
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
File: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft (raw, json)
Hash identifier: A5YWTS8vbgTDSC3Sm5vgvwGA6E6350YTG/oUkCWUaN8=
Subject key identifier: 11:80:03:A2:01:37:6D:72:2A:E2:62:BC:EF:7C:16:21:B2:B0:A5:25
Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Certificate serial: 01989712F780009AFF83EAC2F6EC728414ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
Manifest number: 1B
Signing time: Mon 11 Aug 2025 03:00:59 +0000
Manifest this update: Mon 11 Aug 2025 03:00:59 +0000
Manifest next update: Tue 12 Aug 2025 03:00:59 +0000
Files and hashes: 1: FUgWL_lEitw648dAxbpzgHtUVSg.roa (hash: wprSxLZeem8Akk4r6OWoOul/6l4o4VUD6WM3B2aSMl8=)
2: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl (hash: rLaXwrXzvJl9AUplAqNXk4S/pvujG71Wvlvm+NRBu+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:f7:80:00:9a:ff:83:ea:c2:f6:ec:72:84:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Validity
Not Before: Aug 11 03:00:59 2025 GMT
Not After : Aug 12 03:00:59 2025 GMT
Subject: CN=118003a201376d722ae262bcef7c1621b2b0a525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:5e:96:82:87:b9:fb:f5:b1:cd:7d:b4:d9:
88:a9:6c:f6:dd:4b:fe:53:0b:d5:be:f7:33:f3:b4:
05:4f:3b:77:b2:a2:1a:bd:26:8f:56:c2:ea:86:0b:
6b:e1:65:21:c3:7b:7e:7f:1b:4c:5d:f1:ab:6a:2d:
c7:31:fd:66:d9:b9:0d:d4:df:25:e1:cf:20:4f:3d:
55:56:7d:14:60:c7:9d:b3:9e:04:fd:95:bc:81:94:
b3:7e:62:3c:25:d5:1d:5d:57:93:80:07:95:d3:e8:
f2:d5:5f:6c:ab:62:f4:be:3a:65:82:d2:07:d7:16:
ba:67:a9:a2:3c:f2:b4:ea:4e:28:cd:29:f5:ea:e8:
4d:ba:a9:e3:7f:71:4e:2a:e4:eb:df:30:b0:36:fd:
18:87:92:04:79:b3:89:63:cc:1b:4d:c5:3f:d5:0a:
03:4f:bb:c0:ad:b6:98:ea:fb:1b:3f:84:75:e4:f6:
62:46:dc:08:3f:8e:d3:e8:cf:0e:14:a2:09:92:03:
02:31:a9:56:31:f9:ca:4d:b2:87:4f:41:c1:37:59:
36:9d:a8:c9:7a:d3:6d:6f:aa:a0:be:f0:fc:bd:26:
4c:5d:d0:9c:33:81:57:2f:ac:e1:76:4c:bd:25:d3:
9d:d7:30:b5:2e:9e:92:cc:83:d1:c2:7e:5b:62:0b:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:03:A2:01:37:6D:72:2A:E2:62:BC:EF:7C:16:21:B2:B0:A5:25
X509v3 Authority Key Identifier:
keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7e:1e:ed:8b:46:1a:e1:42:a6:bf:11:ea:b5:eb:aa:8c:a8:
77:5d:cb:fc:0a:d9:27:6a:d5:a5:bd:1c:aa:82:5c:65:55:13:
b9:56:d9:5c:3b:19:c8:f2:bc:5a:74:37:9e:8d:1f:f1:a1:b1:
1c:a3:38:dd:8e:62:a6:55:a8:ac:67:f2:ef:84:45:99:ee:18:
2a:4b:fc:72:bf:52:32:38:dc:64:be:ec:b6:d6:d8:cb:80:fe:
05:10:30:63:0b:1b:da:31:ce:a2:76:e0:d6:47:11:86:d7:1d:
63:75:64:0b:d1:1e:c9:77:c0:b8:eb:03:29:04:f2:45:8f:ef:
19:06:ae:0e:29:f0:01:88:e9:8b:bb:1e:69:f4:22:b0:b8:d2:
13:6b:32:ad:79:34:e8:c2:70:7d:99:33:e7:36:44:bf:3f:2d:
d8:de:53:e7:05:a7:f2:e7:af:da:9d:8d:90:98:db:55:c4:11:
a6:c5:81:7f:00:b2:17:36:f7:44:96:21:9d:9f:be:99:c1:5a:
07:98:e0:40:3e:ba:01:90:0a:ca:6b:20:79:29:07:9e:85:a8:
d7:f1:a0:5f:c9:04:ba:c0:da:a1:4e:22:c3:e1:14:ea:81:da:
f3:77:36:b1:b6:cc:72:b1:4e:1d:03:77:2d:8a:85:55:bc:cf:
7e:e8:f0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:10 2025 by rpki-client