Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File: sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier: P6Z1kWQ2Eff1+Ep05XTqXbq1iQFOpq9IKF2HuP7ZgXc=
Subject key identifier: 4E:44:F8:35:2A:E1:61:44:F3:25:F1:0E:29:61:DD:55:A9:45:26:40
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer: /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial: 0199FE0FDE4D102EDDE0AF08025CE68BB56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 20:01:16 +0000
Manifest this update: Sun 19 Oct 2025 20:01:16 +0000
Manifest next update: Mon 20 Oct 2025 20:01:16 +0000
Files and hashes: 1: eFmnxR7CyMxvye5-XXcMbfaAVOw.roa (hash: pZJwNCYo3S0mBXNLEIKEUXn/lY7t5TEifbuRPldd2yI=)
2: oJDEzXr7gr-7eZ1rexTjd4c8Ul8.roa (hash: xZTw5KYNf4Du9zIJjL5q6os9uQVggXiruo8qaJQJCvQ=)
3: pGZsGJVmFoYhAv5VAkXf67JcN-w.roa (hash: /j9DfbiG7O3qG1GtbIDXzJ4rJWqS+jSuNHHJIbaeKpc=)
4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: /Xv09XsPYh/Kd/v/LVMFHqm7K7Dxrln3EU1/S078e3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:de:4d:10:2e:dd:e0:af:08:02:5c:e6:8b:b5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Validity
Not Before: Oct 19 20:01:16 2025 GMT
Not After : Oct 20 20:01:16 2025 GMT
Subject: CN=4e44f8352ae16144f325f10e2961dd55a9452640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:f3:e1:c4:df:ad:4a:b5:e3:e0:bc:c3:59:
2f:77:1f:11:55:55:f3:b1:d7:d6:fa:77:61:e2:25:
b6:79:01:86:b6:e5:8a:e8:60:2d:1f:3b:3a:fb:e1:
35:85:ed:19:34:55:e9:46:8f:c9:a9:f6:a6:ec:3f:
28:b2:84:f1:7d:85:ca:1c:ca:c8:de:de:f2:ef:b7:
5d:0f:c5:ce:d6:a7:83:99:73:5d:4a:92:e7:dc:d8:
4b:2e:f0:d9:fa:bf:bd:92:a6:46:22:cb:8d:fa:5b:
ca:45:b5:6c:fe:74:a0:eb:c9:99:96:b0:68:7e:37:
df:19:16:e5:78:0b:a3:52:ff:b1:4b:bf:54:45:6c:
7a:54:68:74:0a:90:b0:19:e7:e3:7b:cd:e3:6c:d6:
07:40:51:b6:3a:3c:b0:7d:69:10:ca:b8:f7:55:d7:
59:c7:6f:08:ff:94:ea:35:cc:76:9f:bd:4a:14:15:
96:61:6a:a7:93:24:aa:83:a0:cf:00:72:58:17:93:
12:8d:dc:ed:15:1b:c6:72:d0:d0:24:7c:69:68:b5:
fd:25:34:71:76:54:8b:60:5d:df:52:ea:55:e8:33:
dc:ba:32:d4:81:b5:97:06:09:e8:3f:bb:07:41:a6:
7d:34:02:d8:6b:e0:14:5c:91:4f:b5:63:ac:27:3f:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:44:F8:35:2A:E1:61:44:F3:25:F1:0E:29:61:DD:55:A9:45:26:40
X509v3 Authority Key Identifier:
keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c4:44:ad:0b:b3:ee:8c:ac:fe:90:31:2a:34:e8:a6:e4:2d:
e2:96:1e:e9:eb:da:8f:fe:61:6b:a3:4b:f1:e6:94:0c:0f:ee:
e8:2f:a2:61:dc:8c:d3:56:2a:8c:a1:c8:a5:06:03:12:56:14:
85:e2:f3:7d:64:4b:a6:20:7e:bf:72:d1:38:de:bb:c6:3b:c7:
87:cc:b2:b3:8f:c6:d1:8a:fc:79:51:9f:37:8b:98:ad:4f:1c:
55:7a:df:63:fe:3e:c2:6d:f2:8e:4c:3e:46:ac:4d:42:0b:c3:
c5:78:82:e2:80:46:7b:8c:d6:4f:7b:23:99:39:df:bd:fd:47:
4d:f2:ce:b5:2e:53:cc:33:f8:98:46:d3:17:e7:1a:f1:61:1e:
70:e8:12:45:f8:20:2b:be:e3:16:c7:da:41:2d:9b:fa:7b:24:
40:d5:d1:4b:d8:7f:f9:d8:f3:b6:0d:0a:21:35:e5:7d:59:74:
bb:4e:09:4d:15:b5:00:19:da:c4:58:52:8a:ab:6c:ef:ac:7a:
c4:d8:18:2c:61:54:82:a1:4e:40:ca:ce:8f:f1:83:ac:a5:55:
18:bd:21:05:3a:97:2f:f5:c5:d6:93:32:54:e0:ea:13:62:e4:
4b:6f:3e:97:94:33:fa:5f:42:54:bc:20:57:2f:4f:4a:04:f7:
b0:c3:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:55 2025 by rpki-client