Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: suGKJtou8pxYNBm/v5F09D6llxrpppZBRjSAbN4+8TU=
Subject key identifier: 24:87:21:B4:A4:B9:ED:68:C4:9E:4D:00:C5:69:C4:06:49:22:3F:12
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 0198D439C109165C9BAA78BF54288916A0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0AA1
Signing time: Sat 23 Aug 2025 00:00:11 +0000
Manifest this update: Sat 23 Aug 2025 00:00:11 +0000
Manifest next update: Sun 24 Aug 2025 00:00:11 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: k8klVA0Lk/0j2dbC6SYpd81b/itk/DU4aKJlNYZgzVI=)
2: nBqkJ21E89xpdJHsjMjUY6q0t8s.roa (hash: cYjf2nhrD03sJ2C+YxabZIv8XeqfYPE9uhBxiZGoO6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:39:c1:09:16:5c:9b:aa:78:bf:54:28:89:16:a0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Aug 23 00:00:11 2025 GMT
Not After : Aug 24 00:00:11 2025 GMT
Subject: CN=248721b4a4b9ed68c49e4d00c569c40649223f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:48:f2:93:43:d0:b7:a0:49:09:8c:79:fc:b2:
7f:87:15:a8:e6:9d:33:56:35:2c:7e:95:14:5e:89:
d1:2c:c3:90:0d:df:c2:65:36:4d:e7:af:ed:15:e8:
ff:07:90:90:d1:7d:0d:23:96:d5:86:02:bc:ab:ea:
2d:22:31:e0:91:75:5e:42:d1:52:10:cc:f4:8a:da:
af:73:83:6b:96:c4:f9:89:48:59:31:61:ae:40:b6:
e2:d1:db:d1:4f:e2:d8:c6:7c:77:19:ef:88:89:6c:
ab:69:fa:20:75:4c:71:87:0b:3f:93:dd:10:0e:3f:
e6:9f:cc:9c:2d:b6:58:d6:03:8c:fd:9f:35:c0:e3:
72:5c:60:2a:a9:43:8c:cb:6c:f7:3a:40:55:81:9c:
54:c1:9f:65:7a:a7:5e:1d:92:01:fb:9c:a7:34:95:
df:86:29:b3:cd:75:c6:d6:a6:cb:14:68:ec:cc:6a:
22:65:c4:73:b7:ee:7d:64:9f:c0:2f:90:34:d1:49:
f7:6d:08:84:0b:14:fb:bd:05:91:bf:25:b5:d0:37:
8e:fe:ec:fe:67:75:9a:4c:2c:65:1f:b4:db:94:d3:
ab:c3:b3:c9:7b:ed:3c:e1:cb:3a:17:9c:13:07:0f:
a5:89:95:09:b5:07:a8:df:5f:1a:6f:57:fc:20:ce:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:21:B4:A4:B9:ED:68:C4:9E:4D:00:C5:69:C4:06:49:22:3F:12
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1f:c6:a1:82:d0:da:86:02:55:35:60:ad:98:5f:34:c4:4f:
7b:2c:37:10:52:b2:70:33:ba:ea:77:8b:c9:79:53:00:c8:de:
8e:e4:51:d7:ff:01:6d:d8:c1:ab:64:81:15:d3:cd:c9:df:e8:
70:17:00:6e:7a:76:56:ea:b3:15:59:dc:9f:26:9a:0b:b3:23:
5a:fa:8f:0e:40:4c:3b:64:4a:6c:db:b4:55:31:bd:df:28:d4:
95:16:8d:8b:de:0b:05:6c:c9:7a:eb:1f:85:c9:20:3e:b1:f3:
d7:f9:ad:9e:1f:30:52:0a:de:ec:10:00:54:bd:a6:d6:da:c3:
be:7f:9d:d0:bd:77:8f:6c:59:ab:f5:b8:65:47:ac:6b:96:47:
60:78:40:66:64:4d:42:f9:d9:5d:6e:ee:36:c6:34:70:0a:f5:
48:ca:e2:74:73:75:49:3f:bb:1b:a6:e6:9f:fa:09:68:0e:11:
ac:59:b5:d1:6f:55:39:46:09:e6:a1:49:ab:42:1b:67:6c:54:
76:a2:ce:4c:64:e8:7c:69:20:0c:71:97:a4:19:dc:04:85:0f:
b9:af:22:02:9e:a0:6f:d4:b3:71:1d:ff:03:8e:54:14:bf:9b:
61:e2:ec:b9:37:00:8e:36:a2:7b:d1:c2:f8:49:2e:59:24:f3:
2e:db:54:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUOcEJFlybqni/VCiJFqC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODc5NDFlNzRjMWMwM2U3YWJhM2I4Nzg1MzAwOTVlYjZm
YTg3NGUwHhcNMjUwODIzMDAwMDExWhcNMjUwODI0MDAwMDExWjAzMTEwLwYDVQQD
EygyNDg3MjFiNGE0YjllZDY4YzQ5ZTRkMDBjNTY5YzQwNjQ5MjIzZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0jyk0PQt6BJCYx5/LJ/hxWo5p0z
VjUsfpUUXonRLMOQDd/CZTZN56/tFej/B5CQ0X0NI5bVhgK8q+otIjHgkXVeQtFS
EMz0itqvc4NrlsT5iUhZMWGuQLbi0dvRT+LYxnx3Ge+IiWyrafogdUxxhws/k90Q
Dj/mn8ycLbZY1gOM/Z81wONyXGAqqUOMy2z3OkBVgZxUwZ9leqdeHZIB+5ynNJXf
himzzXXG1qbLFGjszGoiZcRzt+59ZJ/AL5A00Un3bQiECxT7vQWRvyW10DeO/uz+
Z3WaTCxlH7TblNOrw7PJe+084cs6F5wTBw+liZUJtQeo318ab1f8IM7n4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSHIbSkue1oxJ5NAMVpxAZJIj8SMB8GA1UdIwQY
MBaAFEmHlB50wcA+ero7h4UwCV62+odOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQt
ZThhZGE1MWVlOGZmLzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MDc3N2ItNjhiMC00MmE4LTllOWQtZThhZGE1MWVlOGZm
LzEvU1llVUhuVEJ3RDU2dWp1SGhUQUpYcmI2aDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh/GoYLQ
2oYCVTVgrZhfNMRPeyw3EFKycDO66neLyXlTAMjejuRR1/8BbdjBq2SBFdPNyd/o
cBcAbnp2VuqzFVncnyaaC7MjWvqPDkBMO2RKbNu0VTG93yjUlRaNi94LBWzJeusf
hckgPrHz1/mtnh8wUgre7BAAVL2m1trDvn+d0L13j2xZq/W4ZUesa5ZHYHhAZmRN
QvnZXW7uNsY0cAr1SMridHN1ST+7G6bmn/oJaA4RrFm10W9VOUYJ5qFJq0IbZ2xU
dqLOTGTofGkgDHGXpBncBIUPua8iAp6gb9SzcR3/A45UFL+bYeLsuTcAjjaie9HC
+EkuWSTzLttU5A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:09 2025 by rpki-client