9d:29:
4c:90:39:5e:e8:12:89:3b:d3:9a:21:98:92:e6:92:f2:2d:bb:
67:6e:44:ef:ef:83:b3:67:c2:23:80:06:1c:b8:32:2f:bc:1d:
39:98:7b:e1:a2:29:a2:94:f2:36:db:1a:be:76:24:79:b8:4b:
b6:30:8b:7e:4f:d0:75:44:e1:fa:1d:0d:5b:fc:08:30:eb:7f:
54:67:f1:0e:fc:3b:72:49:22:1d:0c:91:6a:e7:39:f8:b3:2c:
77:9a:3d:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtM2urUz87srV+lVSE0rPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjUxMDIwMTMwMDE3WhcNMjUxMDIxMTMwMDE3WjAzMTEwLwYDVQQD
EyhlMDg2NmQyMzg1MjRhMzAyOTA1YmIxZTdmYzYxZGE4YTZiYWVhOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyyfZ+EcRVfWqOBUhhrru8AcsAHD
SEh/A5I0mTaVisiRpyClDBed8i7Gt+dTglvfImXRtoTzi4uUTUxg8E+n36Jeiues
vZzO4ARyMCqKi3J6rLXsQYtsZddR0TBFwRjVyYyvfyfwcTEjxP27Pgc6pMRGDA3p
3gpwiAq1a8u9eha5PCLgO7chMtjmPwhPUppO2VAl1wp5d08PVnBcNSKfEpaVxOm9
rZbUoo/QU2Gx0uw9fE/GWv4jutarw6XlQ4Fbv4YUPApFRIAFARpE1PUaFo45jGey
TVoZwdymsCQsQhTcR2oqN2pouuiDcnig85xIDdhmE7OmkPRXF4QoVFrk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCGbSOFJKMCkFux5/xh2oprrqjYMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTl8OmVV
LX7MSLZDrFNTE3DcykimFsP2MDcKwR5LH3p3QN1r81dcZUQYgjkRtFCka2yzQquJ
dwR+YbHN/WgNmuNLImVbo2vn8Z2p3scWTLREB7l2tlsPMcihtEq4uBiX1ixFFhzo
BFoE2a4TvVqdFbwv9P9TUrwcUs2Pr4ng9AIA5QugUg2a3wm9PEq2+FY5xVolWMJX
I6IPRbigDZOr3J0pTJA5XugSiTvTmiGYkuaS8i27Z25E7++Ds2fCI4AGHLgyL7wd
OZh74aIpopTyNtsavnYkebhLtjCLfk/QdUTh+h0NW/wIMOt/VGfxDvw7ckkiHQyR
auc5+LMsd5o9Cw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:52 2025 by rpki-client