Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: 8Bbv7pJoSDkgLu6t/fzGPe/TWIuANBE5im7gw8UQwrA=
Subject key identifier: 1B:36:41:74:AD:E0:32:D6:4B:39:80:1B:09:DE:52:82:27:6B:DF:CA
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01987562E6EED1760B75771EA5460C6CC6FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1697
Signing time: Mon 04 Aug 2025 14:01:12 +0000
Manifest this update: Mon 04 Aug 2025 14:01:12 +0000
Manifest next update: Tue 05 Aug 2025 14:01:12 +0000
Files and hashes: 1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
2: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
3: 4eOCFNOBECX2Vv6GWaN08OGzQEk.roa (hash: SHh7w4LZwKE1It7Jc8tpdQbiqOFLXylf+YxEAvmby8E=)
4: J3_YLrgVTtHhaIXMn-n8MERklDk.roa (hash: a/80gAPIMgHXsY9Cw4xHsmJ3FXrDPwo71ePNixo6CIQ=)
5: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
6: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: nnrCCz0bNnAJ1TmkriyqeP2OthcpyoStj5sIRc07MuU=)
7: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
8: rHTykAFRMMhCD9nS_bBwMQq3wlg.roa (hash: N6ZZ7BxbwbLPSHJvcUQzzld1J542SpEPgWc0QrEIaRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:e6:ee:d1:76:0b:75:77:1e:a5:46:0c:6c:c6:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Aug 4 14:01:12 2025 GMT
Not After : Aug 5 14:01:12 2025 GMT
Subject: CN=1b364174ade032d64b39801b09de5282276bdfca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:34:85:2c:6f:3e:ed:b7:66:13:da:c3:a8:
50:80:7b:7b:3e:3a:db:b6:41:10:63:c5:d1:e0:4b:
3a:0f:cb:18:41:39:fd:9b:a4:29:09:a9:bf:22:53:
59:47:a4:5c:03:2a:2f:af:c7:d1:bb:33:1f:7e:7b:
93:2f:5c:83:e8:c3:74:12:03:4c:28:af:ba:0b:bb:
f8:a7:25:9c:6e:00:95:80:bf:33:f9:dc:22:82:95:
41:e4:29:5f:7c:59:7d:b4:f6:4d:b4:d4:0a:d6:2d:
9b:e6:a7:55:13:b6:e8:d5:88:4c:fb:ab:08:4d:ae:
f1:46:5c:ff:5e:41:25:db:6d:ea:0f:10:f5:fd:e8:
cd:2a:e3:11:a6:93:e7:e7:a4:92:e4:01:c6:2a:ec:
17:9f:c7:6d:18:8c:9f:f6:22:b3:8d:18:f4:50:35:
4e:b5:38:fb:f0:a6:fe:7e:b9:9c:41:29:94:54:4b:
e7:c4:c9:7a:81:b9:41:e1:05:8c:31:79:f8:5d:c4:
27:83:4a:e1:e9:91:76:df:9b:fe:92:00:52:45:b6:
b5:8a:dd:d6:f7:e9:ab:52:fe:3d:88:cb:e2:a9:94:
47:fb:fc:f4:70:58:86:63:02:ca:82:6a:ea:cf:52:
a8:fa:e4:77:52:cb:24:72:f6:24:10:8b:fe:31:f9:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:36:41:74:AD:E0:32:D6:4B:39:80:1B:09:DE:52:82:27:6B:DF:CA
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2a:29:94:2d:cb:23:ba:f1:f9:6d:14:5c:b7:45:70:14:e5:
75:93:6f:00:09:7b:9e:5d:e3:5f:41:e2:61:c6:35:ef:d9:9f:
30:5e:e9:fa:06:11:82:ee:14:72:fd:12:c7:59:d4:8c:44:97:
b4:0f:32:2a:7c:7b:cb:1e:68:69:af:49:0c:df:ca:de:30:dc:
21:42:8d:12:f6:0d:db:06:8b:11:6b:15:74:c4:95:a8:21:8e:
76:e4:de:6a:4c:ec:62:d4:a4:03:4f:99:3c:bf:72:cc:2d:29:
76:a0:e8:a3:3e:63:bb:07:2d:6d:db:d3:93:7e:53:0b:77:a7:
9f:dc:88:1f:b4:70:0b:0e:09:78:74:01:4d:7e:8e:76:a7:6a:
a8:2b:0e:9f:84:a9:17:d8:5c:05:c3:8b:0b:8d:74:c6:84:bd:
83:aa:cb:dd:f7:4f:42:bc:95:0c:ab:c3:f9:b5:ce:05:36:13:
71:71:50:ab:36:e9:ec:e6:fa:ce:a9:cd:ac:84:3a:35:96:15:
14:63:d9:da:87:23:8c:ac:19:50:22:b1:af:d6:3f:35:37:8b:
a6:5b:b1:fa:46:02:99:56:ca:c3:a3:63:6c:86:a4:4b:20:7a:
24:1f:f0:e9:d9:a3:ed:85:24:c9:11:ea:a0:c5:64:3f:b0:82:
d2:73:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:31 2025 by rpki-client