Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: en77gnIwcte5hjuF27sFQdVFMQuBoRjmujjA29zumFE=
Subject key identifier: DF:20:43:B2:B6:0A:22:14:A3:7B:C3:56:72:94:E9:81:DD:85:E4:8B
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 01988F596541ACFB3C3B8178105175193691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0FBC
Signing time: Sat 09 Aug 2025 15:00:57 +0000
Manifest this update: Sat 09 Aug 2025 15:00:57 +0000
Manifest next update: Sun 10 Aug 2025 15:00:57 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: sfc3UyAfsffGgiVLO8vIOtuidcUO79GsDxS24XsY65k=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:65:41:ac:fb:3c:3b:81:78:10:51:75:19:36:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Aug 9 15:00:57 2025 GMT
Not After : Aug 10 15:00:57 2025 GMT
Subject: CN=df2043b2b60a2214a37bc3567294e981dd85e48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:6a:fd:7a:95:6b:0f:64:de:ca:45:3f:ee:
2c:db:f1:72:19:29:9b:eb:44:30:6b:3e:bd:14:de:
09:cd:96:22:bb:e6:d1:da:9d:62:1d:c9:33:8a:09:
81:71:c5:5a:95:2b:8a:14:17:45:73:75:2f:a0:00:
1f:22:93:ab:7c:fe:29:6e:c4:4c:ca:d3:15:35:9e:
61:e5:c9:5c:21:b9:28:99:ea:f7:55:6b:09:82:39:
15:3c:60:cb:95:1e:b5:0e:b9:45:d7:3d:9b:93:ff:
80:7c:9f:16:fd:a2:73:56:4e:66:49:1a:5f:82:44:
cc:33:09:65:a2:4e:38:8a:c4:54:be:db:26:fb:f1:
50:26:97:cd:8e:5f:9d:18:7e:73:3d:ca:7e:01:83:
a7:4f:81:d9:0f:16:1b:94:e2:af:c8:80:ac:fd:79:
8b:0c:b0:f7:8a:b0:a2:3d:8e:ad:c4:ba:aa:6f:da:
f5:53:0b:3e:d8:fc:9f:b9:ae:6f:a7:16:4a:dc:5a:
ff:2a:99:8c:79:e0:73:7e:5b:31:ac:11:53:c3:42:
a9:13:6c:7d:0b:65:33:95:25:30:fb:f4:c2:88:7d:
cc:c1:b8:3e:0f:29:64:5e:40:73:5e:80:35:e5:32:
53:62:5b:c2:18:2d:d7:69:9f:1d:4e:e8:30:ee:a1:
b8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:20:43:B2:B6:0A:22:14:A3:7B:C3:56:72:94:E9:81:DD:85:E4:8B
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:e3:10:df:97:72:6a:ef:76:d1:ea:10:cc:16:9a:7d:13:
14:7f:20:b3:be:5b:d9:fa:22:1f:13:be:d3:e4:81:91:bd:60:
e4:f2:6f:01:57:28:73:d9:ba:d5:f6:5b:40:bd:63:8a:9b:88:
ae:21:c9:0c:55:77:f4:f7:ff:1a:e9:d9:32:90:24:bc:44:41:
62:0a:cb:2c:15:ac:02:83:ab:26:0e:e5:c7:c6:ce:41:63:9e:
9e:bd:d6:15:5d:ca:07:58:c5:1d:96:1b:db:d9:ca:c2:a0:a6:
be:2f:3c:fb:ca:e2:56:8f:b4:92:a1:f2:83:32:f2:d5:c3:2b:
55:5b:2f:cf:1d:c5:0a:85:bf:02:af:29:72:7d:33:2c:61:a1:
33:e2:49:b3:df:a9:ac:61:74:c2:84:36:3d:8f:dc:e8:e6:2e:
d6:a0:90:ce:1a:49:7a:20:7b:6e:9d:e1:86:20:75:3e:24:c5:
de:79:01:3a:86:4c:97:d5:83:37:84:12:2a:50:67:af:86:63:
3d:58:66:5c:cc:b0:04:00:a3:2d:20:ad:62:88:c0:1d:fb:ff:
0d:c0:b5:84:22:96:5c:ee:3e:0a:8e:ca:0a:11:17:43:f6:26:
38:dc:ac:27:84:9b:fa:57:8f:6b:50:dc:6b:ae:07:8d:de:93:
76:b2:6c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:32 2025 by rpki-client