Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: /KtGrP0B265/PvdyyMxqBzEcD42V64fEi2i6topJ5jQ=
Subject key identifier: 0F:36:AA:33:19:D7:66:0B:51:5E:5B:1F:02:4D:ED:55:3F:F8:AB:52
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 0198D54E3CCC05109D2C9AD4CF7CF2570E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 05:02:11 +0000
Manifest this update: Sat 23 Aug 2025 05:02:11 +0000
Manifest next update: Sun 24 Aug 2025 05:02:11 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: h4F5mjIMIJJyKzU8LfpgBSqDib6V63nvzEbQaPZHg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3c:cc:05:10:9d:2c:9a:d4:cf:7c:f2:57:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Aug 23 05:02:11 2025 GMT
Not After : Aug 24 05:02:11 2025 GMT
Subject: CN=0f36aa3319d7660b515e5b1f024ded553ff8ab52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:48:62:63:ad:ee:99:bf:34:5a:1b:e7:2a:
84:1e:1e:41:00:67:8b:9e:a6:c3:ed:80:de:d8:41:
ee:bc:f5:6b:2c:3f:e5:a0:24:5e:6b:d6:6d:74:6b:
a8:a0:74:d3:67:73:64:05:3c:d0:ec:dc:1a:76:1b:
62:fa:ed:c3:3c:14:2a:3a:15:2a:23:ce:73:71:09:
f6:0b:a8:09:cd:03:5d:e3:66:65:3a:33:43:9e:5c:
49:5e:5b:89:76:7d:cf:74:d5:b8:84:03:ac:96:84:
b3:c5:b9:44:a9:6e:a2:9c:1c:b5:3c:e8:4d:f6:2b:
e0:4c:72:78:cb:34:2e:3e:95:35:8f:a3:d1:db:d6:
9a:3d:51:ef:9b:af:69:a9:cc:0c:d2:e7:40:e6:49:
79:53:c9:9a:5a:c6:77:2e:c0:8d:4a:7c:17:f2:78:
98:e6:43:f1:2d:cf:bf:aa:c3:ef:a2:e3:30:9d:11:
35:2b:8f:fb:14:2b:8e:d9:54:11:91:35:a0:ca:af:
40:93:0f:f1:5b:a6:2b:2f:99:73:2a:cc:c2:47:95:
e2:e0:08:0a:67:94:29:d4:2d:40:e4:30:65:2a:3a:
9f:e4:1b:f9:04:fb:e7:49:27:fc:d6:81:2e:d0:e4:
69:97:51:1b:01:17:5e:25:4b:60:16:2d:4b:75:95:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:AA:33:19:D7:66:0B:51:5E:5B:1F:02:4D:ED:55:3F:F8:AB:52
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:2b:7f:07:c5:19:82:f7:92:19:0d:0d:92:61:ca:aa:09:
d4:0e:9d:4a:e3:e1:13:fc:91:2a:0c:72:1e:21:cd:6f:04:0c:
21:d3:33:e8:4a:28:12:55:98:a9:a1:e0:f6:a1:4f:1e:0d:03:
15:ea:46:16:fa:c6:90:b9:9f:41:c6:06:b0:42:54:e8:31:e3:
a2:e8:36:86:a1:58:69:4a:04:a8:c1:44:71:4a:d9:01:c3:24:
b1:a6:8c:dd:89:fa:2f:38:ff:08:6c:25:30:ae:dd:39:5a:ff:
8f:c0:62:6d:79:76:31:55:e7:c8:c0:40:fc:f4:c1:a9:4a:76:
1f:11:cd:3a:60:80:a4:d5:e9:4d:75:a6:2e:01:e3:4d:7a:ee:
91:7d:7a:72:45:9a:5b:4b:4b:88:96:16:fe:2d:2d:c2:62:b0:
2f:ba:8f:a8:4d:48:3c:15:9a:cf:d9:8f:18:6e:26:31:f0:2d:
0a:59:ae:e5:e2:72:dd:c2:9e:b6:e4:5f:d5:53:ce:2c:f5:df:
9b:c5:cb:dc:e1:36:bc:d9:ad:76:c7:c9:50:63:f2:a0:73:05:
35:f8:bd:b4:79:a9:ed:b5:cd:b8:35:e1:37:64:22:c7:d9:72:
7a:db:3a:53:1a:12:c1:d9:23:09:37:45:2a:80:de:85:b1:75:
36:a9:d2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:43 2025 by rpki-client