Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: t3turoPogR1V8RTKTIVeq+4blhyqo+80UJN4iRjz1+I=
Subject key identifier: 08:15:B5:95:4F:83:6F:C0:4F:C1:A8:AD:D6:BF:D9:3B:3F:01:EC:D5
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 01988921530EEC293003C97AC68D7B775B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 10:01:59 +0000
Manifest this update: Fri 08 Aug 2025 10:01:59 +0000
Manifest next update: Sat 09 Aug 2025 10:01:59 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: AvhOdDFBqenr9pTCuLwoZ9h8mkKfeHph4G8wJ1PVaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:21:53:0e:ec:29:30:03:c9:7a:c6:8d:7b:77:5b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Aug 8 10:01:59 2025 GMT
Not After : Aug 9 10:01:59 2025 GMT
Subject: CN=0815b5954f836fc04fc1a8add6bfd93b3f01ecd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:9a:37:cb:99:d2:12:ce:1e:38:03:60:d9:
52:5a:77:ba:96:96:86:c0:31:60:86:08:7d:d5:3b:
2f:b0:f4:35:fd:0c:39:2a:63:37:77:50:fb:48:ce:
5d:d8:5e:5e:7c:ea:97:e7:dd:1b:79:03:68:90:ac:
34:0d:32:96:ce:72:07:49:44:ab:f7:e3:bf:24:4e:
4f:67:ea:b0:c7:e7:23:81:af:2d:5c:d4:94:df:48:
34:5c:1e:0e:6f:a2:97:2f:2a:a1:c9:d3:23:86:b0:
b7:5d:32:92:f1:29:7e:e8:c9:09:81:bf:a9:ab:51:
bb:7f:cc:54:4b:7a:d1:05:ac:9e:ad:9c:d1:46:8d:
de:83:5b:35:b8:ef:68:87:10:57:91:1d:56:dc:bf:
86:19:ea:4f:7c:b5:08:ad:8d:ba:ec:28:68:64:fa:
b5:d4:2a:61:c3:2c:6d:ed:d4:a6:9d:d4:3f:a9:a1:
7c:5a:1a:d3:a7:bb:32:f7:04:92:5a:61:fc:16:9d:
f4:dc:ec:f9:18:10:ef:e7:05:b5:98:1c:91:2c:57:
17:a4:40:21:cb:ca:17:a1:33:d0:b5:6f:94:da:4e:
96:99:f8:cc:92:ab:98:51:82:6a:e8:29:08:f8:b6:
13:7f:c8:de:4a:43:ae:f2:94:57:25:0c:a8:91:80:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:B5:95:4F:83:6F:C0:4F:C1:A8:AD:D6:BF:D9:3B:3F:01:EC:D5
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:6e:5c:2a:f5:e0:10:3b:1c:14:39:9e:af:91:29:79:49:
33:98:52:c2:03:99:67:53:2f:d0:b0:15:02:e1:57:76:0c:78:
82:ba:c5:8e:64:9a:53:2b:8d:07:70:73:db:6f:0e:7e:18:2b:
bf:37:2f:ef:03:98:74:42:cb:fd:c0:71:b5:9b:7f:e4:56:14:
eb:37:04:21:98:8d:c4:d1:d2:d9:f8:70:4a:bb:e4:66:d3:10:
9e:3d:36:0f:0e:bc:e0:99:c5:1b:29:12:b4:3d:5c:0d:c1:e8:
a0:0c:0b:1b:cc:49:7f:63:be:a9:74:1e:f8:0f:be:8b:57:e4:
5b:11:15:2a:9e:cf:fd:fe:77:8d:bf:76:cc:ed:ef:ca:96:9e:
05:fb:12:15:54:74:ea:40:fe:45:dd:72:f0:6e:21:fb:4a:b4:
a8:46:ef:6b:6d:b4:ce:36:52:7d:2b:02:54:39:39:ab:d6:c9:
3a:1d:7a:88:27:0b:41:0c:f5:76:b8:54:69:27:7c:9f:7e:92:
86:90:19:3a:30:70:ae:28:da:04:80:84:80:e3:e9:ee:da:3c:
8b:ad:19:21:9a:81:55:b8:58:53:ed:ed:c9:48:69:bd:61:a5:
67:2e:e7:5c:9e:48:29:c0:26:b5:3f:ed:a7:c7:b0:0c:80:c9:
8c:60:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:02:45 2025 by rpki-client