Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
File: SY_lsoKxx9sA9nu0oT2feVIFCLc.mft (raw, json)
Hash identifier: vgQ2MMqiUDTTRZQw98nJEwBJRyb6hHzPTTkIPcz+YyM=
Subject key identifier: 09:18:2F:BA:8E:79:0B:4D:37:B1:B3:B8:63:8E:8E:7C:98:10:16:03
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 0196C15D93232CEB616651C234D6BC274187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
Manifest number: 085E
Signing time: Sun 11 May 2025 22:00:57 +0000
Manifest this update: Sun 11 May 2025 22:00:57 +0000
Manifest next update: Mon 12 May 2025 22:00:57 +0000
Files and hashes: 1: 8K5eZmO6X2MbGoBeK8qQvKjxcoU.roa (hash: KbO6Ab2C27LaWeTnTdU2aLz+mT2b0V6KrOUj4Nm0t/k=)
2: SY_lsoKxx9sA9nu0oT2feVIFCLc.crl (hash: q5HZcMd/oZYH6UL/76k8xRCLKZlzcpZXF7/d8AHCM3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:93:23:2c:eb:61:66:51:c2:34:d6:bc:27:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: May 11 22:00:57 2025 GMT
Not After : May 12 22:00:57 2025 GMT
Subject: CN=09182fba8e790b4d37b1b3b8638e8e7c98101603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8b:a6:cf:46:38:4a:30:a8:b2:70:bd:17:39:
68:82:37:a7:a1:88:e0:90:78:5e:9c:71:4b:11:17:
91:51:41:f2:e0:c3:bc:de:57:ed:26:3a:53:16:b3:
4f:f5:36:61:57:95:ef:34:ca:7e:90:82:a5:42:c6:
39:88:80:48:9e:b7:e8:0a:e3:da:66:3b:60:4c:3a:
15:11:d9:29:6c:68:d0:05:56:fe:1a:33:89:d9:6a:
c0:1f:78:a3:ef:c4:84:c2:51:27:03:57:df:02:6c:
fa:88:59:d9:9c:a4:5a:0b:4c:00:da:47:90:0b:70:
c6:f5:15:42:58:69:1d:66:fe:8b:38:de:2f:d3:38:
f8:b7:23:a2:bd:b3:13:72:c6:94:8b:7b:b6:4d:88:
d8:cd:cd:b0:7d:56:72:c9:f2:ab:29:5b:23:d9:7a:
cf:28:aa:61:29:dd:62:87:76:29:3d:25:ce:5d:10:
40:b2:3d:9c:3d:d1:34:f4:d1:f1:7f:ad:d0:4a:7a:
4b:c6:a1:d5:72:78:c4:f7:1e:48:65:73:a6:9a:41:
a9:b5:fb:c3:1d:b9:18:34:47:12:48:e8:3d:34:2a:
68:7a:2e:ae:d1:1a:8e:88:16:66:07:2c:ef:a1:c3:
f4:27:c6:67:c6:d4:4e:e5:bd:23:17:13:6e:3a:1e:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:18:2F:BA:8E:79:0B:4D:37:B1:B3:B8:63:8E:8E:7C:98:10:16:03
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:e9:77:de:be:b7:18:fc:00:fb:71:20:c0:10:35:36:cd:15:
e3:f1:25:f4:6c:2d:0e:7d:ec:94:0b:0f:da:05:04:ab:5e:b0:
1f:cc:68:26:53:9a:c2:34:d6:61:a1:ab:c5:ae:d3:26:e3:12:
b4:da:2a:fe:3e:e1:6a:c6:70:65:40:d7:03:0a:ca:f6:6a:bb:
c9:20:dc:cb:47:08:fa:50:e3:51:27:3a:76:d2:22:10:a4:b2:
12:41:b7:98:bd:fd:87:b7:64:48:96:79:a8:5a:fc:db:c3:4c:
1a:01:4e:37:39:12:80:8e:b5:b6:c9:73:e3:0a:4d:bb:d0:c8:
3c:79:e5:c6:73:d8:65:89:e6:6a:53:80:ce:d9:f0:fd:71:32:
bc:3e:15:1f:4c:1d:2b:4a:b2:35:2d:b4:ac:8f:22:a2:40:3c:
fe:81:d6:cb:ab:a1:0e:93:12:0d:e4:e4:79:6d:b8:45:62:cc:
cb:79:06:c5:70:dc:c2:d6:25:a1:bf:f5:2a:62:3a:7d:f4:6c:
0f:e2:1f:41:f1:6e:31:59:12:90:bf:a4:a3:38:a3:6f:ea:f8:
a5:52:03:60:4e:48:6d:a1:88:66:fd:4f:7b:3a:3a:9b:e4:7c:
85:d3:4a:29:5d:01:20:c6:ca:00:e7:97:bb:af:7a:2d:cd:09:
dd:eb:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:35:55 2025 by rpki-client