Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
File: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft (raw, json)
Hash identifier: syUpFM3YOwYbGVgN2X1qLtXIB/n4ssBJcvzHeSAt4X0=
Subject key identifier: AF:F8:28:FF:B2:3F:FE:0B:2E:F8:44:D3:AE:DE:9C:BC:99:57:30:FC
Authority key identifier: 4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
Certificate issuer: /CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Certificate serial: 01987374753E1C6D1CDFAC14ECD127B1A033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:01:08 +0000
Manifest this update: Mon 04 Aug 2025 05:01:08 +0000
Manifest next update: Tue 05 Aug 2025 05:01:08 +0000
Files and hashes: 1: BFNpBumDp1kCbOkRPfNeeb9eg3Q.roa (hash: W2NfednhtlR7QdA8fAAqksCstG5fL7QYtGvfqI9Vs8k=)
2: Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl (hash: 6NkxjsSs322t8nh65s6X76J9I6GAP/GhQcPrAo65Pn0=)
3: zaqITKpKgeaAwvYpqmoD7gvhk3k.roa (hash: RNANRJqVDcBX4aReT0CnM2M60vTk0XR3zW0I73Wa0pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:75:3e:1c:6d:1c:df:ac:14:ec:d1:27:b1:a0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2e93ca9f9d46de543ff7c2d0540e897dc14fee
Validity
Not Before: Aug 4 05:01:08 2025 GMT
Not After : Aug 5 05:01:08 2025 GMT
Subject: CN=aff828ffb23ffe0b2ef844d3aede9cbc995730fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4a:a6:74:78:41:50:c2:4a:28:26:18:b3:56:
65:09:8a:18:84:f3:4b:4d:a3:b4:cd:2a:2d:77:1c:
9d:c9:d2:fd:97:af:6e:c5:0d:21:9e:a5:72:c6:99:
1a:54:6f:89:07:e9:e4:e3:0d:7e:f1:a5:8d:ca:53:
e0:7d:e3:64:7f:67:6c:e0:86:29:75:51:50:77:09:
8b:95:e3:6b:35:b8:46:18:24:be:47:6f:65:a7:e3:
ad:5f:5e:e3:9a:b3:59:dc:dc:e4:c6:4b:53:c5:5b:
5e:f0:96:fd:8a:d8:53:7a:e4:7e:77:fc:1b:ba:53:
3f:7e:75:7a:fb:66:d9:97:d0:f9:dc:ba:d9:52:17:
92:3f:86:d5:0f:df:33:1c:6f:b2:96:4e:27:55:a7:
73:12:8d:a2:06:6d:b4:bc:2c:35:3b:cd:ab:a1:d2:
a8:a0:7c:68:0f:61:5b:12:da:67:c6:db:40:28:d8:
57:f6:47:33:3d:37:e7:15:8c:66:5d:1e:78:0c:aa:
1c:af:f5:08:5c:ce:b3:9f:54:e2:3b:6d:16:0e:8d:
41:9a:71:b9:31:13:80:ac:15:1f:fc:d2:8c:4d:31:
f3:9d:d6:d3:c1:86:c4:bf:46:ad:f2:23:33:76:f6:
69:0a:5d:ab:ed:49:d9:34:db:08:ad:d2:c5:ae:66:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:28:FF:B2:3F:FE:0B:2E:F8:44:D3:AE:DE:9C:BC:99:57:30:FC
X509v3 Authority Key Identifier:
keyid:4B:2E:93:CA:9F:9D:46:DE:54:3F:F7:C2:D0:54:0E:89:7D:C1:4F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51210c-a380-4b59-b2ad-45a21b29023d/1/Sy6Typ-dRt5UP_fC0FQOiX3BT-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4a:f8:94:7b:bd:41:33:f2:ce:78:93:a3:dc:e4:c0:2a:4d:
30:fa:a6:cf:82:aa:fd:b5:d4:03:8c:2a:fd:e1:f8:52:2c:ee:
ab:ff:e1:72:cd:db:46:e8:df:0f:53:46:3e:d0:21:9a:5e:b9:
e7:a6:9f:97:a5:53:25:76:3d:a8:fd:c7:9d:8a:9a:7c:8e:4e:
8c:73:99:91:88:96:71:4e:04:a5:e6:4a:02:38:a1:1f:03:32:
0a:18:41:cd:8e:44:dc:d1:8a:b4:fb:51:9b:8b:df:62:1b:1c:
66:f3:2a:8c:e0:52:cb:48:0f:62:22:f9:ad:50:3b:af:30:57:
f0:92:ea:70:3f:79:70:92:70:c3:af:88:ae:69:91:04:67:3f:
2e:cd:51:bb:b7:b1:c1:eb:86:24:02:6c:c8:5c:57:85:5b:73:
2b:85:27:09:92:17:ea:b8:4f:0d:94:e7:58:3c:ea:36:87:3f:
7c:a2:ff:ff:d2:29:9e:3b:42:cd:c0:f5:d1:f6:b1:34:95:df:
34:9d:d3:4d:aa:54:34:0b:83:f4:aa:2a:b3:38:a1:90:61:ce:
a7:ff:e3:a1:c2:f8:db:19:ef:73:8a:e6:bd:54:f8:cb:13:9c:
f5:8d:fc:de:51:a6:c6:7c:a6:ec:41:75:8f:f8:8b:54:a5:4a:
be:28:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:59 2025 by rpki-client