Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: IFqqX0y9R/ThVDwXNTYBALn/qslhlNa6LllZFlGj4tk=
Subject key identifier: 0E:CE:CE:E6:7C:B1:9D:86:48:D5:B1:07:2A:DD:CB:E1:35:69:BF:C0
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0198D4A782A391D18A4AAA0C61EA1FEB54F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 02:00:04 +0000
Manifest this update: Sat 23 Aug 2025 02:00:04 +0000
Manifest next update: Sun 24 Aug 2025 02:00:04 +0000
Files and hashes: 1: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: 3YtnH2QHO4VcPZPMXRl3SaLs8GSNysPqVoq1NfCtEw8=)
2: xEp6XmkmNbTybu1XUwMmDt6_9jE.roa (hash: cZqbPTueBj9vCDYnLlC1UgUveS09KimRo59Frnm2fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:82:a3:91:d1:8a:4a:aa:0c:61:ea:1f:eb:54:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Aug 23 02:00:04 2025 GMT
Not After : Aug 24 02:00:04 2025 GMT
Subject: CN=0ececee67cb19d8648d5b1072addcbe13569bfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:d1:92:1d:aa:00:ed:52:f6:51:a6:e3:d6:
29:b9:47:54:67:32:af:a7:18:b2:f3:8c:a9:3c:c0:
57:3f:8e:39:87:97:fc:f0:26:bb:8e:b8:c0:35:ed:
eb:88:be:80:26:a3:d5:1c:56:a6:3c:05:26:38:fe:
60:b4:cf:cb:92:04:3d:d5:9e:88:de:f9:30:ff:3c:
b5:a8:8c:ba:b1:bf:b2:e2:22:d9:96:c1:63:72:7d:
48:1b:58:68:24:6a:aa:fa:1d:99:80:46:4b:6c:0f:
99:c2:2b:ae:ad:15:b2:83:84:00:27:9b:76:9b:c8:
4c:f9:2f:4e:f3:21:f7:fc:58:a0:34:a8:5b:40:d8:
3c:42:62:f7:77:2b:27:bd:98:40:53:7f:14:79:4b:
a8:22:b6:6f:0d:74:57:2c:32:14:88:16:59:44:b9:
2f:ac:d7:29:19:dc:09:f6:80:17:82:b0:29:27:da:
e6:d8:32:4a:2c:af:dc:b5:18:26:0f:05:8d:93:27:
db:73:c8:ae:ef:48:1c:af:75:cc:07:4a:82:43:3b:
99:dd:ff:97:b7:5f:96:b6:98:f3:3c:10:1b:f8:69:
64:b7:c0:6e:44:6b:66:18:59:a2:5a:b9:55:d4:14:
60:48:03:86:8e:7c:ae:38:f5:f4:1b:5d:cf:6d:02:
06:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:CE:E6:7C:B1:9D:86:48:D5:B1:07:2A:DD:CB:E1:35:69:BF:C0
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:22:5a:d7:74:b3:f6:57:68:c8:99:c6:6a:a6:aa:ac:43:68:
6d:6d:c0:f9:3e:60:2a:04:b1:3d:bb:f2:0b:34:0e:eb:b4:56:
b9:19:f0:9c:c9:68:98:3c:18:77:79:82:83:da:7a:c0:9c:eb:
68:ca:eb:78:b6:c2:53:ba:ab:3c:34:44:2b:91:29:a6:80:ae:
cb:de:1d:f2:02:a5:ad:01:5d:ad:f1:23:e9:d5:af:fb:9e:e7:
21:0d:03:bb:6f:c4:8c:de:94:8c:9f:e7:ab:09:52:ed:87:86:
83:67:3f:7a:15:6f:42:94:5b:4b:d8:af:cf:a8:5e:ac:7b:aa:
83:5b:bc:48:95:42:99:52:74:96:8a:60:49:2d:4b:57:d4:19:
6a:31:a7:92:58:71:ff:c5:15:69:58:d2:2d:5e:c5:2c:be:a3:
82:62:aa:4b:71:58:44:43:f1:0a:82:ba:dd:03:9c:0d:6e:79:
fe:e9:c0:9c:10:ca:7c:71:1a:a8:3b:2a:1a:44:3b:14:b5:c1:
9e:9e:b1:3c:e5:39:1a:02:9d:9f:0f:c6:23:b0:fd:77:5e:f4:
ef:f4:9c:c1:25:64:5b:01:bf:4b:8a:9d:6b:43:2a:a5:a7:9a:
7f:be:3d:5d:a6:43:2e:b8:48:1b:8a:1f:42:d2:9b:36:5f:8d:
b3:ef:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:33 2025 by rpki-client