Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: s9zse7376XZkQUcfPOMtchf7iBg3kpKqiVdnVVjU/wE=
Subject key identifier: C8:60:A6:20:A0:99:1D:EB:AD:3E:D2:8E:71:4F:34:2D:98:44:86:89
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 0197B632A80DE4A51762AEF5ABDCD6B43CDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0CB4
Signing time: Sat 28 Jun 2025 11:01:02 +0000
Manifest this update: Sat 28 Jun 2025 11:01:02 +0000
Manifest next update: Sun 29 Jun 2025 11:01:02 +0000
Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: 8ueF4r0s0aZn7YnJgNW4a4OkExmCJTv5ayV4VAuY0sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:a8:0d:e4:a5:17:62:ae:f5:ab:dc:d6:b4:3c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Jun 28 11:01:02 2025 GMT
Not After : Jun 29 11:01:02 2025 GMT
Subject: CN=c860a620a0991debad3ed28e714f342d98448689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:bc:43:c2:69:25:c3:74:a3:d9:5a:de:5b:
6b:8f:aa:a2:08:22:1a:97:46:8f:9b:f9:ef:9c:e0:
50:a9:16:26:87:3c:ea:ba:8e:74:0b:8d:ad:5e:60:
04:ac:0f:0d:6c:ec:0f:c4:51:ea:c4:e2:ca:b4:b5:
e2:98:3b:29:ae:e0:c5:bf:27:f4:9e:7c:e9:5c:b3:
c9:3b:30:ec:ef:51:14:0f:80:69:d6:11:ad:c7:a7:
1a:f6:47:01:b2:72:1b:07:6f:ba:dd:2f:5d:7c:7f:
92:fb:0e:36:0b:b2:8a:c4:c8:c3:48:24:7f:09:0b:
9b:ae:65:62:00:d6:d5:70:cc:54:28:e1:d9:71:5b:
79:71:ac:d8:95:b6:99:d3:67:7e:e8:e3:88:25:88:
df:8c:25:11:26:6e:c6:c7:ec:86:9c:ea:dd:d3:c9:
57:8f:4e:c7:fa:18:d8:fd:2a:45:d0:c3:1d:fb:1f:
9d:ae:7b:13:84:1a:12:c4:1b:53:25:73:32:b5:4a:
cd:98:91:e9:b3:b1:4a:f9:99:c4:47:0e:b6:fa:fc:
7e:31:44:8a:35:c5:0d:cd:02:4f:a8:0d:3f:2b:f8:
80:c2:11:d9:28:f4:a6:5e:33:5f:06:0f:13:68:8a:
fa:14:ad:3a:0a:04:25:6a:23:bb:d7:d3:53:7a:ee:
d7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:A6:20:A0:99:1D:EB:AD:3E:D2:8E:71:4F:34:2D:98:44:86:89
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c4:77:79:da:b7:42:e3:5f:fb:5a:4f:a1:ef:df:91:f8:03:
3f:93:54:ba:09:67:8f:a4:a4:40:02:a3:be:e9:59:47:84:92:
47:e7:d1:66:1e:33:d5:e6:c3:9f:e9:fc:38:c3:20:2e:d2:9b:
03:76:dc:63:bf:ec:bb:da:1b:0e:67:f5:a5:56:db:0d:7d:eb:
be:a0:ca:9d:a0:2d:c4:16:df:e4:16:ca:39:bb:9d:e0:06:83:
2e:61:c3:7c:55:25:1c:49:24:61:40:ba:16:3a:ed:54:05:c8:
b2:ea:83:56:30:8a:66:5d:15:c9:d0:76:85:05:4b:ca:94:e0:
72:37:a1:d9:fe:41:ae:2c:5f:99:d6:26:dd:dd:da:52:d6:b8:
06:e9:a3:88:63:be:22:8b:86:be:d7:15:ca:43:16:19:17:49:
5c:84:85:0a:58:64:b9:43:61:12:43:91:f0:03:5e:d0:c0:5b:
bb:23:bd:71:bd:e2:3f:49:05:59:55:6a:87:47:bb:f7:d6:e3:
64:75:6b:c4:de:e2:78:3d:72:c7:03:26:f0:0f:4c:05:e2:b1:
33:2f:59:21:50:f0:de:8f:cb:5f:54:c4:3d:66:58:ba:02:bd:
f7:f5:09:2a:72:39:6c:f5:c3:bf:02:b8:67:fd:fc:cc:df:74:
b2:f8:b8:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MqgN5KUXYq71q9zWtDzeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MTNiMjYxYWRiZjc5ZWUzNmE2YTNhZGZhNjg3YTdlYzY1
ODIxMGIwHhcNMjUwNjI4MTEwMTAyWhcNMjUwNjI5MTEwMTAyWjAzMTEwLwYDVQQD
EyhjODYwYTYyMGEwOTkxZGViYWQzZWQyOGU3MTRmMzQyZDk4NDQ4Njg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2m8Q8JpJcN0o9la3ltrj6qiCCIa
l0aPm/nvnOBQqRYmhzzquo50C42tXmAErA8NbOwPxFHqxOLKtLXimDspruDFvyf0
nnzpXLPJOzDs71EUD4Bp1hGtx6ca9kcBsnIbB2+63S9dfH+S+w42C7KKxMjDSCR/
CQubrmViANbVcMxUKOHZcVt5cazYlbaZ02d+6OOIJYjfjCURJm7Gx+yGnOrd08lX
j07H+hjY/SpF0MMd+x+drnsThBoSxBtTJXMytUrNmJHps7FK+ZnERw62+vx+MUSK
NcUNzQJPqA0/K/iAwhHZKPSmXjNfBg8TaIr6FK06CgQlaiO719NTeu7XgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhgpiCgmR3rrT7SjnFPNC2YRIaJMB8GA1UdIwQY
MBaAFEkTsmGtv3nuNqajrfpoen7GWCELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYt
YThhMGU1NWY1ZTMxLzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC84ODBjNDctZmE5Mi00ZWVmLWIyNzYtYThhMGU1NWY1ZTMx
LzEvU1JPeVlhMl9lZTQycHFPdC1taDZmc1pZSVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8R3edq3
QuNf+1pPoe/fkfgDP5NUuglnj6SkQAKjvulZR4SSR+fRZh4z1ebDn+n8OMMgLtKb
A3bcY7/su9obDmf1pVbbDX3rvqDKnaAtxBbf5BbKObud4AaDLmHDfFUlHEkkYUC6
FjrtVAXIsuqDVjCKZl0VydB2hQVLypTgcjeh2f5BrixfmdYm3d3aUta4BumjiGO+
IouGvtcVykMWGRdJXISFClhkuUNhEkOR8ANe0MBbuyO9cb3iP0kFWVVqh0e799bj
ZHVrxN7ieD1yxwMm8A9MBeKxMy9ZIVDw3o/LX1TEPWZYugK99/UJKnI5bPXDvwK4
Z/38zN90svi4IQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:49:56 2025 by rpki-client