Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: dlQIN5EOhGVNXYpeq72y45oitRFc7DUAuerxYGOdGHE=
Subject key identifier: D4:5A:6E:1C:50:A8:DA:98:33:78:44:44:BE:68:05:67:2A:E0:F5:DC
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 0198D5158C4A0420E5941B632255789E2C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 15AE
Signing time: Sat 23 Aug 2025 04:00:15 +0000
Manifest this update: Sat 23 Aug 2025 04:00:15 +0000
Manifest next update: Sun 24 Aug 2025 04:00:15 +0000
Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: BukrA4hSxgX3b4b4wzBa1W789rVqYkluy3Df2S0Ht7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:8c:4a:04:20:e5:94:1b:63:22:55:78:9e:2c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Aug 23 04:00:15 2025 GMT
Not After : Aug 24 04:00:15 2025 GMT
Subject: CN=d45a6e1c50a8da9833784444be6805672ae0f5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:36:5a:41:c9:e1:01:88:ec:0f:f8:58:71:
20:05:60:12:e5:99:fd:7a:7c:b8:35:7f:56:47:37:
fd:6c:bc:da:55:12:1e:19:24:9d:d3:53:c7:de:7e:
db:60:5d:80:c7:99:61:97:73:25:0f:66:e9:e1:2e:
b6:64:75:68:f0:bf:16:48:9a:bb:79:32:40:de:b5:
4f:67:29:1f:d7:1f:10:b0:64:95:32:70:de:66:be:
36:33:1b:56:dd:2a:dd:09:44:95:71:d0:63:6e:71:
23:9b:0f:94:43:1f:2c:93:f6:6e:83:41:25:5d:cb:
fe:08:61:a6:c4:fe:70:df:91:b1:b7:c6:61:28:e6:
eb:86:16:91:78:a3:c0:ab:bd:17:dd:65:a0:99:d8:
12:5a:4a:52:f1:8a:ab:19:3d:00:3a:c8:2c:c0:e2:
4f:7c:3f:ac:45:ec:87:15:91:7e:3f:1d:56:38:7e:
bf:7a:52:e3:7d:30:6f:af:0a:78:e6:c2:7e:5d:4b:
31:78:39:b3:66:60:c1:a5:d7:98:8f:a6:91:12:6c:
b8:72:86:30:d2:2d:39:29:56:69:e4:01:e7:32:09:
24:2e:11:8d:80:df:ad:0b:5b:cb:ca:75:98:0c:c1:
7d:cd:a4:e9:8d:94:35:2e:61:b6:af:bf:95:a7:6b:
33:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:6E:1C:50:A8:DA:98:33:78:44:44:BE:68:05:67:2A:E0:F5:DC
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:74:26:6b:b2:62:20:59:f0:ee:5c:ff:aa:b6:e6:d7:b5:
41:db:2e:bd:85:a1:6f:c3:8f:4b:3b:8d:ff:01:8e:9a:bc:ab:
35:49:27:70:f2:f7:b1:7b:ee:33:e6:96:00:6d:70:bf:78:59:
99:e6:58:95:45:97:28:cb:40:f6:2d:c7:7d:68:9e:83:68:f4:
81:e7:5c:ec:f1:d5:eb:19:df:03:89:6d:63:c7:aa:76:7d:e7:
e9:4a:b6:26:a5:75:65:e8:e0:03:67:28:28:95:5d:c0:18:4c:
ac:fa:2f:1b:ea:c6:48:d2:f4:46:4c:93:1a:42:4a:8f:4e:85:
17:e5:b0:33:a6:8f:89:3e:10:96:af:a4:50:25:21:c4:6a:58:
68:f8:bb:0b:2c:b9:66:3f:db:db:94:08:1c:46:e5:00:da:c5:
49:7d:45:1f:96:1b:c3:d6:3b:c5:e0:1f:47:15:30:9b:f3:a4:
31:60:6a:cd:8a:99:4a:24:8e:ef:21:11:8e:cf:ae:c0:b7:16:
77:a1:b9:81:b3:02:4b:cc:29:7e:4f:02:09:3b:db:2f:d0:5b:
a8:72:dd:13:cd:5e:4b:b3:1f:19:7c:b0:fb:44:ae:78:57:a9:
3f:4b:68:a4:cc:0e:a4:cb:b2:0f:db:0f:ca:88:68:e5:2c:8b:
51:63:ea:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:50 2025 by rpki-client