Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: eEqKpeQkP4DKF6flnbscYZTYJRSf3pRRaqPlunOGr/8=
Subject key identifier: 2A:CD:3A:24:1D:78:35:DB:B8:28:4F:97:29:3E:76:32:75:95:63:68
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 0197B58DBC073D15BD73D335F06AF55F63FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 08:00:54 +0000
Manifest this update: Sat 28 Jun 2025 08:00:54 +0000
Manifest next update: Sun 29 Jun 2025 08:00:54 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: fRnc0Rh5ATTBexFglOa67eo9XuVpYr/8un3Qz8ixVOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8d:bc:07:3d:15:bd:73:d3:35:f0:6a:f5:5f:63:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Jun 28 08:00:54 2025 GMT
Not After : Jun 29 08:00:54 2025 GMT
Subject: CN=2acd3a241d7835dbb8284f97293e763275956368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b7:0f:ae:99:6b:14:29:cd:4d:7a:c6:4a:88:
ad:df:7c:da:fc:a3:7e:bd:8c:f3:8f:67:b5:f0:d6:
bd:87:96:b5:d3:a6:41:26:77:4f:1b:59:d9:8f:92:
a5:64:5e:03:eb:fd:80:7a:62:3c:e3:7c:34:f5:fc:
c3:24:e4:46:1d:f5:d2:3e:65:90:bf:15:d4:ab:43:
7a:4a:3d:ab:a5:dc:b8:4f:55:be:bb:11:be:b1:1d:
41:84:f8:07:df:7c:0a:72:a0:64:9d:dd:61:0c:e5:
ea:c0:c0:9f:ba:a7:51:93:bf:cf:ae:fb:00:ca:d2:
a5:13:47:68:35:2f:af:ca:72:87:37:2b:d0:38:64:
b5:af:83:ae:7b:cc:0a:06:5a:57:02:c9:97:c3:af:
60:7e:4d:fa:b0:a1:6a:19:08:f1:b8:87:03:03:95:
e9:13:68:5b:ab:0f:36:80:b4:0c:40:f7:ee:99:83:
be:56:6f:8e:40:07:9f:af:3e:00:cb:b4:d4:e1:88:
0e:e2:5b:74:f5:e1:09:de:81:c1:39:78:71:c3:af:
94:0d:00:6e:eb:8a:3d:06:60:9b:49:97:51:ac:b3:
f3:e3:da:d2:5e:db:9b:5d:54:fe:75:3c:cb:cf:14:
eb:dd:a8:81:ba:b2:ac:e5:e3:43:8b:c7:0b:db:dc:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CD:3A:24:1D:78:35:DB:B8:28:4F:97:29:3E:76:32:75:95:63:68
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f3:2b:9c:32:24:ac:8b:18:80:f2:87:b0:ba:14:1c:3a:d4:
89:33:98:54:58:c2:4e:81:04:13:78:0b:cb:2b:71:ac:8c:61:
99:93:11:b7:42:d0:84:f5:6d:64:b4:b6:d1:ae:74:94:71:20:
f5:54:21:d3:d9:05:68:e7:fc:3a:8b:2f:24:96:c6:ee:e4:73:
8f:5b:09:35:a5:e8:08:75:0d:85:38:da:91:0b:a0:f0:f8:29:
92:c3:38:02:24:f4:93:5a:2e:74:f1:63:f5:52:6a:06:a8:0c:
c7:81:53:0b:18:52:62:48:85:c9:10:a3:0c:87:5a:9d:1e:d5:
9d:b4:0c:f3:86:39:21:80:34:4f:5e:01:91:28:01:cf:e3:7a:
7d:7a:36:03:6c:d3:94:8d:ac:13:55:cc:c1:4b:40:41:69:ac:
63:71:9a:b7:d0:10:b7:96:7a:ef:34:95:78:4b:05:7b:c3:43:
14:7c:19:fd:ef:bd:97:25:9b:5f:27:24:16:38:a7:e9:e7:74:
a2:53:55:e9:2a:27:ba:11:8f:77:52:7b:47:97:19:38:e3:f0:
77:77:77:57:e0:0e:94:ee:a5:30:d8:6e:ec:0a:96:f3:8a:01:
71:81:b5:93:a5:c3:9d:ab:8c:cb:fc:c2:c3:32:8a:1f:bb:0c:
a7:3a:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:02:58 2025 by rpki-client