Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: OYTShExpsJnrWUNR0wHBGxhG6rI9iHHcww3sAR3xl2g=
Subject key identifier: 81:69:38:78:2A:AC:0E:EE:91:4F:00:C0:5B:19:B3:D6:BA:D4:4E:48
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 0197B6A03BEE46366CFDCF18856A73814461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 08DD
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: qOFTu0+qi3esFUbU4OJ9iQbRkgKXKXa+h9a/ybitwlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3b:ee:46:36:6c:fd:cf:18:85:6a:73:81:44:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=816938782aac0eee914f00c05b19b3d6bad44e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:f2:5d:08:87:33:8e:b6:72:8c:2c:7d:80:
dc:c3:bc:d5:e5:87:5f:b6:cf:67:95:ee:ae:b4:02:
27:14:6c:b1:bd:16:ee:85:8f:82:ae:0a:d5:27:cc:
8b:7b:5c:03:31:5a:32:c2:5e:a4:82:9c:a3:61:f1:
04:cc:ae:12:c2:a6:51:e9:2a:00:bc:16:ed:c8:77:
9d:e8:12:e6:dd:51:d5:31:e2:03:e4:f5:6e:bf:4c:
20:21:19:fb:3c:65:2d:f2:da:7b:df:bd:20:19:4e:
1e:6c:63:ec:ad:f9:08:6c:24:d1:8a:1b:c0:d5:f4:
71:7c:b1:8b:0d:9f:f0:47:cb:3f:74:d5:22:2b:cf:
c2:5c:83:b9:8e:8e:b5:8b:5f:67:c0:2c:bd:dc:1d:
3b:5d:2f:e9:35:5a:fe:f6:94:59:5e:71:c3:73:3c:
ef:13:a4:96:bd:f6:12:c2:49:19:a2:28:f2:97:d6:
6f:51:52:6e:b2:35:28:82:bb:43:c3:f1:77:36:99:
b6:d0:e7:e4:8c:6f:e9:62:53:2e:07:f1:cc:7d:e6:
5d:81:be:95:cf:8b:06:ea:08:f0:41:61:32:0c:be:
30:c6:35:14:f3:1f:fa:e1:98:04:32:54:f6:5d:51:
39:4b:b9:08:51:6c:91:0e:79:06:28:19:52:2e:27:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:69:38:78:2A:AC:0E:EE:91:4F:00:C0:5B:19:B3:D6:BA:D4:4E:48
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:da:da:c6:b6:41:f1:27:68:44:e9:78:12:66:d6:c4:68:
a1:b0:80:b1:f6:47:f7:d9:62:77:7f:20:30:45:08:1a:7f:8b:
e1:13:53:45:1b:5d:fe:a1:72:6e:16:9a:cd:af:e2:e6:e4:43:
40:2d:54:9d:32:47:6b:d7:fc:c0:48:54:ce:b3:da:ad:77:dc:
d7:27:33:99:30:67:82:b1:1d:99:84:57:59:46:35:b4:5c:45:
a1:a5:8f:38:7f:33:7d:91:9d:37:80:4f:11:38:62:e3:49:d0:
89:7c:1a:8c:3e:b7:90:eb:7e:9e:39:74:07:03:a5:fa:77:53:
df:5b:ea:94:c5:b7:be:4b:3f:81:bd:cf:f3:cc:54:94:c8:5a:
cf:6e:4c:95:b0:48:2e:1e:30:8d:c9:ab:6b:a0:d0:03:ef:50:
04:59:fa:40:a5:5d:ea:ce:22:0c:5f:01:d6:28:9a:a6:ce:7f:
61:5b:d5:c5:25:4d:15:57:b1:6e:fe:8d:1b:ed:b5:ef:60:c4:
07:49:32:0a:56:92:57:94:51:c1:c1:15:16:c0:0f:42:0e:af:
b2:4e:2b:ff:cc:a7:86:41:58:da:1f:01:ec:0d:17:14:53:b2:
81:60:89:26:7f:99:38:a4:9e:63:b3:b8:ff:b1:b9:75:e6:cb:
eb:f3:59:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oDvuRjZs/c8YhWpzgURhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjUwNjI4MTMwMDQzWhcNMjUwNjI5MTMwMDQzWjAzMTEwLwYDVQQD
Eyg4MTY5Mzg3ODJhYWMwZWVlOTE0ZjAwYzA1YjE5YjNkNmJhZDQ0ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyfyXQiHM462cowsfYDcw7zV5Ydf
ts9nle6utAInFGyxvRbuhY+CrgrVJ8yLe1wDMVoywl6kgpyjYfEEzK4SwqZR6SoA
vBbtyHed6BLm3VHVMeID5PVuv0wgIRn7PGUt8tp7370gGU4ebGPsrfkIbCTRihvA
1fRxfLGLDZ/wR8s/dNUiK8/CXIO5jo61i19nwCy93B07XS/pNVr+9pRZXnHDczzv
E6SWvfYSwkkZoijyl9ZvUVJusjUogrtDw/F3Npm20OfkjG/pYlMuB/HMfeZdgb6V
z4sG6gjwQWEyDL4wxjUU8x/64ZgEMlT2XVE5S7kIUWyRDnkGKBlSLif2FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFpOHgqrA7ukU8AwFsZs9a61E5IMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABP/a2sa2
QfEnaETpeBJm1sRoobCAsfZH99lid38gMEUIGn+L4RNTRRtd/qFybhaaza/i5uRD
QC1UnTJHa9f8wEhUzrParXfc1yczmTBngrEdmYRXWUY1tFxFoaWPOH8zfZGdN4BP
EThi40nQiXwajD63kOt+njl0BwOl+ndT31vqlMW3vks/gb3P88xUlMhaz25MlbBI
Lh4wjcmra6DQA+9QBFn6QKVd6s4iDF8B1iiaps5/YVvVxSVNFVexbv6NG+2172DE
B0kyClaSV5RRwcEVFsAPQg6vsk4r/8ynhkFY2h8B7A0XFFOygWCJJn+ZOKSeY7O4
/7G5debL6/NZSQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:13 2025 by rpki-client