Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: 45weNU+cAC1lakZ9m9kk5nOZekKyzPGBJ7bI7MBSqYQ=
Subject key identifier: 16:B4:F9:1D:6E:9B:A5:4F:28:67:12:39:C7:9D:72:33:95:D1:5D:52
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 019A00A32A47C51FC63316DA20ED8B45E976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1677
Signing time: Mon 20 Oct 2025 08:01:24 +0000
Manifest this update: Mon 20 Oct 2025 08:01:24 +0000
Manifest next update: Tue 21 Oct 2025 08:01:24 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: vKvUyZX/x2OrALXl6zLS5tu/7we7NLwZBWUQcNH0IW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:2a:47:c5:1f:c6:33:16:da:20:ed:8b:45:e9:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Oct 20 08:01:24 2025 GMT
Not After : Oct 21 08:01:24 2025 GMT
Subject: CN=16b4f91d6e9ba54f28671239c79d723395d15d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:1e:03:f0:92:91:71:80:78:b8:7f:4b:a1:
29:31:43:7c:da:07:d6:0d:1b:96:9f:5c:9e:5f:63:
5d:d4:12:f1:db:f1:21:75:24:20:e1:b7:83:51:a3:
69:36:7c:1d:d4:92:ea:12:1e:c7:73:70:a1:d3:ec:
55:fa:2a:7e:ed:cc:08:22:73:82:f6:8c:e8:68:9c:
d8:ac:98:91:c3:71:cc:3b:cc:12:d1:6d:4d:41:54:
73:0c:85:a1:fc:58:f0:ae:bf:b7:55:08:70:ba:e4:
98:e1:04:da:da:a5:76:de:de:32:13:a5:5e:d7:aa:
f8:08:ac:35:ba:d5:3a:37:0b:5a:b4:a1:e6:64:97:
bf:78:f7:52:b5:64:09:ff:4a:2a:1a:3d:5c:78:90:
72:7a:a7:bb:a5:99:6d:2a:f7:3c:69:02:55:49:e3:
8d:d9:3d:48:a2:52:13:56:02:d9:f5:7a:c9:9b:eb:
81:e0:dc:0c:cb:aa:3f:1a:71:db:55:eb:aa:71:d7:
13:1c:1d:a6:1f:18:0e:13:16:31:17:94:4e:4b:c0:
82:35:4a:40:84:b2:d2:d6:ff:5f:57:29:2c:be:f2:
6c:16:c7:fe:0f:54:00:01:9a:b1:d6:15:40:80:c2:
72:ea:c1:93:a5:b7:a7:fe:4f:ea:f2:e9:aa:47:f0:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:F9:1D:6E:9B:A5:4F:28:67:12:39:C7:9D:72:33:95:D1:5D:52
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:c3:e2:6a:14:4e:1a:3d:50:3a:09:f1:47:9b:40:24:62:
9b:f9:bc:3d:67:90:0b:62:1c:0d:d5:b1:d8:28:b0:c8:d1:59:
d9:99:96:3d:2a:8b:bd:b3:ab:94:71:43:0c:66:a5:14:d2:7f:
5c:d8:da:ea:f4:52:78:db:ab:39:69:0f:dd:94:26:aa:1a:05:
ab:aa:f2:59:01:c0:83:ce:c4:40:33:ae:b9:b7:cd:fd:a2:01:
e1:8c:34:2a:c5:56:f4:fe:6c:94:2f:31:fc:b4:f9:ca:33:d5:
80:50:0b:c3:36:9a:e3:03:5c:d3:1d:1d:9f:35:12:6b:c5:09:
1c:f0:0e:f0:2f:bd:4a:aa:57:f6:22:3e:27:68:25:fd:62:fb:
3b:82:1e:95:40:c7:49:be:d6:b3:30:d0:c4:0e:2b:c4:c1:ac:
03:34:b9:29:6e:24:49:17:ab:9a:39:eb:97:a9:b5:df:39:ce:
a4:1b:1d:a5:5e:fd:8f:d7:c9:d9:59:ab:e4:ad:d6:17:55:e2:
b1:06:bf:0a:98:c1:87:5f:dd:77:80:7d:40:da:8a:33:c5:6e:
6f:87:66:07:64:c9:bd:a6:bd:48:b0:df:46:13:44:88:5f:78:
a9:d4:5f:f0:43:04:c9:80:a2:82:ae:c6:04:d7:8c:73:2f:66:
84:8d:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:38 2025 by rpki-client