Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: LeuSi3emhQP4piFZfNRSe6uwnhZ22NZZK3LeLXcfEtk=
Subject key identifier: 3F:7A:FF:42:74:85:23:CB:4B:F5:66:E7:1E:C4:81:0E:E3:E5:9C:8E
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 0198D4A800647A4B3BA4FFD0ECD550FC8F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 1189
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: QxuySEJn9+g19acHazDNaNFNVDSfemc48MMLDSwGHOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:00:64:7a:4b:3b:a4:ff:d0:ec:d5:50:fc:8f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=3f7aff42748523cb4bf566e71ec4810ee3e59c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d7:59:74:58:a1:26:e4:38:76:8a:84:91:e7:
03:70:d7:59:87:12:5e:b6:3b:24:71:a5:66:7d:cf:
49:5b:89:9c:c8:b6:c2:3c:1c:68:14:3a:75:05:2d:
7a:e7:f7:54:45:8e:dc:51:0b:ed:4e:9e:62:96:bd:
4b:f2:3a:ae:4b:28:13:b3:f5:0a:10:db:bc:e4:3b:
26:14:2d:20:3b:df:72:2f:77:0c:ab:b7:53:99:4d:
b9:7a:16:79:b8:93:33:2d:6b:72:14:6f:fa:29:5e:
0c:5a:e5:b0:f6:21:6f:0c:0b:4f:4d:b2:b1:42:d0:
92:60:f6:0e:78:46:38:19:80:b8:bb:43:c4:93:a5:
0d:db:4e:c0:da:3e:db:ff:ba:5b:3c:9e:49:8d:37:
dc:a8:f1:6d:a0:b7:f2:fc:90:83:d6:ae:47:da:4c:
8d:be:57:e0:37:da:50:dd:81:79:56:5f:97:e1:6c:
56:01:bb:98:3d:de:79:74:13:98:48:de:13:2e:54:
a9:8f:c9:f5:c4:ff:c6:dd:c7:01:c1:d6:5a:29:d8:
3a:83:37:3d:9c:99:4f:60:ad:3a:6f:d3:a2:22:40:
54:2c:ce:b6:9b:b9:93:73:6c:3b:89:cb:bf:85:e5:
6d:50:b8:13:8b:cc:e0:72:7c:f9:48:fb:fa:2e:c8:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:FF:42:74:85:23:CB:4B:F5:66:E7:1E:C4:81:0E:E3:E5:9C:8E
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:db:3a:f3:c8:e6:c7:36:14:2c:05:da:e3:63:c7:02:c1:04:
60:95:af:d7:b8:b2:5b:52:8b:01:d1:e8:dd:d9:6d:4c:84:3f:
3d:d4:9c:ab:b5:d3:67:fa:7e:89:a9:17:07:0c:b4:8a:b4:45:
a1:a1:c3:6c:77:0e:5b:67:00:da:b2:0d:cb:ad:66:66:a1:78:
19:3a:dd:c2:0a:76:a2:ed:ff:a9:87:07:12:3b:74:86:a8:77:
f8:f7:3b:32:4e:85:62:9d:d0:3f:cf:f0:84:b8:f4:13:21:79:
fa:63:9c:05:9a:51:24:a7:f3:8d:b8:13:a8:e2:86:1a:4b:54:
30:4e:d3:a5:f5:38:26:17:4f:7b:13:15:54:b1:0c:f9:e3:6e:
3d:e8:95:70:06:02:b5:c2:c4:8b:98:59:bf:50:23:b6:5c:40:
f2:4f:ab:58:fb:cb:9f:e4:d9:ba:1f:1b:d5:7a:00:90:9b:17:
41:b3:07:46:91:5f:0e:48:3f:3a:d1:6c:ce:cd:ae:1e:2c:79:
8c:29:a8:c2:49:51:90:f2:64:e5:9a:4c:7f:41:9a:19:45:3b:
6b:8f:6a:95:27:32:81:ab:31:f0:d3:10:02:2a:e8:8f:c3:62:
a4:e2:14:0d:0c:75:42:90:c4:5b:42:37:8c:0f:c2:c2:47:9a:
2d:c2:17:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqABkeks7pP/Q7NVQ/I9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjFjYjgyODkwOGY0MzA3NDllZTNhNWYyYTYyZGU1Zjgy
MmY3ZDEwHhcNMjUwODIzMDIwMDM2WhcNMjUwODI0MDIwMDM2WjAzMTEwLwYDVQQD
EygzZjdhZmY0Mjc0ODUyM2NiNGJmNTY2ZTcxZWM0ODEwZWUzZTU5YzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyddZdFihJuQ4doqEkecDcNdZhxJe
tjskcaVmfc9JW4mcyLbCPBxoFDp1BS165/dURY7cUQvtTp5ilr1L8jquSygTs/UK
ENu85DsmFC0gO99yL3cMq7dTmU25ehZ5uJMzLWtyFG/6KV4MWuWw9iFvDAtPTbKx
QtCSYPYOeEY4GYC4u0PEk6UN207A2j7b/7pbPJ5JjTfcqPFtoLfy/JCD1q5H2kyN
vlfgN9pQ3YF5Vl+X4WxWAbuYPd55dBOYSN4TLlSpj8n1xP/G3ccBwdZaKdg6gzc9
nJlPYK06b9OiIkBULM62m7mTc2w7icu/heVtULgTi8zgcnz5SPv6LsgEQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD96/0J0hSPLS/Vm5x7EgQ7j5ZyOMB8GA1UdIwQY
MBaAFLMhy4KJCPQwdJ7jpfKmLeX4IvfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYt
ODdmMzQxODg4NTYwLzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jY2FhMWEtOWRhYS00NGI4LTllMjYtODdmMzQxODg4NTYw
LzEvc3lITGdva0k5REIwbnVPbDhxWXQ1ZmdpOTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnds688jm
xzYULAXa42PHAsEEYJWv17iyW1KLAdHo3dltTIQ/PdScq7XTZ/p+iakXBwy0irRF
oaHDbHcOW2cA2rINy61mZqF4GTrdwgp2ou3/qYcHEjt0hqh3+Pc7Mk6FYp3QP8/w
hLj0EyF5+mOcBZpRJKfzjbgTqOKGGktUME7TpfU4JhdPexMVVLEM+eNuPeiVcAYC
tcLEi5hZv1AjtlxA8k+rWPvLn+TZuh8b1XoAkJsXQbMHRpFfDkg/OtFszs2uHix5
jCmowklRkPJk5ZpMf0GaGUU7a49qlScygasx8NMQAiroj8NipOIUDQx1QpDEW0I3
jA/CwkeaLcIX8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:48 2025 by rpki-client