Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: UtCSnhoOKXCoank+y0rfy51R3I2uDn2/wqmcG/k4Xig=
Subject key identifier: 46:D0:9C:DA:5B:3F:55:53:84:89:3D:89:F1:CA:E4:D1:24:81:9A:EB
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 019889204D642757CCD527190B72CA3753AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 094A
Signing time: Fri 08 Aug 2025 10:00:52 +0000
Manifest this update: Fri 08 Aug 2025 10:00:52 +0000
Manifest next update: Sat 09 Aug 2025 10:00:52 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: F09AVW5sKTUNKTzEWqZfbI9xmJRgg7e/bTa4ExfOCoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:4d:64:27:57:cc:d5:27:19:0b:72:ca:37:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Aug 8 10:00:52 2025 GMT
Not After : Aug 9 10:00:52 2025 GMT
Subject: CN=46d09cda5b3f555384893d89f1cae4d124819aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:d9:cc:0f:fa:a4:ca:16:cb:79:83:7c:ae:
11:08:d0:a9:52:e9:e3:a3:c7:22:98:34:2f:14:a7:
72:b9:ff:1b:cd:6a:2b:2d:19:1a:0a:6f:a7:71:9a:
a2:d3:c4:5a:d1:c9:b2:0b:07:33:0d:a7:21:bd:ee:
1d:c7:81:7a:8b:89:1d:74:b9:75:db:57:73:cc:4c:
50:24:75:db:0c:ef:6e:c1:98:58:32:cc:03:61:e2:
4f:a7:58:a2:78:8e:11:40:65:b1:ee:5a:24:e4:06:
8b:41:f9:01:a2:5a:86:78:95:05:54:9d:7f:2f:5a:
c5:da:92:50:10:b9:c2:33:e6:9c:54:0a:9c:b0:d3:
d9:ea:d4:86:08:68:e4:bc:c6:2f:21:3d:80:97:6d:
3c:cb:ea:98:5f:58:50:08:6a:63:1c:b3:12:d8:83:
86:29:2c:bf:74:f1:fe:3b:7d:95:45:af:37:7c:fa:
af:9f:ee:cc:ac:5e:09:03:c9:a2:d7:29:e2:05:c6:
be:a6:fa:e5:c0:8e:fc:bb:19:31:b0:9d:0c:8a:5f:
40:a9:53:33:cc:d1:d1:ec:f4:ef:2b:10:ff:99:93:
6f:d6:f4:21:a7:7c:bb:f7:00:76:8c:ab:77:fb:05:
65:d6:2e:16:ff:d2:6d:cf:9a:62:f9:df:df:bb:0a:
68:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:9C:DA:5B:3F:55:53:84:89:3D:89:F1:CA:E4:D1:24:81:9A:EB
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:68:84:2e:a5:3f:dc:1f:8b:2a:98:ec:63:86:cb:3a:f4:40:
3f:ad:c3:c1:7e:fd:2e:cc:dd:20:ad:ef:aa:c6:f8:c5:d9:57:
84:c7:1a:d7:aa:02:bf:ec:72:34:7c:ab:c4:c4:ec:1f:6c:22:
7e:d2:32:25:95:e3:4a:df:19:0a:1e:b6:72:eb:a7:68:74:6a:
4a:3c:5c:10:be:78:c6:3a:ec:a5:38:f3:7d:e3:10:46:8b:df:
7f:bd:23:09:4a:ca:04:d6:8f:f8:14:f2:e8:74:82:42:77:10:
a2:be:b4:63:3a:23:f2:14:d0:54:95:55:19:89:04:e5:7e:a1:
68:03:b6:c9:5f:82:06:28:65:dd:8a:30:17:ff:d0:f5:b9:44:
fd:f9:7b:83:23:c2:97:43:36:4d:6a:32:e0:fe:d8:7c:6c:c6:
f7:5f:61:30:7f:e2:10:07:a4:79:39:96:63:38:ec:59:e7:a8:
6e:bb:77:c8:78:35:2e:69:f7:5a:a2:9c:21:a0:ac:85:89:fa:
f7:86:9d:47:2f:9d:4d:09:4f:25:57:99:f2:c8:23:9d:9e:cc:
ff:fd:bb:a7:ac:d8:f6:b0:fa:fb:4c:9e:c3:1c:6a:e5:83:53:
0f:f0:ee:16:b2:69:ea:c1:9a:59:0a:0c:a0:30:7c:2b:f1:63:
c7:40:37:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJIE1kJ1fM1ScZC3LKN1OuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjUwODA4MTAwMDUyWhcNMjUwODA5MTAwMDUyWjAzMTEwLwYDVQQD
Eyg0NmQwOWNkYTViM2Y1NTUzODQ4OTNkODlmMWNhZTRkMTI0ODE5YWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQvZzA/6pMoWy3mDfK4RCNCpUunj
o8cimDQvFKdyuf8bzWorLRkaCm+ncZqi08Ra0cmyCwczDachve4dx4F6i4kddLl1
21dzzExQJHXbDO9uwZhYMswDYeJPp1iieI4RQGWx7lok5AaLQfkBolqGeJUFVJ1/
L1rF2pJQELnCM+acVAqcsNPZ6tSGCGjkvMYvIT2Al208y+qYX1hQCGpjHLMS2IOG
KSy/dPH+O32VRa83fPqvn+7MrF4JA8mi1yniBca+pvrlwI78uxkxsJ0Mil9AqVMz
zNHR7PTvKxD/mZNv1vQhp3y79wB2jKt3+wVl1i4W/9Jtz5pi+d/fuwpoLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbQnNpbP1VThIk9ifHK5NEkgZrrMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA02iELqU/
3B+LKpjsY4bLOvRAP63DwX79LszdIK3vqsb4xdlXhMca16oCv+xyNHyrxMTsH2wi
ftIyJZXjSt8ZCh62cuunaHRqSjxcEL54xjrspTjzfeMQRovff70jCUrKBNaP+BTy
6HSCQncQor60Yzoj8hTQVJVVGYkE5X6haAO2yV+CBihl3YowF//Q9blE/fl7gyPC
l0M2TWoy4P7YfGzG919hMH/iEAekeTmWYzjsWeeobrt3yHg1Lmn3WqKcIaCshYn6
94adRy+dTQlPJVeZ8sgjnZ7M//27p6zY9rD6+0yewxxq5YNTD/DuFrJp6sGaWQoM
oDB8K/Fjx0A3HA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:05:06 2025 by rpki-client