Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: uTqrPDJ/LkSodX3vcqC72x/QuCOhp1EYIM+1UusehAo=
Subject key identifier: D9:F5:74:AF:8A:AF:44:A3:D7:E4:53:16:BC:F8:E2:38:B2:B0:04:70
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0199FBEAB5F136FE3DDADB94A41D958590AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0E53
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: bhO25AIVuZu3mKKi6OjLzj+WRvQexzvaZyXdcYRqpDc=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b5:f1:36:fe:3d:da:db:94:a4:1d:95:85:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=d9f574af8aaf44a3d7e45316bcf8e238b2b00470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:c6:4a:d7:16:af:f2:1c:7b:d1:82:e0:9f:
55:d3:04:45:62:9e:74:64:7e:37:ed:12:f9:3a:f4:
1c:d1:00:f6:53:88:cd:fa:95:11:33:35:72:31:c3:
f3:33:0c:19:b2:a0:95:fc:bf:f5:fe:1f:3a:1d:a8:
b9:bb:a7:e0:a1:52:dd:5f:c7:79:e8:16:6c:13:29:
9b:dc:99:82:66:0a:46:79:51:d7:f8:92:d1:ab:c5:
01:23:5a:e2:6d:e6:3d:9f:22:a7:6a:20:70:82:49:
09:d9:50:d8:05:fe:28:ea:96:23:2b:1b:8a:73:70:
7c:3f:70:8a:b1:ae:45:de:c3:4c:9c:1c:8a:a7:ae:
45:2e:a1:6b:73:e8:a9:61:fb:71:41:9c:4b:2c:9b:
6a:72:8d:22:1c:9f:67:79:44:85:76:90:ac:d7:57:
8e:44:96:4e:4b:63:49:71:d7:b2:5b:51:4e:cd:ee:
1b:4d:6d:0d:44:0b:2b:c5:04:38:37:af:64:4a:a8:
fb:0c:81:6f:66:0a:4d:f9:40:68:2a:8d:cb:39:59:
27:d1:85:01:f5:b9:f3:64:a7:fd:15:71:22:8d:b7:
e4:c3:9f:d8:e0:82:db:97:bd:b5:db:52:c0:68:d3:
66:92:ab:e0:d9:d8:c6:09:d0:04:c0:6b:1e:26:13:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F5:74:AF:8A:AF:44:A3:D7:E4:53:16:BC:F8:E2:38:B2:B0:04:70
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:95:5d:1a:b1:50:9e:18:12:48:93:08:00:8f:b1:a4:18:21:
69:9c:12:cf:2e:88:5e:84:52:26:41:eb:39:97:3c:99:88:19:
9d:da:b3:43:b2:c7:79:06:bb:3a:1e:75:7b:4b:a3:a1:3c:cb:
c3:74:f3:ee:8a:70:bf:c7:04:5a:d2:77:1c:18:c3:d3:a5:18:
68:3e:91:f9:3d:8f:46:ae:11:b4:d1:34:64:9c:12:1d:08:d0:
2d:82:ae:20:30:d4:df:24:69:01:64:c5:49:fe:93:73:d4:bd:
3c:e1:b9:03:6c:8b:1b:f5:1f:5e:40:6a:48:75:dd:93:99:4c:
7e:99:56:17:f7:0e:86:91:49:10:32:3e:a6:d8:46:2c:3a:b4:
b3:41:7d:41:de:b0:c3:78:06:c5:e4:e3:98:ac:9a:f2:2a:22:
5b:1b:0e:87:ef:e3:f4:72:10:ab:0a:36:24:08:ea:09:86:c4:
38:c9:bb:17:f7:d7:ba:6d:1e:a7:7f:e4:0c:61:ec:78:f2:1e:
7e:1e:18:6e:94:b8:bf:89:5b:95:89:13:2a:b5:be:fe:92:2f:
3f:1a:96:e3:18:f4:a4:db:38:2b:4a:ac:52:d2:7d:a7:b3:ca:
ac:87:db:fd:dd:95:77:0d:3b:ea:1c:e3:49:6f:55:e6:7b:4c:
22:4a:8a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:19 2025 by rpki-client