Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: ipdTaiVffyoSmd9Icaffd6j6Dyc1CjlztKyFkvlUENE=
Subject key identifier: D8:9C:81:07:3F:3F:F9:86:93:2F:35:FC:3A:A2:54:98:02:D9:39:DE
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 0198D5BC0587664034B945046AB8720C923B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0D30
Signing time: Sat 23 Aug 2025 07:02:05 +0000
Manifest this update: Sat 23 Aug 2025 07:02:05 +0000
Manifest next update: Sun 24 Aug 2025 07:02:05 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: 9K/HU9du6lO7zQyQ9T8hsHFtVx19pNT9hWsj+A+6htw=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:05:87:66:40:34:b9:45:04:6a:b8:72:0c:92:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Aug 23 07:02:05 2025 GMT
Not After : Aug 24 07:02:05 2025 GMT
Subject: CN=d89c81073f3ff986932f35fc3aa2549802d939de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:eb:91:2b:29:da:e4:e3:d8:1e:93:78:55:
1d:86:65:0c:38:b6:93:30:b2:37:82:9a:69:c0:ce:
9b:a2:9c:e3:77:28:90:9a:78:69:2e:16:78:f8:0e:
c8:e7:2e:9d:8a:66:51:2f:9c:e6:05:be:77:c7:06:
35:cf:8d:d5:88:8c:4e:3c:59:bc:43:f3:e9:4c:07:
20:30:86:2b:79:2e:cd:78:e6:aa:f6:d0:92:9d:ff:
ff:c3:12:b3:20:b5:f3:37:b9:33:aa:b3:eb:e4:2d:
1b:ef:5c:b9:73:bc:14:52:76:a9:18:20:33:fc:d3:
2a:9b:16:63:19:7e:45:81:bd:3a:e9:ce:ae:4e:61:
a9:d2:da:96:53:85:90:aa:27:8f:82:87:71:fd:11:
44:15:5c:ed:33:90:25:6a:cf:d7:e3:b8:f6:ae:12:
c7:4a:54:8c:df:a7:fb:c7:c5:46:c6:f9:83:91:34:
de:fc:48:f1:f1:a1:aa:30:af:15:67:59:b0:ab:56:
22:0a:83:36:46:7a:52:80:12:39:a2:ce:95:a7:a5:
76:3a:aa:60:89:e8:e0:ab:41:f6:6e:96:f8:fc:f3:
b1:c4:13:58:ab:49:42:20:49:48:b0:74:3e:b1:da:
8e:cc:ff:4d:d1:99:c2:17:8f:8d:5c:4f:10:07:dd:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:81:07:3F:3F:F9:86:93:2F:35:FC:3A:A2:54:98:02:D9:39:DE
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3e:8c:44:d1:d4:25:71:77:72:d8:1a:f3:78:a8:79:3d:56:
97:25:26:80:62:28:72:32:cd:26:48:5c:44:ab:10:e3:a0:2a:
36:5f:2c:02:d6:86:e4:58:a6:1f:51:5a:30:2b:e1:3b:aa:e5:
53:67:11:9b:d2:4a:09:0a:ac:3d:53:97:0e:15:c5:b2:af:4f:
9b:e5:06:d5:62:8f:4d:8b:61:59:c8:26:5e:d2:f7:c9:8a:2a:
a0:12:ca:3b:70:67:87:44:23:0c:59:46:aa:0e:15:64:51:ce:
68:4d:cd:c8:1d:cd:37:16:d1:b3:4b:27:bf:13:ad:91:19:17:
e5:3a:ac:a4:9c:3d:17:e7:b9:ea:e9:20:ec:9d:d0:16:36:53:
46:ea:10:16:e0:87:b8:58:00:cb:23:28:19:ae:47:00:f0:76:
55:9e:13:62:60:28:e6:27:36:16:98:26:74:d4:ba:1c:17:ca:
92:f5:42:3a:4b:96:73:ce:87:a1:3b:18:b8:7a:6a:a1:94:47:
26:c2:3f:2d:df:98:af:27:2b:75:07:3e:cf:b1:42:ea:fd:1e:
03:ab:80:51:45:7c:1a:d8:01:f2:28:6d:53:09:9a:38:03:3e:
8e:c9:50:94:a0:28:39:7c:e2:ee:c9:ce:07:24:73:6b:4b:97:
66:8f:5f:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvAWHZkA0uUUEarhyDJI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGY1NTUzNGUzOGVhYzJjMzI3YTk0MWUxYTI2YjljNDAz
MWJlMTgwHhcNMjUwODIzMDcwMjA1WhcNMjUwODI0MDcwMjA1WjAzMTEwLwYDVQQD
EyhkODljODEwNzNmM2ZmOTg2OTMyZjM1ZmMzYWEyNTQ5ODAyZDkzOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5/rkSsp2uTj2B6TeFUdhmUMOLaT
MLI3gpppwM6bopzjdyiQmnhpLhZ4+A7I5y6dimZRL5zmBb53xwY1z43ViIxOPFm8
Q/PpTAcgMIYreS7NeOaq9tCSnf//wxKzILXzN7kzqrPr5C0b71y5c7wUUnapGCAz
/NMqmxZjGX5Fgb066c6uTmGp0tqWU4WQqiePgodx/RFEFVztM5Alas/X47j2rhLH
SlSM36f7x8VGxvmDkTTe/Ejx8aGqMK8VZ1mwq1YiCoM2RnpSgBI5os6Vp6V2Oqpg
iejgq0H2bpb4/POxxBNYq0lCIElIsHQ+sdqOzP9N0ZnCF4+NXE8QB93D0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNicgQc/P/mGky81/DqiVJgC2TneMB8GA1UdIwQY
MBaAFEmPVVNOOOrCwyepQeGia5xAMb4YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYt
M2VlNjM2MmVhMzdiLzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yNWIzN2YtM2I2OC00ODRlLWIyOWYtM2VlNjM2MmVhMzdi
LzEvU1k5VlUwNDQ2c0xESjZsQjRhSnJuRUF4dmhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj6MRNHU
JXF3ctga83ioeT1WlyUmgGIocjLNJkhcRKsQ46AqNl8sAtaG5FimH1FaMCvhO6rl
U2cRm9JKCQqsPVOXDhXFsq9Pm+UG1WKPTYthWcgmXtL3yYoqoBLKO3Bnh0QjDFlG
qg4VZFHOaE3NyB3NNxbRs0snvxOtkRkX5TqspJw9F+e56ukg7J3QFjZTRuoQFuCH
uFgAyyMoGa5HAPB2VZ4TYmAo5ic2FpgmdNS6HBfKkvVCOkuWc86HoTsYuHpqoZRH
JsI/Ld+YrycrdQc+z7FC6v0eA6uAUUV8GtgB8ihtUwmaOAM+jslQlKAoOXzi7snO
ByRza0uXZo9fUA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:59:21 2025 by rpki-client