Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: Qbfrrb1UdbMG7DD5uWOAD891D3Wc13zHkgtNxdR9GMg=
Subject key identifier: FC:18:8A:17:DB:50:89:4B:CC:29:16:3D:17:B5:0E:49:2C:E9:32:68
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019774525ACFF3D77F4F23AAA7B364334E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 159E
Signing time: Sun 15 Jun 2025 16:00:43 +0000
Manifest this update: Sun 15 Jun 2025 16:00:43 +0000
Manifest next update: Mon 16 Jun 2025 16:00:43 +0000
Files and hashes: 1: ANPP4Ri3K1e-3EB_llD87ewAVpI.roa (hash: BqjlpSKTmEfFLg6w0nu9ozK/+m//fsc6fhYWNto/nfI=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: E1Uu/AAfnanAPZDknGObfU8+QAJASjrz0MRvLBTH8CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:52:5a:cf:f3:d7:7f:4f:23:aa:a7:b3:64:33:4e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jun 15 16:00:43 2025 GMT
Not After : Jun 16 16:00:43 2025 GMT
Subject: CN=fc188a17db50894bcc29163d17b50e492ce93268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:99:2c:f4:0f:f3:e8:58:ff:39:cd:d9:95:
96:89:e8:44:ae:f8:ea:03:44:76:a0:c4:42:1b:9b:
15:2a:da:a9:19:9a:7f:0b:71:0c:ff:3b:0b:1c:cd:
16:2c:b7:8f:92:df:1f:15:71:62:38:0c:b0:43:c8:
e3:54:6e:87:c8:1a:44:a3:05:80:03:8a:07:40:54:
23:df:63:8a:e1:5d:72:32:5b:12:28:d5:b6:62:34:
80:f4:91:41:9a:4c:11:69:6e:ca:d8:e0:fe:03:05:
4b:e6:7e:c4:70:5e:11:60:53:23:c6:6e:ab:48:64:
ba:d6:95:df:a1:29:48:19:1b:e5:87:b9:81:5f:03:
bd:7b:6e:10:44:55:46:24:45:31:95:26:b5:7c:1e:
88:2d:f9:a3:f2:87:53:a3:c2:5e:e0:5a:38:82:3c:
6d:80:3d:60:52:09:e1:f3:dc:66:18:68:c4:d0:23:
25:d8:7d:b3:d1:88:f5:05:ee:75:8f:92:ff:65:10:
12:01:74:36:62:36:1b:bf:c2:44:76:dc:c1:4e:d9:
66:69:70:01:26:2e:b4:21:68:d4:7c:61:3e:41:52:
f1:eb:a3:f6:cb:c4:d4:6b:92:d7:46:e6:f5:01:2b:
86:52:bc:49:3c:27:16:70:1f:6a:8f:b6:c5:40:5d:
d6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:18:8A:17:DB:50:89:4B:CC:29:16:3D:17:B5:0E:49:2C:E9:32:68
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5c:d3:59:3f:de:b8:27:82:ec:df:8a:55:ec:07:36:77:26:
04:e2:b5:fc:ea:e2:c8:14:d9:a5:da:74:b6:19:70:d1:8e:90:
76:3d:2d:a9:88:b3:b9:84:a0:00:35:ba:26:fc:cb:b1:c8:e3:
a2:fa:c0:04:a9:44:37:48:15:ab:31:7a:45:31:50:5d:2c:72:
78:5b:e6:46:c9:d2:14:c2:c9:90:eb:64:a9:37:ba:89:48:a6:
fb:32:25:fa:d6:24:56:3b:6b:39:e3:e4:d3:dd:a4:88:e6:0e:
3d:e1:ae:77:c8:1c:a5:2b:59:d4:88:d6:9d:ed:a1:8f:41:6b:
e6:2b:55:e0:ce:b8:34:4a:bf:00:87:60:2d:e0:d8:c9:55:e5:
8b:f9:53:ce:9e:ef:0c:5e:e2:7c:85:34:59:a5:3d:48:0e:6c:
8a:8d:7c:96:1d:7d:2d:4b:44:19:1c:24:d0:f6:7a:60:16:90:
96:43:9b:23:57:95:88:99:9f:16:a7:6a:e7:e0:9b:be:0a:35:
9d:ab:54:8d:81:ac:f2:17:a6:14:96:31:69:81:bc:0a:fe:5c:
eb:99:da:d5:c0:f4:e8:0c:c6:6f:6d:90:ea:07:3c:7c:9d:c9:
81:04:42:62:7b:e4:d4:2f:0f:87:e5:68:8e:7e:e2:4f:dd:e3:
95:85:10:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:52:31 2025 by rpki-client