Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: U/rpS3s9hYC1UfSFjE0aDNJSlB3tUFbjCR57uh/t0Ak=
Subject key identifier: 14:E9:41:E9:FD:4E:94:2B:D7:6B:3B:20:68:D2:22:70:28:29:DA:D2
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01976F2C5D4FA8A85B0003A8764946165687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0D01
Signing time: Sat 14 Jun 2025 16:01:07 +0000
Manifest this update: Sat 14 Jun 2025 16:01:07 +0000
Manifest next update: Sun 15 Jun 2025 16:01:07 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: GGb62P/zuw+ArBO7ccW48T7eyzgZrVnA4VOfy7iM4Es=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:5d:4f:a8:a8:5b:00:03:a8:76:49:46:16:56:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jun 14 16:01:07 2025 GMT
Not After : Jun 15 16:01:07 2025 GMT
Subject: CN=14e941e9fd4e942bd76b3b2068d222702829dad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:54:e5:0c:d0:06:4d:d0:2a:cd:7b:fa:6f:
a9:ac:6b:db:c3:60:f3:eb:bc:67:7a:a1:ae:c6:1c:
34:d8:d2:5c:b3:fd:00:5b:11:61:e2:1e:ab:98:ed:
91:85:87:54:27:98:b2:94:17:67:1a:cd:4b:1c:16:
5f:15:77:45:36:ec:22:c3:ac:8b:6b:e6:cb:19:e9:
8a:8a:6e:02:84:a4:d8:dc:44:f8:df:1f:16:27:0a:
1d:2d:47:98:73:96:94:e6:8d:ba:47:40:38:ef:01:
57:80:d2:ce:ac:32:a1:f1:67:eb:e6:57:78:22:62:
ab:45:5d:b3:c8:b9:ce:c4:13:83:cb:51:97:18:39:
ec:6b:e4:dd:ce:09:69:19:d7:54:ce:55:5d:17:5c:
53:f7:54:cc:56:45:24:e0:34:e8:52:31:46:ca:7e:
ca:16:0b:4e:a3:2f:78:14:71:dc:fe:9b:81:75:71:
d1:6c:46:94:f7:19:f0:03:d5:fa:a1:6a:ce:b2:2d:
a8:50:38:18:6b:f2:69:31:b1:37:a8:18:02:63:46:
3b:35:fa:55:91:55:17:4b:02:c5:99:b0:8b:ea:dc:
33:9e:46:6d:ac:8c:90:58:a1:e5:15:e9:54:79:ef:
5b:e0:a8:37:7f:11:06:7b:4f:b0:4c:e4:76:6d:6b:
42:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E9:41:E9:FD:4E:94:2B:D7:6B:3B:20:68:D2:22:70:28:29:DA:D2
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:56:ca:68:c3:eb:a4:4b:5c:a1:fc:dc:02:53:c5:43:05:18:
b2:fd:fb:0f:9b:12:2b:11:36:b8:26:1c:20:7f:f1:b9:0e:a0:
3b:b0:bb:2e:1a:8c:bd:96:07:12:30:25:24:56:1e:7b:b6:8a:
64:84:2f:a0:f6:e4:7a:c7:d5:5f:f9:ef:94:64:28:e7:b5:e4:
fb:73:ef:76:28:44:cf:e8:2b:f0:a9:ca:85:19:6d:b9:d8:36:
28:84:0f:25:c9:b5:10:95:75:06:4b:ae:d3:9a:8c:eb:48:2c:
de:70:f1:90:5f:65:31:e0:1a:bc:bd:f3:5b:39:fa:3d:e2:c0:
b7:fb:1b:1d:fb:c4:ed:8e:04:16:0f:b9:90:65:14:2a:2c:7e:
bd:43:d4:3b:f8:4e:2c:b3:20:ea:b4:fe:8d:8e:c9:1d:93:9b:
2d:ff:87:db:18:b8:ed:60:d9:72:65:4d:e4:b2:e3:cd:a9:7f:
96:60:55:9f:fd:93:1c:4d:3d:96:e3:f2:0d:d9:36:7b:7c:09:
28:4c:7d:a6:3f:a9:e6:4a:94:78:91:5c:3d:63:4e:55:8d:e8:
ac:5a:9f:b9:c8:66:7b:b4:ae:74:5c:5a:ef:65:cf:a9:a7:b4:
c0:f2:0c:b3:8d:44:ad:cc:c3:8c:40:ec:e4:fc:cb:01:66:c0:
bc:73:4b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:29:23 2025 by rpki-client