Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: EI41m405ceZnwOLcq59+ReDq2aRRS79WbvsRzaLc3zw=
Subject key identifier: A3:B2:6F:43:9F:B7:62:DE:48:FD:D0:DD:9A:E7:7F:88:53:E8:60:43
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 019889FBFAF26D4332217F5EFB846CB72378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 13F4
Signing time: Fri 08 Aug 2025 14:00:48 +0000
Manifest this update: Fri 08 Aug 2025 14:00:48 +0000
Manifest next update: Sat 09 Aug 2025 14:00:48 +0000
Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: LTT14tQlZmhgxSqr3zNVpdJwnTLy3IfLuwl+cBE/msk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:fb:fa:f2:6d:43:32:21:7f:5e:fb:84:6c:b7:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Aug 8 14:00:48 2025 GMT
Not After : Aug 9 14:00:48 2025 GMT
Subject: CN=a3b26f439fb762de48fdd0dd9ae77f8853e86043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:d9:2e:58:f2:7a:3c:56:c4:5b:aa:80:d4:
a4:11:55:ce:d1:f8:ea:f6:e2:37:a9:69:77:62:7d:
3a:d3:38:b9:c8:36:ca:e9:41:2c:5c:05:9e:74:95:
84:aa:4a:34:8d:c4:90:62:d4:50:79:13:ab:59:7b:
7a:42:a7:f1:5a:b1:32:06:fa:f0:be:44:d7:be:15:
81:2a:5d:28:fa:80:5a:58:ab:d8:25:87:89:9e:4b:
8f:13:b3:6a:3f:fd:1b:90:a8:85:41:90:47:30:79:
bb:4c:5e:06:7b:a1:9f:a7:1f:44:7a:f0:f0:32:51:
80:d1:4a:3d:90:28:07:8e:97:99:27:17:c4:f5:89:
0f:1e:a0:25:4c:59:57:28:89:89:f6:a7:a7:3e:6e:
3b:df:e7:20:0c:b2:cd:87:0b:a6:92:d0:48:83:78:
ac:00:be:bf:99:90:56:70:37:d5:8c:8e:ec:5f:6b:
0a:81:cc:a3:18:d2:69:79:51:50:4c:77:e5:88:15:
a4:f4:91:5b:a9:3f:0e:08:68:20:ed:a1:db:41:4c:
02:09:24:22:50:e7:1a:09:ee:f0:7d:63:b6:d9:94:
e2:db:2d:90:4b:46:e9:24:1b:13:e5:9a:09:d9:f9:
fb:ea:7e:93:af:17:8c:70:25:0e:66:a7:ca:a7:f4:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B2:6F:43:9F:B7:62:DE:48:FD:D0:DD:9A:E7:7F:88:53:E8:60:43
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:91:42:0f:78:f4:99:ba:91:d3:f8:0d:39:92:7f:4d:3c:f5:
b6:e0:40:b0:e1:b8:86:d8:37:46:0e:0f:83:3b:53:b7:57:c4:
0d:9c:10:5c:be:91:f2:8b:64:7e:ce:89:82:0e:d4:2b:b7:7f:
94:35:64:36:e6:cf:45:a6:86:6f:db:e3:87:fa:8b:7a:49:e8:
e5:c5:b1:5c:32:5b:e5:a6:b4:8c:86:5c:c3:ec:89:5c:35:0b:
30:25:75:52:0c:07:69:bd:09:cf:68:c4:0f:71:bb:ca:af:2e:
f7:5a:d6:9a:84:5d:06:9f:c1:f8:f4:5d:3f:7a:8d:79:6e:25:
35:25:36:97:70:00:e2:ea:fd:49:f0:7c:34:49:1e:97:a6:40:
ef:86:25:ab:fb:66:21:97:e4:49:ca:59:6a:c1:f5:97:c9:eb:
4c:76:b7:bd:e5:d8:3a:2a:88:55:21:41:35:50:97:5f:a5:2f:
42:80:c3:57:c3:b4:96:57:c8:ce:f6:11:51:f6:b5:2c:c9:5d:
f2:3a:ea:e1:44:a1:74:be:17:f6:00:3b:56:dc:90:d2:1d:bb:
2d:56:f7:3c:a7:6d:55:76:aa:43:fa:1e:ab:99:7d:4f:de:56:
72:b3:5c:2f:24:4b:b4:b9:e5:61:66:90:f2:75:1e:78:85:59:
91:98:e4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:32:01 2025 by rpki-client