Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: wWKn1Ba6iUEUPsYiXa80E+bnCp2RzgM1FYBcr5c+5SM=
Subject key identifier: 52:88:E1:5C:21:EC:0F:A7:82:26:71:DD:D9:9C:0C:F7:B9:55:E3:B9
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 0199FA6A691766E32879084EB919F066B545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 02BE
Signing time: Sun 19 Oct 2025 03:01:41 +0000
Manifest this update: Sun 19 Oct 2025 03:01:41 +0000
Manifest next update: Mon 20 Oct 2025 03:01:41 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: XBcb+hk688AxyOdpM8JZw0PqrS4M3qozF3VechOvpf8=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:69:17:66:e3:28:79:08:4e:b9:19:f0:66:b5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Oct 19 03:01:41 2025 GMT
Not After : Oct 20 03:01:41 2025 GMT
Subject: CN=5288e15c21ec0fa7822671ddd99c0cf7b955e3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:5e:99:0d:f0:7a:b9:93:f9:7d:33:e4:19:
4b:63:cc:ed:41:b0:3c:81:08:b1:61:d6:4c:49:c0:
06:a8:fb:4a:1e:0e:f2:ee:f6:8a:01:78:15:5e:ce:
da:34:1e:18:18:fc:74:10:31:1a:02:29:20:57:2b:
25:f2:de:0e:c4:0b:af:8c:04:38:2b:3e:96:f1:27:
ab:8f:66:3a:e1:1b:93:68:a0:57:5d:9b:1d:75:51:
5a:27:d2:4a:f3:14:3a:cb:09:5c:0c:60:aa:ca:11:
05:76:ef:e2:7d:ff:ae:a6:74:4b:60:ed:86:b8:c9:
2a:94:f7:36:83:92:25:8b:29:80:cc:ea:bf:66:7a:
d6:30:3f:61:51:e9:16:22:8f:ce:4c:ed:73:18:63:
6c:ef:18:4c:3f:6e:7e:5d:bb:72:5f:d4:a4:2e:53:
eb:7d:5d:d2:dd:66:6b:27:e8:a3:a8:e6:71:36:ac:
e2:2f:08:34:a5:ae:a5:41:f1:28:21:6d:49:75:2e:
c9:2e:55:a3:5b:ea:21:36:dc:bc:9a:ca:6a:b2:a2:
98:67:af:32:c8:e9:dd:91:58:f6:cb:e9:b0:30:e1:
e8:de:c1:53:50:4d:f5:6a:83:67:8e:19:63:48:af:
29:11:8b:fe:dc:31:d3:4d:52:e2:18:db:c3:c3:ec:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:88:E1:5C:21:EC:0F:A7:82:26:71:DD:D9:9C:0C:F7:B9:55:E3:B9
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:da:fd:7a:42:ec:ec:70:02:4b:b0:6b:6a:5a:19:cc:49:e0:
69:d0:88:ff:6f:c2:d2:05:26:69:8b:97:40:be:b3:92:4d:7f:
76:36:fc:f7:4b:8a:33:40:e3:88:d0:f6:ac:18:8c:9a:0a:dc:
ac:cc:58:8d:ea:f1:d3:28:aa:cf:ad:29:28:8b:8e:d5:60:c8:
16:b4:29:33:27:21:de:8c:5c:f9:bc:53:84:14:45:21:14:51:
3e:be:37:74:c2:fc:2d:a6:37:14:ba:28:af:b4:e9:fd:10:4a:
c4:27:fe:01:e0:61:44:7b:87:be:20:0c:cd:06:72:4d:a9:e6:
17:b5:24:ce:6c:54:8d:71:90:45:8d:e7:e6:9b:8c:aa:2c:36:
ec:dd:54:d2:7d:06:53:57:49:f6:41:1b:0d:3c:91:bb:81:54:
59:42:2a:e3:6c:88:a1:4d:ca:06:ca:61:a9:e5:a1:08:5f:e3:
ad:83:28:f9:e5:4e:8f:d9:2c:a2:bc:cd:3d:d5:88:4e:37:1f:
04:c9:c6:98:dc:bb:14:b2:28:f0:b8:e1:f8:4b:75:29:a0:7c:
fa:f7:6a:86:bd:65:93:fa:31:dd:e8:35:f9:51:3d:a2:7d:92:
e7:ee:e6:2c:0f:7b:79:95:f9:6b:10:93:96:99:25:3a:99:1d:
61:fe:ec:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6amkXZuMoeQhOuRnwZrVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODNlOTZmZjI3MGY0ZWNhOTcwMTI1ODA4MWJiNWNmODE4
OTY2YzgwHhcNMjUxMDE5MDMwMTQxWhcNMjUxMDIwMDMwMTQxWjAzMTEwLwYDVQQD
Eyg1Mjg4ZTE1YzIxZWMwZmE3ODIyNjcxZGRkOTljMGNmN2I5NTVlM2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDJemQ3wermT+X0z5BlLY8ztQbA8
gQixYdZMScAGqPtKHg7y7vaKAXgVXs7aNB4YGPx0EDEaAikgVysl8t4OxAuvjAQ4
Kz6W8Serj2Y64RuTaKBXXZsddVFaJ9JK8xQ6ywlcDGCqyhEFdu/iff+upnRLYO2G
uMkqlPc2g5IliymAzOq/ZnrWMD9hUekWIo/OTO1zGGNs7xhMP25+XbtyX9SkLlPr
fV3S3WZrJ+ijqOZxNqziLwg0pa6lQfEoIW1JdS7JLlWjW+ohNty8mspqsqKYZ68y
yOndkVj2y+mwMOHo3sFTUE31aoNnjhljSK8pEYv+3DHTTVLiGNvDw+yhlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKI4Vwh7A+ngiZx3dmcDPe5VeO5MB8GA1UdIwQY
MBaAFEmD6W/ycPTsqXASWAgbtc+BiWbIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTct
NmNmNjgyYTE4NWQ0LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85ZTBhNjctMGQ0NC00MjllLTlmOTctNmNmNjgyYTE4NWQ0
LzEvU1lQcGJfSnc5T3lwY0JKWUNCdTF6NEdKWnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbtr9ekLs
7HACS7BraloZzEngadCI/2/C0gUmaYuXQL6zkk1/djb890uKM0DjiND2rBiMmgrc
rMxYjerx0yiqz60pKIuO1WDIFrQpMych3oxc+bxThBRFIRRRPr43dML8LaY3FLoo
r7Tp/RBKxCf+AeBhRHuHviAMzQZyTanmF7UkzmxUjXGQRY3n5puMqiw27N1U0n0G
U1dJ9kEbDTyRu4FUWUIq42yIoU3KBsphqeWhCF/jrYMo+eVOj9ksorzNPdWITjcf
BMnGmNy7FLIo8Ljh+Et1KaB8+vdqhr1lk/ox3eg1+VE9on2S5+7mLA97eZX5axCT
lpklOpkdYf7sBQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:00 2025 by rpki-client