
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: 0iuCBjypo4PBgFBdtSyLsTJyJ4Erusa/oCwSJTG+yJk=
Subject key identifier: 93:24:07:86:DE:D1:61:87:69:94:FD:AB:57:74:8C:44:2D:F2:F0:A2
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 019873E2EC2E3877E9BF9CF37C4A6ADB942E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0D88
Signing time: Mon 04 Aug 2025 07:01:48 +0000
Manifest this update: Mon 04 Aug 2025 07:01:48 +0000
Manifest next update: Tue 05 Aug 2025 07:01:48 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: A/u3EwK/3Cphxg5W0uCpFJY7rkJiSzlRj32b5eQWncY=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ec:2e:38:77:e9:bf:9c:f3:7c:4a:6a:db:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Aug 4 07:01:48 2025 GMT
Not After : Aug 5 07:01:48 2025 GMT
Subject: CN=93240786ded161876994fdab57748c442df2f0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:87:f2:d6:b3:87:36:7b:00:27:06:84:82:4b:
a5:aa:41:94:26:02:6b:5c:dd:ad:58:9f:3a:60:16:
19:2d:28:e4:c2:27:28:7e:d5:2a:e9:84:23:98:d8:
8e:90:87:cd:55:56:af:69:ae:0d:15:df:85:dc:88:
ab:63:d4:67:63:c6:f5:61:a6:f7:59:40:49:11:d0:
17:ac:ad:d5:d4:2b:96:ef:b9:04:39:3f:bc:58:7c:
ce:d7:e8:1b:fd:b5:07:c2:bc:f7:fa:da:ce:ba:77:
da:23:a0:e4:84:28:d4:fb:d6:34:57:ca:9f:78:76:
67:09:b2:3a:c4:43:f4:e8:48:46:d9:4d:f4:cd:ce:
dd:df:46:d1:ef:16:4d:28:13:02:fd:a2:a6:71:52:
50:da:2a:eb:b2:20:d0:3c:57:72:9a:5d:3b:29:9f:
95:77:d6:6e:1b:26:4e:01:c1:38:15:65:7f:7c:b1:
a3:7f:ec:a8:f0:7c:0a:56:aa:11:c8:24:fb:66:db:
94:49:eb:4f:fd:5a:e6:e5:91:61:fd:cb:58:2f:b2:
66:58:55:c1:a5:ed:a7:8f:8b:7d:11:78:c7:0d:43:
99:e0:2a:b0:7c:12:73:4c:30:7f:13:28:34:26:f7:
e2:17:01:a3:81:40:a0:4c:0e:8b:09:ba:a3:d1:61:
cc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:24:07:86:DE:D1:61:87:69:94:FD:AB:57:74:8C:44:2D:F2:F0:A2
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:15:d0:c8:e6:11:51:dd:90:af:ba:be:d4:a4:89:53:ca:7f:
5b:5d:7e:a2:13:32:b4:6b:21:c0:14:07:4d:55:c5:b0:67:2f:
03:0d:a1:92:58:ba:16:37:93:92:79:43:ac:99:e9:f3:56:c2:
93:3b:a3:89:7c:85:38:58:b3:24:66:1b:f4:d4:33:1e:5e:22:
84:93:05:15:3a:ba:ae:b5:11:bd:5a:6c:c7:2e:b6:9b:bb:f0:
00:36:8d:59:ba:54:e7:d7:1b:3b:ff:9a:13:29:01:86:90:63:
e0:0a:73:f9:6b:de:b3:1e:59:12:3a:d8:b8:1a:e3:df:06:47:
77:5a:f5:be:03:01:3f:4d:56:01:7b:1c:87:84:64:39:72:19:
66:c4:36:8c:bb:be:97:f3:a3:62:1d:ff:40:b8:18:e7:51:7f:
10:3c:b7:82:e5:09:28:3b:f5:08:7f:e5:f6:94:b8:cc:03:d9:
98:01:a8:15:57:f2:41:1a:c5:d6:e9:8e:29:78:b0:46:35:25:
5d:9b:bc:23:57:94:6c:82:5c:35:e9:b0:53:1a:56:0c:81:f7:
1e:2b:70:55:8f:94:23:e7:52:db:bd:1e:9b:33:ce:09:5b:f3:
f9:19:af:fa:9c:d5:38:d4:2b:1e:45:bc:0a:e3:26:70:ea:65:
9e:e3:df:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:10:31 2025 by rpki-client