Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: C+BAEdXvzl8ktBcL3NTZITqSb5WsDZ/ScAWEU0ikB/M=
Subject key identifier: EB:85:B9:53:DF:35:47:0D:8A:97:49:58:65:52:FB:0A:64:88:F0:4B
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01987E2EF04E409448DACFDD3394444AD323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 07:01:02 +0000
Manifest this update: Wed 06 Aug 2025 07:01:02 +0000
Manifest next update: Thu 07 Aug 2025 07:01:02 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: BteTlZIu6MYAX8L8Sk1ucTu9sShbiRszFqZEHDXL3k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:f0:4e:40:94:48:da:cf:dd:33:94:44:4a:d3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Aug 6 07:01:02 2025 GMT
Not After : Aug 7 07:01:02 2025 GMT
Subject: CN=eb85b953df35470d8a9749586552fb0a6488f04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ac:00:9f:81:7d:f1:72:1d:06:9c:5a:64:d6:
56:60:be:76:9c:35:1d:2b:1b:ad:d5:9a:fb:3f:7b:
16:df:69:cc:02:8d:11:f0:18:22:7e:b9:22:c2:e2:
8c:81:1b:ef:ce:8b:95:29:68:c4:67:23:3d:79:f5:
bb:65:5a:04:52:1a:7f:94:8f:75:32:d6:f5:28:c5:
d6:54:fd:0e:b5:2c:28:b1:7f:ae:01:17:0d:90:87:
5c:64:bb:08:e2:ca:5b:34:28:c3:c1:4f:44:9f:a8:
f1:06:9a:03:47:01:8e:e8:da:83:b5:ae:38:74:eb:
6b:27:45:40:60:40:ea:9c:9a:13:f9:1c:e7:1f:61:
de:de:b5:0a:76:22:e2:b4:95:66:91:f4:1d:4f:10:
7f:22:7b:ed:04:ea:cc:eb:e1:28:55:e5:29:99:1c:
24:f7:d3:db:46:65:77:0b:f1:f5:df:35:ca:e7:d7:
23:c0:0d:56:7b:77:9b:11:54:cf:eb:90:bb:25:f7:
46:de:5e:e4:e8:af:71:c2:b5:73:82:02:04:30:64:
50:bc:7b:b3:57:28:6a:85:39:f8:86:7b:f6:f4:8f:
4a:4a:e3:2c:dd:de:27:0a:28:79:03:6b:fa:32:88:
f3:6d:ab:31:aa:9d:c1:b5:db:e2:18:e4:48:f6:15:
f7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:85:B9:53:DF:35:47:0D:8A:97:49:58:65:52:FB:0A:64:88:F0:4B
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:44:ec:74:9f:49:96:02:4a:07:1a:c2:ee:99:7c:79:e0:
5c:03:a1:eb:69:1b:bb:d9:2b:6e:f7:53:f9:7c:99:9c:26:e7:
0c:55:84:3b:8d:fc:d7:41:e7:6f:7b:18:81:f2:e5:9b:e6:ad:
db:ac:d7:c8:85:e6:cd:40:b9:f0:45:de:72:31:f8:99:43:e0:
d0:aa:6d:a3:71:5e:98:97:f4:78:2f:71:27:e4:f4:a2:af:55:
c1:52:56:d3:88:f9:20:fa:4f:7c:42:3d:28:9f:b5:86:62:40:
98:65:33:84:54:c9:81:5c:ad:b1:53:30:ea:24:b7:c0:b3:8c:
f5:fa:1e:96:f4:c6:02:cb:09:19:e6:a9:6b:83:6a:e5:09:2b:
fc:a1:f4:6d:43:71:1e:38:27:c1:b4:80:26:a9:b8:5d:0a:bb:
66:21:cb:8d:b3:d5:3c:07:84:70:e4:62:d1:01:e6:c8:78:6e:
50:64:eb:44:6f:ca:84:8a:4c:18:3d:55:f9:c4:cc:59:c2:a5:
c3:47:5f:fd:21:d7:03:26:32:4c:c2:2f:8f:33:32:be:a0:05:
f3:6e:48:6f:ba:fc:a8:9b:13:f4:ec:0f:ad:84:1e:f5:78:61:
af:dc:4d:6a:71:cf:23:fc:2d:9f:07:09:f4:11:33:8b:f0:1b:
9b:58:01:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:19:00 2025 by rpki-client