Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: 7K99WEC6+b1LMtCXyTHMKXeBWfNkUITT25FXJivaW08=
Subject key identifier: A1:43:BB:8D:86:49:52:82:F2:04:72:0D:AA:29:1B:03:FE:11:D9:D8
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 01989336BC68AD1CF668E06A0ED9BB25BD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 0204
Signing time: Sun 10 Aug 2025 09:01:34 +0000
Manifest this update: Sun 10 Aug 2025 09:01:34 +0000
Manifest next update: Mon 11 Aug 2025 09:01:34 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: 1crYGrb4R1xFsBkQmMcSQ0zdfhn8v9pSIp7WvMS9aXA=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:36:bc:68:ad:1c:f6:68:e0:6a:0e:d9:bb:25:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Aug 10 09:01:34 2025 GMT
Not After : Aug 11 09:01:34 2025 GMT
Subject: CN=a143bb8d86495282f204720daa291b03fe11d9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:ac:14:ed:e5:61:c0:f1:39:ed:15:af:91:
4d:e9:c9:97:5b:64:aa:cc:6a:b4:be:2a:b8:8c:94:
45:ad:78:65:92:3e:0c:aa:e7:f4:9e:8f:ab:45:aa:
0c:b8:fc:dd:8a:fb:80:c0:1e:42:f0:5f:fb:f6:3d:
8e:e6:48:ed:a7:b2:24:2b:fb:6a:08:99:f5:6e:f2:
7b:f9:76:a8:44:3a:63:db:65:ca:51:de:d1:24:85:
b9:d2:ec:d9:fe:7f:fe:96:55:53:c3:cd:12:72:d7:
32:54:12:fb:4c:69:0d:e7:8e:3c:d6:5d:b4:e7:78:
a1:aa:b8:94:56:dc:30:95:cc:a6:81:f6:eb:68:f5:
22:f7:4a:84:77:37:9d:39:df:fb:c9:d6:d8:bb:44:
8a:f3:57:9a:a3:e3:05:20:fc:83:86:a2:99:a0:d4:
9c:db:85:d1:1c:56:92:b1:d9:c2:fe:93:0a:96:fb:
ca:69:bf:f8:f5:35:d7:58:79:05:d8:cb:51:e1:27:
62:6b:6a:91:3b:e6:c0:31:56:46:e7:f2:bd:86:f3:
53:58:12:b0:5c:38:53:c8:94:14:d4:7d:7e:4f:97:
9a:ae:43:09:e7:97:d6:92:11:0a:79:7e:4e:22:fd:
cf:47:68:c6:55:24:0a:4b:7a:ce:41:86:ec:b7:60:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:43:BB:8D:86:49:52:82:F2:04:72:0D:AA:29:1B:03:FE:11:D9:D8
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d7:42:e9:92:c0:23:7a:d2:72:72:60:c6:41:d0:25:d3:0e:
61:50:b6:c4:02:61:f8:5d:fa:58:aa:3b:f0:33:8b:51:6a:b6:
98:0f:b0:9d:dc:8a:ce:a2:78:3d:f8:29:22:88:e5:95:4c:20:
15:56:e8:67:67:55:3e:13:73:42:6b:33:ca:2b:ff:27:c0:65:
16:3a:a3:d4:e9:f1:e0:1d:09:3c:6d:5d:42:13:07:d6:53:92:
6d:b2:0b:c2:9b:a0:c4:de:63:4e:54:24:bb:d4:6e:07:36:5e:
bf:ac:2a:77:64:b8:90:6b:12:de:9f:cd:eb:71:af:6c:c1:63:
9e:0f:7e:8d:fb:77:0b:8c:d0:39:23:45:c4:5e:af:28:5b:91:
85:35:1b:32:c2:f9:84:92:82:33:54:9b:a6:42:0a:11:e6:51:
06:b8:4c:55:5b:52:a4:a0:36:31:23:0f:89:03:5f:bb:f9:48:
79:fe:01:d4:41:1c:34:f3:ca:d0:cd:90:35:79:5d:fb:dd:ff:
d5:2a:b6:5c:dd:79:b3:2c:e2:80:cd:ee:df:aa:3c:0d:2a:45:
d4:84:fd:a5:59:16:fa:96:fd:07:98:7a:4d:1c:6b:6a:91:dc:
66:9d:08:bf:e0:22:69:d2:51:d3:79:e1:cf:af:b7:b4:85:95:
f5:a9:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:40 2025 by rpki-client