Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
File: SROyYa2_ee42pqOt-mh6fsZYIQs.mft (raw, json)
Hash identifier: vNtBrN9cqvwUgyKrQ3ozngYEGoBfTV18CRV8TcuoTZE=
Subject key identifier: 87:06:2E:24:6B:24:00:F8:FC:40:2C:ED:5F:E3:33:14:14:F2:AA:23
Authority key identifier: 49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
Certificate issuer: /CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Certificate serial: 0198D404961D8A958EFA0896CB1CF1865D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
Manifest number: 0D48
Signing time: Fri 22 Aug 2025 23:02:06 +0000
Manifest this update: Fri 22 Aug 2025 23:02:06 +0000
Manifest next update: Sat 23 Aug 2025 23:02:06 +0000
Files and hashes: 1: 9VMEesSV6a-x_SjygxcaosIGoNs.roa (hash: j886WgvsxRYSzK/QB3dbJNQTgLbqJaUrZ8NkjBVnb/g=)
2: SROyYa2_ee42pqOt-mh6fsZYIQs.crl (hash: 5lAXo6kU9K6NvqJacanhJ0PdGFBKcZ8vLN12WEYCrBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:96:1d:8a:95:8e:fa:08:96:cb:1c:f1:86:5d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4913b261adbf79ee36a6a3adfa687a7ec658210b
Validity
Not Before: Aug 22 23:02:06 2025 GMT
Not After : Aug 23 23:02:06 2025 GMT
Subject: CN=87062e246b2400f8fc402ced5fe3331414f2aa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:24:76:a4:03:75:0e:68:c5:b4:db:48:64:
5d:6d:e0:d0:26:d7:ec:7e:29:6f:a5:d5:95:f4:88:
26:d8:a5:e3:e7:1d:d1:86:15:45:1e:dd:bb:ea:9e:
cb:8d:fa:56:8c:fd:4d:8e:a5:dc:fb:41:01:c4:4d:
93:b6:75:6b:16:f8:66:33:4b:1d:68:99:72:11:f8:
57:f3:73:1b:cf:18:84:6d:27:0a:cd:26:3e:61:d8:
98:e3:1f:d4:ba:5f:2c:ed:7a:f9:0b:3e:54:5f:39:
cf:10:35:2f:5f:a4:95:a7:11:75:2f:67:5d:fb:1e:
ca:a1:53:db:d0:3e:d8:66:76:a0:d6:0f:12:3c:68:
e3:e2:19:67:dd:91:ce:6a:24:f3:95:a9:6c:17:68:
fe:56:76:7e:0f:2d:dd:6e:14:67:d3:4c:26:47:3e:
4c:26:b9:0a:c8:a7:25:f7:e0:11:07:cd:d6:24:5f:
e6:26:25:99:f2:17:e4:61:e1:e0:e8:0a:85:59:1c:
0c:e5:b7:ce:87:64:ff:c5:73:d8:23:d2:f3:90:da:
a7:50:9d:92:99:ca:84:a8:40:e5:79:07:49:ca:1f:
39:74:68:8f:79:8a:b7:f8:a7:89:ae:08:89:10:95:
28:50:54:40:cd:06:1f:ec:17:28:77:38:59:02:19:
9e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:06:2E:24:6B:24:00:F8:FC:40:2C:ED:5F:E3:33:14:14:F2:AA:23
X509v3 Authority Key Identifier:
keyid:49:13:B2:61:AD:BF:79:EE:36:A6:A3:AD:FA:68:7A:7E:C6:58:21:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SROyYa2_ee42pqOt-mh6fsZYIQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/880c47-fa92-4eef-b276-a8a0e55f5e31/1/SROyYa2_ee42pqOt-mh6fsZYIQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:34:fa:ef:66:f5:8e:49:88:87:e7:fe:e1:3e:e4:da:3b:0d:
9f:2d:67:81:c2:41:44:32:bf:19:39:fd:0a:28:27:95:18:9d:
ca:2e:93:c8:39:0a:90:70:1d:a4:36:99:6a:a0:ec:62:36:b7:
24:3a:ad:76:f5:ed:85:1b:d9:a2:34:9f:76:ce:50:cd:db:bf:
bf:be:72:96:95:08:2d:3c:a3:fb:3e:4f:61:4f:9f:06:63:89:
80:3b:81:be:cd:10:f7:9f:9a:19:1a:90:06:20:0d:f5:6e:dd:
a8:2c:78:ae:11:d0:26:f3:ff:bc:3e:1f:28:ed:03:eb:61:7d:
c4:37:b0:2c:a9:86:0b:f1:04:84:4d:d2:2e:21:df:e2:84:30:
e5:b9:db:d4:c5:7b:40:b7:84:0e:33:71:5e:f8:71:c5:ca:80:
86:95:ec:de:68:8e:4d:82:ce:33:a8:55:34:0f:72:3f:f7:2e:
c6:de:3a:a9:7e:76:ea:f9:1a:60:d3:e9:74:91:a5:07:81:ea:
7e:e6:dd:4c:ee:2a:b4:fc:30:bc:db:3c:0f:91:02:8e:6e:94:
f1:9e:b2:61:af:d9:4d:1d:bc:7f:f0:32:ee:47:56:da:4c:b8:
ba:65:3a:40:e7:64:fd:60:ff:91:ff:a1:df:66:eb:e5:2b:3e:
70:92:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:46 2025 by rpki-client