Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: jHXPLSWNs0iGsjq8g+XZxyKGoa6O9ed7V5ohc7U5bnQ=
Subject key identifier: 93:29:98:F1:1B:6C:B7:D6:92:49:58:39:BA:1E:5C:50:07:44:49:62
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 01977187E6AFF50F7BCCAB7542F90A4046A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0C71
Signing time: Sun 15 Jun 2025 03:00:21 +0000
Manifest this update: Sun 15 Jun 2025 03:00:21 +0000
Manifest next update: Mon 16 Jun 2025 03:00:21 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: obvCYm5STwojIlPkZSQd7dasXm6qJOQKyBSbcpFFEW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:e6:af:f5:0f:7b:cc:ab:75:42:f9:0a:40:46:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Jun 15 03:00:21 2025 GMT
Not After : Jun 16 03:00:21 2025 GMT
Subject: CN=932998f11b6cb7d692495839ba1e5c5007444962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e9:f6:5c:1e:0e:f1:f0:15:25:57:eb:94:fb:
53:fc:dd:e4:d1:d2:3b:54:39:d6:f4:4e:d6:8f:17:
0d:e0:0b:55:21:3a:d6:8c:a0:17:60:bc:9e:85:a3:
0b:af:b1:4d:1d:9d:e9:e8:25:d8:f0:f8:3b:ce:7c:
76:60:cd:ad:82:a6:d7:24:7e:d2:43:bd:da:d7:91:
1d:2f:f9:ba:9a:be:5f:dd:b7:0a:21:0b:5a:13:e0:
f0:62:dd:91:cd:fd:20:e5:ea:f6:6c:69:b8:86:8d:
aa:29:b5:64:cb:f1:16:e9:0d:f8:38:11:07:36:1d:
84:b6:aa:a2:70:3f:d1:f7:30:d3:e3:ea:4e:ff:df:
07:32:9c:47:e9:b8:ce:28:fa:76:bb:43:bc:b4:c0:
6f:30:63:36:76:9f:00:64:77:35:f8:c5:ff:68:ad:
c4:f4:4c:21:12:af:59:4c:5e:22:65:fa:5a:3a:10:
d3:74:43:67:5b:05:a4:43:9c:df:3a:fe:ca:5e:92:
5c:4b:96:78:3b:f3:df:55:c5:57:ef:ed:10:a7:14:
15:66:df:7d:ce:33:fc:81:2f:ea:2c:c5:28:8a:70:
85:89:7e:ad:b1:f6:23:be:6c:27:ec:ee:e6:2b:c3:
bb:0a:1c:7d:00:02:e6:e7:7e:39:b2:78:8b:50:ac:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:29:98:F1:1B:6C:B7:D6:92:49:58:39:BA:1E:5C:50:07:44:49:62
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:88:20:97:1c:ac:46:47:79:44:6a:39:ad:24:1a:11:e2:dd:
b0:cc:e7:6a:5c:65:44:73:14:a8:7d:2e:72:67:d8:c8:e0:4b:
f0:be:d6:78:38:07:30:5a:b7:d2:f3:ad:8b:2c:47:ae:7c:5c:
e9:63:ed:42:5a:e6:fc:ed:41:87:fe:f6:91:71:e5:0e:19:02:
e6:aa:fa:ff:67:f4:5d:1c:00:57:cd:b6:5b:34:31:10:6d:26:
91:26:0a:fb:8e:1b:4d:35:ef:08:9e:74:a2:74:fc:a2:f2:53:
4e:c0:03:5a:d4:1e:aa:10:58:45:ad:41:cb:3b:8d:86:fa:63:
b6:3d:83:7d:c0:16:29:14:10:63:06:9f:4b:6a:db:2c:1c:75:
20:e7:6a:02:ca:0b:0f:ce:81:78:11:1d:f8:fc:2d:e7:2a:4e:
9a:98:be:99:6f:17:9e:0a:97:d3:e2:d5:4f:26:92:9c:ce:42:
27:ce:db:a2:6f:f8:2b:14:ae:3f:d9:5d:a4:08:09:52:d8:7c:
56:39:92:e0:d7:88:a5:4c:37:80:ed:70:0a:ca:4c:97:28:06:
2a:1e:54:89:28:5a:1d:62:47:2f:c6:41:b1:33:20:70:91:4e:
12:22:f8:8e:f0:a1:e6:d0:e2:2d:44:1e:ae:db:de:3d:60:0d:
23:ab:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:29:43 2025 by rpki-client