Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File: t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier: SVxoj4UTHCyZNUETBNkKaZ1XHkldFwvsd/Ud23y9Emo=
Subject key identifier: 88:95:40:00:89:B6:27:70:E1:E6:B3:3F:5C:13:1B:F6:67:81:AB:A1
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer: /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial: 0199FFFE717FC020A4D1E6981AB5E60AFA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number: 01F4
Signing time: Mon 20 Oct 2025 05:01:29 +0000
Manifest this update: Mon 20 Oct 2025 05:01:29 +0000
Manifest next update: Tue 21 Oct 2025 05:01:29 +0000
Files and hashes: 1: gOfoa2pPlaad7aZSKOqxTDZnDnw.roa (hash: zWq54+d7Qdr/RiwPHS0cYGrr+8mtcUBj3tD3UQ2c23s=)
2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: ZcxNHhnuVXf6dHEZWM7ZYy+a6rn4WqVOqdrh1w7Lp74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:71:7f:c0:20:a4:d1:e6:98:1a:b5:e6:0a:fa:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
Validity
Not Before: Oct 20 05:01:29 2025 GMT
Not After : Oct 21 05:01:29 2025 GMT
Subject: CN=8895400089b62770e1e6b33f5c131bf66781aba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:e1:13:8a:3a:da:ef:c7:4a:66:04:b2:a5:
ac:f2:0d:4c:f3:f5:8d:3c:e2:c9:d9:66:03:4d:44:
2a:ca:67:27:34:be:2f:09:b4:30:f8:eb:4b:6b:85:
7a:fd:37:b3:a3:d5:48:1a:79:db:52:fa:6a:da:a0:
49:32:0f:6f:39:99:a6:c9:16:de:0a:e2:3f:e0:77:
8f:10:59:ac:37:86:de:26:62:39:ee:d4:0b:78:3e:
0f:5f:ed:87:f1:68:47:2c:38:23:2b:76:c6:f4:65:
cd:3f:ad:1e:94:bc:8e:8e:6f:08:f0:c2:2a:99:e0:
c7:5d:94:ac:12:3a:ad:92:12:3c:84:ac:c5:7a:1f:
51:43:50:15:09:87:d8:f3:08:56:8c:b4:1d:87:44:
4d:9b:39:45:03:24:80:18:4b:db:9b:6b:1e:e6:86:
4f:3d:c9:23:96:a5:7a:5c:62:1f:89:c4:80:1f:25:
58:7b:50:5d:7b:e0:14:e8:bd:8c:14:ea:d0:43:38:
e3:1e:5f:f3:6a:47:30:51:5c:b6:26:25:09:ee:1b:
31:d3:ac:c7:20:9a:4c:f5:69:a5:48:fb:57:c5:97:
54:ce:3c:9a:7a:f0:2e:f4:ed:91:cf:ad:1f:73:3a:
c3:09:95:30:73:b2:68:be:95:b5:4f:be:f3:f7:c9:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:40:00:89:B6:27:70:E1:E6:B3:3F:5C:13:1B:F6:67:81:AB:A1
X509v3 Authority Key Identifier:
keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:74:58:e3:61:74:ae:92:d2:46:e9:98:82:01:74:ae:09:
af:42:4f:17:fc:85:9e:e1:e8:d2:da:fb:1e:85:7e:af:b1:d9:
62:21:8a:63:42:f5:56:33:8b:62:3c:ec:62:b7:83:c7:50:88:
a3:3c:c8:28:6c:e2:a4:55:a8:51:5e:d0:9e:f5:20:a8:5d:72:
41:aa:12:bc:d9:f1:9e:b4:ee:9a:2e:d1:3c:9f:f7:f9:26:dc:
12:86:18:a5:58:3c:a4:ae:7f:48:1c:60:b6:23:eb:60:64:71:
dc:28:7a:0c:87:fd:b9:3d:93:c6:ee:f5:a7:b2:6a:ab:46:31:
61:00:49:f2:e7:34:26:4f:e8:bd:11:53:32:9e:c2:2d:de:b5:
f0:f3:32:03:9a:61:11:0e:3b:99:0e:86:51:08:d4:e6:1e:b7:
dc:16:33:85:34:f3:8c:f8:ca:a9:ab:d7:b2:bf:36:98:2b:e1:
9b:b8:37:1d:ad:4e:55:4d:e8:94:be:76:ca:ec:f8:c1:eb:bb:
74:1d:62:3b:22:5e:3a:a6:83:99:91:7e:03:8d:65:95:29:8d:
15:c3:5a:3e:53:7f:d8:0c:30:40:04:d2:56:c1:11:80:22:8c:
50:be:e9:86:f7:aa:29:0f:5a:ad:9d:0f:d1:42:be:13:d0:ae:
e9:8a:ed:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:06:31 2025 by rpki-client