Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: ijLGSdH9iJ+AKIe92v9rwo+XPE+lFdz4qXbQ1yXSPXI=
Subject key identifier: 3D:A1:9F:3C:3B:B1:1B:FB:42:3F:D0:05:04:72:F6:3D:0F:EF:FB:22
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 0198D660DB6CDB621E49EC7C5AA42BC32994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 0972
Signing time: Sat 23 Aug 2025 10:02:08 +0000
Manifest this update: Sat 23 Aug 2025 10:02:08 +0000
Manifest next update: Sun 24 Aug 2025 10:02:08 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: jqBGSGO8zmowXUjVn9P7v69aQHUCyy/X8asAzVlSINA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:db:6c:db:62:1e:49:ec:7c:5a:a4:2b:c3:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Aug 23 10:02:08 2025 GMT
Not After : Aug 24 10:02:08 2025 GMT
Subject: CN=3da19f3c3bb11bfb423fd0050472f63d0feffb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:ba:61:ab:57:59:3c:8f:0c:c5:ab:2f:23:
27:cf:ca:4a:83:e7:de:fe:84:f0:7d:89:f4:92:7b:
31:86:4c:c4:2d:6c:ec:0d:5a:4c:d0:05:03:88:6d:
dd:a5:44:ee:18:4a:b4:6b:b3:ba:d3:12:87:a6:17:
71:1a:4a:50:df:93:51:6d:70:09:8a:b2:88:86:76:
86:fc:93:e0:fc:55:28:74:9e:5c:20:d4:be:c7:30:
d9:b7:c6:1d:87:df:7f:64:78:60:3e:22:a9:1b:0d:
ce:99:a1:65:30:e0:d3:2f:bb:f4:39:31:54:c2:cf:
74:4a:99:23:16:dc:73:30:b2:c5:87:20:f3:d0:2f:
cd:a6:dd:93:8f:b5:02:c4:e7:c1:5b:d0:87:eb:57:
e5:5a:5e:ec:d2:d7:5f:56:9f:7b:11:39:01:7d:55:
2f:d2:7c:2d:a5:25:60:79:bd:4a:02:cd:33:95:af:
b5:90:01:e8:c3:24:65:84:9b:e5:03:c8:07:e3:3b:
56:1f:e4:95:56:89:5b:2e:3b:0a:6b:f6:b0:0e:31:
7d:2d:1d:39:8c:fc:b4:f0:cd:30:d9:3c:8b:4b:71:
7a:7c:fa:01:39:06:5e:bc:bf:3d:a5:d8:2f:87:80:
5d:ac:8e:00:00:a8:a4:f4:cf:cb:ac:12:14:5a:01:
6a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:9F:3C:3B:B1:1B:FB:42:3F:D0:05:04:72:F6:3D:0F:EF:FB:22
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:99:ba:bf:6d:92:e8:cd:ae:72:1b:42:e0:52:4f:d7:15:ea:
f4:7a:57:67:75:de:63:8a:fa:ac:81:5f:6e:81:ab:4c:01:7c:
f4:99:c0:97:3a:4e:d6:23:74:e5:4c:d8:9a:f1:26:07:91:82:
5e:6f:10:06:17:d0:bd:11:37:ae:34:ca:05:f6:61:26:de:20:
bd:69:91:9e:64:3e:63:1b:7b:32:a4:90:ed:8f:26:e7:8d:d8:
2d:ee:9c:ed:94:e7:1f:bd:65:a6:3d:3d:45:3c:04:c7:71:7d:
46:bf:19:50:63:61:f7:60:37:30:40:75:3a:e6:cc:4d:2f:a7:
ac:0d:64:77:22:cf:28:d5:3b:d5:ec:c5:81:8d:b5:43:62:13:
5e:e4:9e:dd:1f:9b:97:e7:a4:31:62:fe:d1:3c:f0:09:c1:f4:
03:be:cb:75:95:ab:24:5f:91:b4:6c:81:7c:89:b0:51:2c:75:
31:c0:dd:65:37:c7:b0:84:48:0e:2f:23:8c:7e:df:b0:23:3f:
7e:e5:c1:a8:34:87:be:df:3f:0d:d6:e2:34:07:04:dc:da:80:
65:a3:88:b0:61:5b:5a:69:60:ad:c4:70:a7:9e:17:14:af:93:
57:2e:0c:bb:c7:1d:c5:45:a2:1d:98:c7:b3:0c:46:f9:8a:11:
46:f2:c5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:34 2025 by rpki-client