Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: 1dVnCgudtGYorqy8elBeN+EOWakuGvSaazGu98zrBdk=
Subject key identifier: B8:F1:91:BB:3D:51:F5:76:26:75:E6:93:3F:0C:2D:B0:A5:32:F0:70
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 0198D473E0C71962097EB813E96F38E94AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0E36
Signing time: Sat 23 Aug 2025 01:03:40 +0000
Manifest this update: Sat 23 Aug 2025 01:03:40 +0000
Manifest next update: Sun 24 Aug 2025 01:03:40 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: YoVX2oY6e3gVIRa/nYbN6xzzbUgQQ3aIextcKjwhwUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e0:c7:19:62:09:7e:b8:13:e9:6f:38:e9:4a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: Aug 23 01:03:40 2025 GMT
Not After : Aug 24 01:03:40 2025 GMT
Subject: CN=b8f191bb3d51f5762675e6933f0c2db0a532f070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:e6:6d:79:f6:4d:9f:18:27:a9:d4:74:0c:
fe:f8:cf:05:2b:3d:7f:19:f0:a5:33:c9:c1:7b:38:
80:f7:25:70:73:a2:39:12:60:ac:3e:d3:af:9a:f7:
b8:c4:b6:b3:22:4e:7d:18:62:3a:52:77:4d:51:ec:
7c:65:d7:dd:57:e3:5f:b6:d5:5a:75:ee:9f:be:4e:
67:a2:88:83:dc:40:18:12:b8:ca:e0:2e:29:77:17:
98:b5:8f:7a:6a:eb:64:c5:61:77:2a:15:62:10:38:
76:50:3e:75:c6:92:72:98:ab:7f:de:e2:07:8e:0f:
f3:cc:29:59:59:5d:d1:18:02:56:df:69:04:9d:0a:
25:02:0b:30:be:c1:49:34:3c:ce:e1:1c:a3:d7:81:
29:f8:43:d2:b6:5e:42:21:99:01:78:cf:d0:27:9c:
71:98:75:85:33:99:b1:41:f0:15:cb:3e:48:68:33:
41:87:d1:e3:6d:3a:5b:f2:ac:5a:8b:93:82:f3:90:
e5:05:b0:73:83:8c:d9:cf:39:30:bc:c5:9d:bc:4c:
6e:45:45:d3:12:83:f0:be:6d:ce:df:76:95:08:61:
12:9d:46:0a:12:cb:53:8c:60:d8:a7:40:9f:db:9c:
1a:bb:f5:48:cb:dc:f2:96:bd:8f:b1:a5:65:da:39:
5e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F1:91:BB:3D:51:F5:76:26:75:E6:93:3F:0C:2D:B0:A5:32:F0:70
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ea:63:26:68:4a:4a:36:68:c6:8d:9d:8a:80:b5:2d:91:41:
c9:83:44:70:52:9d:a1:a5:58:61:bb:5b:f8:18:ea:ad:03:e2:
e0:a5:1a:98:0e:cc:8b:0a:d2:6f:a3:46:0d:85:42:9b:da:34:
6d:ba:d7:58:79:14:75:5d:a7:97:fc:94:ee:7a:3e:80:a8:d8:
50:91:6d:95:7d:58:7f:ce:83:dd:2f:ef:e3:5b:46:8e:e2:fe:
a5:ad:01:58:32:fa:d7:85:7a:95:f5:2f:f9:bb:d2:8a:6d:c0:
d9:55:54:a0:02:eb:32:97:92:1d:a2:29:e3:88:96:c0:86:94:
89:8a:20:3a:98:75:0e:c6:e9:f0:40:4a:12:8c:ca:bb:ea:06:
56:7f:71:35:23:78:84:dd:f9:06:cf:d4:f4:b7:69:7b:68:7e:
b8:02:87:da:a6:3c:29:21:c7:7c:a7:8d:62:0e:86:56:d5:d6:
7f:27:1f:dd:b3:f6:bf:e7:8d:9c:82:94:63:92:22:bf:12:4d:
1e:5a:43:58:46:74:c3:a6:b3:44:63:ec:7d:d0:9c:2a:c7:34:
98:19:51:4f:b9:58:98:75:9e:5e:a6:c9:1b:66:8b:2f:35:83:
c4:d0:44:ba:25:4c:18:31:18:f2:ae:d3:c1:1f:3f:d9:06:57:
71:94:72:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:12 2025 by rpki-client