Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: KFs5gzaxZ8kP6bdIbad5h0qFQwPnfLpFzL8Crdfnv2M=
Subject key identifier: 8E:38:38:66:5B:EE:53:20:80:D6:B7:CA:3F:B8:52:D5:BC:45:3D:DD
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0197B77C0C3D386802E28E74DA750DC0ECA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: 8NPdfH0T0I7HL29z1EDZQ1o_E54.roa (hash: IT5DLYBSmqmVf9zn+vVj7yeGwJekIyH3SpOq/Npzejg=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 8CBn0iDNRDOUoVdCGEC6MwJcKPDrvtfO7GqdsnSCigI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0c:3d:38:68:02:e2:8e:74:da:75:0d:c0:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=8e3838665bee532080d6b7ca3fb852d5bc453ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d1:e3:60:1a:15:5d:58:0e:6a:08:0f:04:a7:
5d:9c:27:c4:c3:43:51:ff:de:ce:b4:36:8c:85:9a:
ad:44:a1:5f:e7:5a:07:09:ca:8f:62:b6:71:b5:03:
e3:ef:8e:68:18:c9:a0:a9:82:54:6e:d0:47:19:94:
a6:72:07:75:47:47:b8:aa:79:2f:39:c3:ce:9c:55:
a2:71:d6:93:65:92:9b:10:88:1d:4e:01:39:c8:64:
60:33:17:0d:46:19:f3:ea:b2:b5:af:0c:e9:65:a7:
b1:3c:1a:26:fe:5a:c2:fe:b3:c3:e5:ca:f7:77:90:
c1:ae:17:80:89:a4:40:18:e9:e0:92:44:23:a3:c1:
94:de:ff:cc:9b:37:cc:76:31:4e:9c:54:8e:cc:8c:
d0:97:86:f9:c9:e9:09:c2:3a:44:4c:78:cc:25:e7:
21:39:49:16:d5:62:fc:05:bd:c1:93:17:09:d0:f9:
27:46:08:5a:1c:68:7d:bf:25:96:53:37:94:91:d7:
ed:0b:f4:c7:58:47:19:03:c3:32:ae:90:f1:8e:7d:
3b:8a:6b:c1:d4:e4:d5:d7:b0:99:9a:31:bd:01:5a:
4d:fc:66:05:e0:2b:a2:04:f5:6f:a9:5c:fc:08:b3:
b3:e3:8b:0f:27:1e:28:42:ef:07:26:50:28:16:8a:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:38:66:5B:EE:53:20:80:D6:B7:CA:3F:B8:52:D5:BC:45:3D:DD
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:99:4c:e9:5e:c0:65:b1:51:21:8d:d4:7d:7b:21:10:be:90:
1e:be:cf:cf:56:f3:eb:2f:53:41:39:6a:c5:08:a8:17:78:e3:
7c:ac:3a:ec:7b:08:60:e0:99:fd:05:fc:44:5a:99:4e:62:fe:
1e:ba:8a:34:2d:9b:38:f4:6e:ae:51:c0:35:83:22:59:f1:86:
9f:6b:54:48:de:a3:c9:08:e6:5e:d1:7f:71:92:f6:bc:93:2b:
78:c3:93:4e:f1:9e:fe:94:b7:7c:13:df:ca:bb:21:f9:9e:82:
30:0c:7c:d6:1e:96:19:5d:35:1d:70:c7:db:68:59:30:9b:fa:
a9:80:f8:29:46:2b:42:52:45:a7:15:de:9d:fa:39:53:4a:e2:
1d:f5:ab:31:72:e2:b8:09:b6:43:2c:c2:83:38:94:19:67:33:
60:a8:ae:33:f4:6b:d6:98:de:48:83:ff:ad:d5:6c:fd:53:67:
2d:75:97:07:e6:5e:92:70:a0:62:28:7d:1f:f8:a2:69:5c:3b:
f9:01:8b:d5:16:06:b5:6b:95:0e:f9:60:ac:0f:fc:61:b1:1b:
a5:3c:c5:3c:32:d6:66:3e:f4:5b:a1:44:7b:1d:a9:0e:fb:b6:
ee:ab:70:0e:70:dd:9c:70:a8:af:c6:f1:ce:e0:08:7f:1f:08:
ad:6b:2b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:19 2025 by rpki-client