Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: dIe0wlPZsF20iWen8yGgYPhOjbIQ7pYbYvF+IZIjD34=
Subject key identifier: C2:BF:DF:F7:FF:07:A5:88:F6:9A:97:88:A7:F4:0A:08:AF:1C:67:EF
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 0199FCC6C754DC7F91497B2EBF316DA8600D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 14B4
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: xxA5U4EocXDCpcXFUYxUM3bZ0CGnOvLEWIboLbNjDfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c7:54:dc:7f:91:49:7b:2e:bf:31:6d:a8:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=c2bfdff7ff07a588f69a9788a7f40a08af1c67ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:c4:dd:ca:64:32:41:8e:7f:75:48:0a:bb:
7b:b2:89:16:78:bb:52:70:48:cb:9e:b6:66:e1:99:
1e:d7:92:3e:0c:eb:db:7f:b9:84:c9:b8:1e:3b:8d:
b4:d8:cb:ee:b5:00:94:56:93:ea:c5:36:64:80:94:
98:e8:ba:8b:b9:96:7f:e2:13:38:cc:fd:2c:50:3d:
26:f2:8f:9e:b5:e9:90:62:d7:37:82:29:8a:a6:ad:
3c:cd:95:48:82:82:94:e0:77:d4:53:8b:c8:f7:f7:
a0:58:fa:9e:56:19:3c:9f:0f:81:e2:21:e2:22:35:
9d:02:75:84:31:dd:1d:bc:fb:ad:13:27:d2:10:8a:
fd:ac:a0:d9:c1:19:b3:fd:f4:8a:cc:55:5d:90:09:
36:80:c4:61:2f:55:3e:e8:29:af:65:b6:08:3d:0c:
b0:65:dc:61:4e:cb:4d:e0:d2:03:86:8d:20:04:e6:
0d:6a:0a:c5:41:ec:03:29:ec:aa:25:83:50:71:0c:
a8:4c:65:aa:31:00:c6:68:ad:40:ea:7e:31:f7:b4:
89:c1:ea:62:90:94:7d:e0:78:71:81:bc:67:11:25:
30:b0:49:d2:63:57:6e:68:6b:fd:b6:66:de:d4:46:
49:21:d3:52:0f:fc:be:5f:fd:70:59:69:7f:69:ff:
ed:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BF:DF:F7:FF:07:A5:88:F6:9A:97:88:A7:F4:0A:08:AF:1C:67:EF
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e7:ce:31:3c:ea:af:a2:0e:4d:63:f6:39:e4:cf:a8:88:43:
5d:f7:7b:4d:d4:a2:e4:9c:56:bc:8c:6b:0d:3d:14:ef:41:1f:
f8:ff:55:e6:3d:79:b2:8b:64:2f:75:42:5c:60:48:67:71:a8:
b4:36:76:60:ae:7c:40:9f:ad:d0:3e:fb:73:af:92:8d:67:90:
42:a9:e9:56:90:5f:14:1a:17:57:df:8e:5a:79:ab:86:e9:58:
65:f4:36:f1:c9:1f:7d:a3:4a:f8:49:5a:7e:ed:e5:93:dd:ba:
39:c0:e5:31:cb:05:da:3c:a7:f9:03:85:fd:4c:1c:49:cc:ba:
bb:98:8d:0d:52:b1:97:df:ec:a9:ac:e5:65:2c:65:2b:d8:ea:
11:b0:60:3e:43:e7:5c:64:1c:9d:e6:d6:58:f4:b1:0f:53:14:
73:43:f7:34:8e:63:86:5e:5c:48:da:ea:31:0e:c0:c8:ed:75:
87:81:67:ad:8f:fc:38:6f:d4:9e:51:e9:c5:96:af:b8:40:2b:
12:75:67:ca:ce:d1:0f:17:48:a5:8e:5b:1b:4b:74:b4:96:3a:
6a:32:4a:8d:3d:9b:1b:fb:f8:c5:18:6e:26:f5:1f:a0:b2:3d:
3a:4c:4d:8b:ea:55:15:79:0d:75:32:17:7a:ab:f7:62:4d:a5:
f9:1d:61:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:12 2025 by rpki-client