Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: QZ9rAAHru4WoKVZuhjfvyhcnx5amwdLmw1RSuLyY4eI=
Subject key identifier: 7D:49:71:6F:4F:2A:C4:A1:E6:78:89:89:7F:6D:6B:40:CB:C0:EA:AC
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 01989CDE53DD9B7DDEFB87D5246D839CD87E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0D0C
Signing time: Tue 12 Aug 2025 06:01:12 +0000
Manifest this update: Tue 12 Aug 2025 06:01:12 +0000
Manifest next update: Wed 13 Aug 2025 06:01:12 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: SroRaESN8tcAZQC6gJI9klaOixzvdNQ7LY+9LpyQOWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9c:de:53:dd:9b:7d:de:fb:87:d5:24:6d:83:9c:d8:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Aug 12 06:01:12 2025 GMT
Not After : Aug 13 06:01:12 2025 GMT
Subject: CN=7d49716f4f2ac4a1e67889897f6d6b40cbc0eaac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:66:68:a5:68:73:5a:60:b3:e8:37:dc:78:
0f:1a:15:6a:4a:6c:24:f3:45:2d:bd:93:66:ce:b6:
a7:55:bf:b8:83:b8:82:4b:a2:20:82:c3:0c:54:29:
b1:6b:b5:60:61:7b:5e:6c:d7:5a:f6:e0:f3:9c:89:
ac:6e:4f:c2:4a:ea:1b:e8:01:b5:28:00:dd:f4:3a:
6e:06:7c:45:6f:e8:e6:fb:a9:2f:d9:ab:25:7c:e1:
91:83:0b:7b:11:7e:24:53:79:93:ba:04:01:45:18:
ff:84:f8:5d:4f:cf:13:53:45:64:28:01:62:21:a7:
9f:0a:04:68:72:f7:c4:41:ea:7d:c8:68:92:79:75:
36:b4:f8:8a:bb:89:4d:56:54:6f:64:51:7c:f5:8e:
b0:e1:51:ba:27:65:5b:dc:e7:5c:f7:ea:10:91:6e:
07:c0:d9:f8:cb:3e:75:19:da:4d:f4:91:75:87:a4:
ad:88:c3:58:2e:eb:14:96:8a:df:d3:94:3c:c2:2d:
65:6e:25:97:c5:0a:eb:d9:b1:0d:65:32:93:58:19:
63:e0:ac:79:cd:71:68:46:cf:d1:d5:e2:22:8b:e0:
e8:a6:58:4b:06:c4:4c:de:3f:44:bd:51:98:b6:7d:
10:63:b8:1d:6c:53:d2:51:0c:65:b0:28:50:5e:60:
8b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:71:6F:4F:2A:C4:A1:E6:78:89:89:7F:6D:6B:40:CB:C0:EA:AC
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:58:ff:5b:85:e6:8a:6c:67:fe:a7:bd:17:a5:66:52:41:97:
ab:0e:50:21:76:a0:5e:74:00:c5:4d:87:bd:13:64:02:eb:4b:
14:a3:b5:2d:88:7b:41:01:f8:00:45:65:80:a0:0f:19:f6:21:
55:02:3e:60:14:2b:a4:7b:4e:04:9f:69:f3:56:67:72:29:81:
37:a3:f2:99:10:90:2e:57:d4:26:01:b6:cc:04:60:c3:d9:09:
3f:2a:71:78:7d:1f:07:57:73:5d:ee:b6:ec:a8:d4:25:74:75:
fb:8d:3a:cf:21:c8:5f:46:34:71:f2:01:e7:ca:ae:8f:99:d5:
a6:55:5c:8c:fb:7d:87:f8:aa:d6:8b:32:e4:98:2e:5a:eb:6f:
d7:ed:75:75:51:d6:5d:6e:55:36:a7:3a:b7:89:20:b4:03:97:
a1:59:4d:61:aa:d9:a9:d0:7f:d7:c5:1e:61:80:6c:2c:fd:f2:
52:a1:cc:ac:cc:73:54:31:65:90:83:29:83:d4:a7:24:6e:4d:
e4:40:70:5b:57:f3:39:97:69:e1:0c:ac:c7:56:49:04:4c:8d:
08:40:b9:c5:83:be:00:ca:4b:92:6b:33:46:f7:98:9c:3f:5b:
57:0c:e7:3c:05:46:2f:be:75:77:93:99:d1:f4:fa:90:ee:ea:
0f:62:a4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 14:35:03 2025 by rpki-client