Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File: syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier: 79Bs/enTOtPEv/Rs+gfNYlthuO1UerzSgMjrEUQI3pM=
Subject key identifier: 58:40:02:9D:EB:30:1E:76:2D:26:E2:35:2F:10:54:5E:23:28:C9:50
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer: /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial: 0199FE1051CCE4E1FCF639034AEDEA64E407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number: 1223
Signing time: Sun 19 Oct 2025 20:01:46 +0000
Manifest this update: Sun 19 Oct 2025 20:01:46 +0000
Manifest next update: Mon 20 Oct 2025 20:01:46 +0000
Files and hashes: 1: 7Vf5R0kVboHfQe1HmwZydUmPy3w.roa (hash: CSR8lVlOICslmIH5THMhkf2ZR8pm8M7MZ0mWBD2ElFE=)
2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: BznQ8XpxG9CMLxNKqMreFw8UkIiLkLNEaFv6zvnJFSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:51:cc:e4:e1:fc:f6:39:03:4a:ed:ea:64:e4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Validity
Not Before: Oct 19 20:01:46 2025 GMT
Not After : Oct 20 20:01:46 2025 GMT
Subject: CN=5840029deb301e762d26e2352f10545e2328c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:9b:84:40:62:67:f7:e7:93:75:51:51:ec:
a4:df:34:46:8e:07:6f:c0:5a:0e:d2:3c:1c:be:59:
1c:a2:69:72:d6:a2:52:ec:ba:e0:01:ea:46:70:85:
65:e4:12:3e:cf:0e:28:8e:c5:90:d5:40:e3:1c:a9:
d9:da:f8:dc:db:7e:66:19:2d:b2:a2:e2:0a:9a:9a:
74:1a:ec:0e:08:fe:54:b0:26:ba:2b:91:b8:e2:bf:
35:ff:47:93:bc:60:7e:35:95:50:4a:9a:17:ba:05:
72:55:04:3b:ab:af:09:d4:15:ba:5e:6f:d6:eb:57:
e8:f9:e9:cb:d6:ca:18:f7:5c:b8:66:4e:0b:e6:2e:
b4:a0:c9:8c:01:1c:92:2f:cc:7c:f3:3f:5c:4f:92:
c8:cd:fe:5a:37:3f:0c:bc:c7:f8:c3:df:27:c5:39:
4e:e7:44:ff:af:35:08:1f:cd:05:f1:e9:68:ce:80:
9f:f6:42:5d:de:c3:39:80:a2:41:11:39:7d:12:f8:
99:c9:55:55:27:b8:34:45:04:8e:fe:c2:42:2f:34:
b9:db:c4:bf:53:98:a3:27:66:2b:31:79:78:e6:dd:
f2:37:46:91:23:97:93:3e:00:40:a7:17:e0:63:0b:
f7:c5:57:5d:40:78:d3:d1:a1:cb:cc:e0:b4:fc:cd:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:40:02:9D:EB:30:1E:76:2D:26:E2:35:2F:10:54:5E:23:28:C9:50
X509v3 Authority Key Identifier:
keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:8b:f0:27:8a:a9:11:05:e2:6c:a6:dd:86:2f:03:c6:b9:1b:
01:35:c4:08:03:b8:3f:d9:e1:fb:44:01:50:66:86:7a:c1:98:
dc:29:68:a8:e5:65:d3:98:7a:b9:e5:41:ac:07:3d:0c:cd:e8:
71:68:e1:b8:42:03:e9:53:56:31:42:4a:3c:0b:e0:b9:20:f3:
04:14:a6:ea:22:84:a0:22:4d:fe:0a:25:5f:01:ce:6a:f8:45:
7b:a8:45:a1:06:6b:06:41:d6:e5:21:b0:13:24:32:09:d1:fd:
e8:1a:ad:28:5f:95:c0:3c:ac:94:3c:ec:9f:5b:ea:a4:42:e8:
ab:ea:a4:8c:f6:d7:3b:b8:61:04:43:9f:6c:14:15:45:be:d5:
42:2a:17:a7:7c:ec:7f:28:e7:8a:92:a3:a9:9a:df:9f:8d:b2:
ca:bd:db:68:f6:6c:e6:9d:0e:c0:84:f2:a5:99:25:c9:67:eb:
d1:b8:3e:7c:88:7e:cc:77:6a:8f:76:f5:13:0c:7f:6d:0a:13:
fd:cc:4f:9f:79:62:26:87:dd:b3:20:1d:04:43:50:64:7e:e9:
b2:1a:da:88:ef:1d:ad:3f:5a:e0:f3:f5:f0:a4:d5:2d:30:1c:
05:b0:6e:5f:51:cd:e1:f2:e6:17:4d:d7:7b:38:11:a8:81:5a:
0a:e0:5e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:07:03 2025 by rpki-client