Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: E37oiXUCc+nvfZW03zR4V8FbvF/GphP1ZQfFemLHa/o=
Subject key identifier: 82:7D:31:8D:55:9A:3E:09:D9:BB:3B:8D:48:F6:F2:FC:7A:F0:46:FA
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 0198D6CE03E4708DEE6B10A1BCDF445941CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: bjD+RCifyAK17vMf8Ic2NUT5OIpAwQVSpCFtbzGLRLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:03:e4:70:8d:ee:6b:10:a1:bc:df:44:59:41:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=827d318d559a3e09d9bb3b8d48f6f2fc7af046fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:a1:45:d6:af:79:16:03:b7:d2:ee:b8:7e:
4c:d4:c4:cb:bb:56:33:5b:45:5d:6d:62:16:5f:c6:
e7:47:9b:65:25:7a:3c:5e:36:dc:e8:03:e1:11:9e:
9a:c7:8c:87:c4:00:ad:8f:96:96:ad:19:55:8f:90:
6a:32:8c:9f:23:38:47:60:f7:7a:83:0d:1b:89:39:
72:1c:12:e4:11:bd:89:7e:a4:c9:87:10:10:08:9b:
74:7c:7d:36:20:06:d5:16:31:32:36:98:36:f9:c3:
cb:ed:f9:77:06:bc:13:74:7c:2f:3d:35:36:cc:b6:
58:92:1c:17:87:86:21:c7:eb:f5:35:34:d2:dd:b1:
e8:f1:ab:dc:2a:56:6c:36:58:b7:5b:69:8f:a7:c5:
32:14:07:23:e2:f5:40:67:cb:f4:66:27:f7:6c:ab:
03:37:39:fe:80:be:1a:37:3d:34:80:a6:60:06:a5:
d1:c5:b0:13:b3:50:c6:2b:77:d2:9e:86:92:6f:75:
b0:11:72:24:e3:4f:df:df:eb:73:a2:04:be:4e:1b:
ca:de:84:89:1b:ad:49:01:fe:ec:78:46:dd:3f:d1:
86:0b:b0:df:fc:0d:a2:7c:27:a8:59:52:1d:fb:f4:
9b:18:4a:5a:d3:c1:b8:58:26:81:09:93:63:4d:3c:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7D:31:8D:55:9A:3E:09:D9:BB:3B:8D:48:F6:F2:FC:7A:F0:46:FA
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a9:65:b3:be:e9:63:0c:01:55:f6:4f:20:0b:5f:66:35:81:
d8:8a:d3:93:96:d1:40:db:ad:e6:30:8f:39:53:30:c5:b5:f1:
96:9f:93:f3:ac:96:a7:66:b0:41:57:b0:9a:6e:41:f0:cc:3b:
ef:df:5d:40:dd:50:6d:f4:98:d0:a3:6c:37:ce:9b:27:e5:b3:
b7:ed:c8:be:74:e9:4e:67:28:e2:a0:d0:49:02:7a:fc:ab:49:
84:98:54:74:85:95:2d:e7:91:96:be:44:4f:aa:b6:38:86:a0:
e2:b0:17:4a:c5:f3:9d:f4:a0:e5:04:f4:a9:b9:39:26:5c:5a:
49:af:83:20:ca:32:e5:df:b2:8a:5a:b8:f5:b3:51:ca:09:5f:
79:42:4f:30:1c:cc:8b:cb:38:2f:a7:0f:f1:a5:d5:f3:c6:e8:
52:95:bf:d0:6f:03:cc:49:1b:27:7a:17:77:65:5e:22:83:ae:
52:87:ae:a4:24:c9:92:ee:72:8f:0c:a2:db:19:c9:d1:59:17:
ef:54:93:4f:59:12:04:74:17:7a:09:e2:5f:94:a4:ce:6c:49:
22:08:da:63:ad:0f:7a:ba:0d:ea:81:64:86:10:6c:bb:98:e0:
9f:73:2b:05:bb:5d:8c:7f:a7:bb:da:d3:d7:6e:ca:2b:b2:96:
c9:92:47:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:20:24 2025 by rpki-client