Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File: sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier: QDa7+zB43Bh+mqfof2noOo7TGjrF99gKm/cVMJ8JclI=
Subject key identifier: 8E:49:DC:52:BA:DC:97:CE:B6:C1:52:71:DD:47:AB:09:EC:FC:CF:15
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer: /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial: 0199FD6AEF7E5E671A3028BFD208FD57901F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number: 0411
Signing time: Sun 19 Oct 2025 17:01:07 +0000
Manifest this update: Sun 19 Oct 2025 17:01:07 +0000
Manifest next update: Mon 20 Oct 2025 17:01:07 +0000
Files and hashes: 1: OfdMOcUbbc7oEojb1zo08qkIRuQ.roa (hash: IicrU+y2VcBYbd4QyyTDfZZRjrYA59p1rvePkvFgFRg=)
2: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: i63oo5WobtiMuLUj+Lf/iK38qK34LkAc+JexO6GDML4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ef:7e:5e:67:1a:30:28:bf:d2:08:fd:57:90:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Validity
Not Before: Oct 19 17:01:07 2025 GMT
Not After : Oct 20 17:01:07 2025 GMT
Subject: CN=8e49dc52badc97ceb6c15271dd47ab09ecfccf15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:fc:eb:91:ff:14:c5:4b:dd:6e:77:6c:5b:18:
f5:a1:c3:c6:83:67:6a:c7:e3:59:a0:cc:52:41:1a:
b8:1a:16:45:26:1c:03:0d:48:ef:d9:2e:0e:0e:37:
5f:6f:57:fa:2a:2f:36:51:06:89:4f:e8:e3:b7:68:
b7:e5:4a:bc:86:87:4f:a2:56:19:8b:94:b4:e6:6c:
af:90:82:71:9e:07:40:bd:9f:4b:69:6a:fc:0d:d7:
ce:e6:02:56:28:f9:57:c0:ed:19:51:0b:27:57:97:
3c:e4:5b:9b:b4:85:9a:07:40:82:78:17:a2:b9:ff:
4f:72:b7:32:72:36:3a:42:aa:33:ad:b6:0f:b7:87:
29:8a:79:15:3e:bf:ae:c6:7a:0a:80:15:8c:eb:64:
d4:ab:bf:39:2e:f4:d6:73:80:37:10:fa:5b:1a:0d:
23:35:0a:d4:5f:fb:b4:98:65:c5:3c:36:dd:1d:f2:
cb:76:3e:9f:1f:92:c7:3f:21:ed:ad:4c:76:25:ef:
3a:f6:fd:34:45:11:11:a6:8f:ca:2d:eb:b9:ce:86:
51:95:ed:d6:34:85:ea:f0:9f:9b:86:fd:16:d5:4c:
e6:66:80:4f:1e:fa:08:51:41:a9:a2:5c:3a:ac:d7:
c7:54:b6:8a:94:e1:80:48:c9:ef:16:dd:86:29:d6:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:DC:52:BA:DC:97:CE:B6:C1:52:71:DD:47:AB:09:EC:FC:CF:15
X509v3 Authority Key Identifier:
keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4f:e2:b6:ac:cf:e0:cb:4e:21:8c:dd:78:bf:f5:d5:35:17:
1c:b0:f8:18:e8:db:da:6c:88:4e:c0:61:e9:a0:fb:74:ae:7a:
24:c8:12:02:9b:62:bb:33:a3:fb:86:2a:f6:55:e9:7b:6e:a6:
2c:7c:c6:a6:ff:da:fa:8b:fa:11:12:fa:d6:63:e7:3e:d4:c4:
d0:12:d8:d6:82:65:f8:d9:e2:42:38:31:44:4b:e2:69:1d:1c:
70:92:e7:94:1d:c4:da:f5:ff:eb:b6:b6:a6:1b:5f:5c:5c:1b:
48:ba:52:52:e3:66:2b:a8:06:d9:38:e9:01:f9:bc:75:35:3f:
b6:ed:5e:71:db:ef:41:ac:86:53:40:a3:9e:80:4e:f6:e6:75:
17:f8:f0:e7:65:bb:30:8d:af:ec:50:71:0e:e3:bf:43:73:51:
d6:31:19:83:4a:17:c4:f0:49:83:88:6d:be:3c:19:b0:78:86:
de:f6:9f:35:ba:31:81:a8:37:cd:0b:56:1e:da:a3:80:74:1d:
d0:81:8f:0a:9f:78:58:3a:6d:4c:a3:57:7a:76:c3:03:03:6f:
72:8a:3f:94:f6:08:4b:f9:89:62:ab:0e:2b:c9:6f:85:4a:2b:
85:5a:06:26:f7:27:e4:97:86:fc:31:06:a6:a4:e9:f4:ae:1d:
4f:29:d5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:52 2025 by rpki-client