Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: WgC3e99k7y/I3q25FniEtpTG8/7T50TI1NNHtV2lS9k=
Subject key identifier: 6D:16:79:1F:2D:1D:F4:54:F8:F2:3D:8C:0B:48:C2:C8:5D:E7:64:D0
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 0197B6D73E58BCAF48F3F9A8FEE529F843E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 10F5
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: jabYpzaRH/56tT9gK77fYc4/01xjGCSsdUUi2MzoN5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3e:58:bc:af:48:f3:f9:a8:fe:e5:29:f8:43:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=6d16791f2d1df454f8f23d8c0b48c2c85de764d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:8b:41:f9:cd:7f:b0:31:de:06:ce:d6:f2:
06:ee:8e:a9:c8:f2:51:7e:b6:b1:ff:aa:8a:06:b3:
6e:a8:48:8b:97:27:65:1f:95:9f:f0:f4:19:6c:27:
01:b3:cd:fb:37:5c:40:9a:07:cc:07:0f:d5:63:a7:
8f:b8:a9:5e:04:03:6b:05:20:e6:39:9e:ce:60:f0:
41:2d:e6:2f:98:55:bc:e8:e8:f5:3b:7d:df:fb:53:
c2:69:70:5d:86:0a:3b:cb:88:89:a4:df:dd:9e:19:
3c:f5:bf:46:e6:b8:17:ac:31:e3:f5:f7:33:c3:c6:
22:c3:af:d5:21:12:a4:ea:b9:44:60:e3:ea:6f:bc:
2d:a0:0a:2e:4b:cf:fd:99:df:31:6e:43:6c:48:14:
af:42:46:1b:4c:fe:4b:80:eb:99:de:76:98:f1:7e:
97:cb:3d:7c:0a:06:89:e6:73:18:0e:ea:af:ca:a9:
20:60:2f:a7:41:1c:78:ee:01:9e:17:a6:18:94:fb:
9c:bc:f9:b8:55:16:68:77:80:aa:8b:1d:20:5f:43:
9b:18:d6:a5:26:48:28:be:9b:bc:69:0a:22:44:ad:
f1:fd:7c:1c:b7:05:b3:ef:2f:62:41:b0:51:ca:ca:
ab:93:43:f9:43:ed:c2:af:ac:c3:d6:1b:c8:29:46:
b3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:16:79:1F:2D:1D:F4:54:F8:F2:3D:8C:0B:48:C2:C8:5D:E7:64:D0
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:60:bb:b7:c5:24:ab:ff:a8:22:23:10:15:73:08:62:8b:8a:
e1:35:f6:7f:f7:55:53:90:9c:3d:a3:93:48:19:ee:f4:3d:b3:
4a:68:b1:69:46:a3:c4:c5:0d:af:b7:75:57:5c:57:97:2b:d9:
88:c0:ac:27:e7:ac:b8:54:2c:e9:c4:62:dd:78:6f:01:4d:ef:
9c:2f:1a:2e:e6:49:35:1b:50:c5:87:26:1b:18:16:a5:81:cc:
2a:7f:36:0d:3c:6f:5b:9e:d6:e2:f6:9e:c8:b4:d6:e3:d4:62:
ee:9e:5f:8a:b5:64:0f:7c:b6:df:43:62:f5:de:2a:0b:3d:c6:
5b:cb:f2:2d:67:b9:d3:43:0f:cb:ae:5c:1b:67:7e:20:5c:b7:
ff:35:63:7b:d3:f7:bd:59:a6:bc:79:74:e7:d2:36:59:53:32:
e3:b0:9e:d1:24:c8:13:84:da:6f:11:a7:41:60:f1:48:3a:99:
9a:cd:97:43:62:26:9d:20:55:ba:c7:b9:7a:2c:bc:70:aa:24:
1b:d8:fa:e9:ba:59:6b:5a:0a:1b:05:98:a3:1b:7a:2a:cc:2b:
b9:9b:7e:b1:1b:97:af:04:8d:e0:f9:2f:b2:2c:66:18:91:d3:
3a:55:a2:29:9b:7d:c7:9e:d0:b1:07:c0:37:f1:ce:06:fe:25:
aa:fe:24:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:32 2025 by rpki-client