Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
File: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft (raw, json)
Hash identifier: i4RBHbQi4PP2rQDqwnGcpzko3oWJoSy44s2tl+9azxs=
Subject key identifier: 24:70:8E:EE:24:8F:0F:10:9A:53:BA:38:81:E8:F7:6E:C2:CE:99:5A
Authority key identifier: 4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
Certificate issuer: /CN=4be372f98d766586c118b796b742ee575297c839
Certificate serial: 0199FD6AD6D8234985C27439365FC8F81E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
Manifest number: 01AC
Signing time: Sun 19 Oct 2025 17:01:01 +0000
Manifest this update: Sun 19 Oct 2025 17:01:01 +0000
Manifest next update: Mon 20 Oct 2025 17:01:01 +0000
Files and hashes: 1: Mto4d4IFbeBIsa6qUyocr2jWWK8.roa (hash: hLmX3yT44hxgxojTu+MlPrp+Zl/FamUEdVMXkmwsOEc=)
2: S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl (hash: hYB+jiNLB2rascWzqnQtavsDQZDciNIq2KKKr+DfG7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d6:d8:23:49:85:c2:74:39:36:5f:c8:f8:1e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be372f98d766586c118b796b742ee575297c839
Validity
Not Before: Oct 19 17:01:01 2025 GMT
Not After : Oct 20 17:01:01 2025 GMT
Subject: CN=24708eee248f0f109a53ba3881e8f76ec2ce995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:55:40:e7:63:cc:9d:4e:b3:ea:29:8e:bd:
96:de:4f:c8:cc:96:7b:10:e4:30:c8:9a:c8:77:ed:
19:a9:ff:33:ab:39:f3:5f:fb:3a:b9:ca:c8:89:e1:
ac:f7:f9:f4:31:9a:23:ea:5a:db:ad:2b:e2:63:9f:
ee:aa:ab:85:e8:ba:07:52:fa:4b:e7:ff:10:c6:b1:
de:02:c0:5b:97:f6:10:f9:0a:e4:87:80:a7:9f:5e:
20:8f:3f:46:e6:1d:0d:3b:c1:f5:0e:a0:e5:4c:91:
79:26:e7:58:e9:83:8e:4d:c9:00:1b:5e:24:4d:d5:
39:f2:ec:2c:b7:99:3d:14:c7:91:83:5c:e2:a0:a6:
67:bb:ba:d6:b6:9e:c7:64:90:8f:23:6b:71:60:56:
16:23:40:57:d0:1e:39:e2:28:50:9c:e8:94:fd:3f:
a2:9f:eb:a0:22:f0:a7:1a:2e:ce:08:c4:66:ef:8f:
48:6c:e2:67:ba:87:35:5f:95:33:a2:93:34:0e:31:
8c:a1:fa:db:33:63:bf:41:2e:01:77:e5:0f:9d:e2:
0f:ae:f1:46:a5:bd:e1:b8:34:81:a6:8d:df:80:78:
e9:67:26:1b:24:ab:47:48:d6:62:af:66:bb:0e:cb:
b0:da:a9:93:bb:eb:b3:93:e6:f8:d3:b9:ec:a4:94:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:70:8E:EE:24:8F:0F:10:9A:53:BA:38:81:E8:F7:6E:C2:CE:99:5A
X509v3 Authority Key Identifier:
keyid:4B:E3:72:F9:8D:76:65:86:C1:18:B7:96:B7:42:EE:57:52:97:C8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ec2dd-a971-49d6-b68a-de7a967be810/1/S-Ny-Y12ZYbBGLeWt0LuV1KXyDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:99:a0:e7:14:42:2b:0c:ab:53:3d:15:ad:ab:4c:d3:7c:fe:
22:9a:fc:ba:4e:64:71:7b:c2:0e:de:11:40:c1:0f:f3:26:ac:
20:53:ae:2a:9b:1c:1e:87:6d:bd:b4:50:17:ad:40:c9:ca:1b:
bd:5c:bf:ff:58:56:11:fd:cf:6e:07:ac:22:cc:88:a5:fa:31:
bb:3f:2c:03:b7:8a:5e:22:61:ef:df:30:db:c2:0f:7f:58:14:
1c:85:dd:1d:45:db:0c:41:86:c9:30:08:0d:ba:14:26:ab:d8:
10:df:37:6a:8f:9f:3d:5f:bc:65:fd:a6:ce:f2:ea:f2:6c:92:
50:8d:d9:f7:c8:16:60:f2:fa:51:b8:d9:46:37:16:0b:2a:b5:
b3:a1:34:50:3d:20:e3:b2:98:32:4a:a1:b4:56:62:c0:66:6e:
35:b5:64:2d:c2:85:55:ca:f9:22:83:e8:64:d5:4c:45:f7:65:
a4:ee:b2:55:c3:f2:5f:3d:e9:f9:ef:e0:76:f5:1c:66:e5:32:
9e:65:5c:fb:af:42:ea:0e:1a:90:18:e4:ff:85:22:7b:c1:90:
d6:87:56:81:90:c2:45:5a:c9:bd:fa:68:76:b7:f4:d5:85:5b:
e1:25:7b:7a:7e:b4:06:b4:ed:4c:9a:17:72:55:85:4d:fa:43:
37:77:7b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:10 2025 by rpki-client