Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
File: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft (raw, json)
Hash identifier: 32o8Qn5oecxLHS1pGqXjhrAOprgOXvf3FPXgJokr1ZQ=
Subject key identifier: 83:57:2F:28:B2:73:31:D7:5A:1B:0E:37:9E:72:BB:A2:2C:55:12:2F
Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Certificate serial: 0198D6CDC929F43B2F07DCB4E7CF8642F774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
Manifest number: 3C
Signing time: Sat 23 Aug 2025 12:01:07 +0000
Manifest this update: Sat 23 Aug 2025 12:01:07 +0000
Manifest next update: Sun 24 Aug 2025 12:01:07 +0000
Files and hashes: 1: FUgWL_lEitw648dAxbpzgHtUVSg.roa (hash: wprSxLZeem8Akk4r6OWoOul/6l4o4VUD6WM3B2aSMl8=)
2: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl (hash: gAjZZUUTUryYTeQlB9KjyZOvJw/xuvniwRYzVW6grnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c9:29:f4:3b:2f:07:dc:b4:e7:cf:86:42:f7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Validity
Not Before: Aug 23 12:01:07 2025 GMT
Not After : Aug 24 12:01:07 2025 GMT
Subject: CN=83572f28b27331d75a1b0e379e72bba22c55122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:70:56:1f:46:85:b5:5c:51:00:41:b5:3e:
73:0d:26:c6:c3:31:46:56:4d:32:87:65:87:58:db:
97:85:de:c6:ad:5f:d8:84:63:d4:bb:ae:d8:42:af:
8e:97:b4:ad:35:33:c1:63:15:39:6d:46:2e:cb:f8:
79:50:77:66:1f:0c:83:41:00:f6:fc:90:86:ae:42:
b8:67:be:10:75:37:11:c0:f2:7a:71:b7:3e:5a:a3:
41:37:e3:a9:75:78:0e:c1:93:81:2c:23:34:27:e0:
77:47:e1:e4:fa:00:c7:a5:8b:52:ec:e9:79:e7:c1:
e5:64:40:fa:ef:83:99:a6:e5:09:b7:4d:2d:db:dd:
e3:c7:dd:01:41:c5:a4:dd:24:8d:a1:d2:b9:29:cb:
5f:90:33:cd:52:09:61:69:e1:04:c8:44:b8:97:f4:
d2:73:f0:d3:cc:0f:1f:ca:02:98:39:2e:94:a3:ec:
52:9e:d0:96:0e:d5:96:e0:48:28:4b:04:30:a5:c9:
ff:59:91:36:0e:0f:ad:be:2b:71:2c:07:fc:95:71:
65:0d:17:00:5b:ad:19:77:9d:04:e0:3c:60:8c:21:
cb:f5:b7:b3:72:9a:6e:b5:68:0d:16:b8:54:a9:4c:
1e:c0:1e:66:7e:7d:8e:f7:f6:0f:63:5e:ad:5b:56:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:2F:28:B2:73:31:D7:5A:1B:0E:37:9E:72:BB:A2:2C:55:12:2F
X509v3 Authority Key Identifier:
keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:a9:00:08:b3:d7:4f:63:ef:18:cc:8f:40:48:6f:08:59:
54:ed:b5:9a:b9:c0:10:68:f0:f4:a2:b4:b6:7f:bb:e1:45:8e:
28:34:d0:e8:22:26:88:16:21:56:59:51:61:cd:2c:20:ca:77:
3b:f9:b8:e1:c8:8e:c5:15:0e:ad:41:3f:b9:38:4a:12:61:6d:
9f:7f:14:e5:f2:19:46:86:aa:c4:9e:77:dc:f8:e4:e9:62:56:
be:de:df:0a:d6:bf:8b:2e:aa:e5:a9:c0:b0:4c:f1:18:3c:60:
0a:05:c0:9d:b5:e6:a2:7f:bc:d5:b2:9c:a6:7c:92:8a:34:f6:
ba:8e:87:e8:0f:d7:0d:f4:5e:49:5f:17:d8:4a:da:53:37:c4:
d9:ad:ec:fe:67:37:6f:53:cf:59:76:c6:84:f3:fa:88:ff:f2:
96:df:99:8f:6a:2f:5c:0d:2f:cc:d0:2e:46:1a:8b:0e:1a:ad:
c0:14:08:be:bc:e4:f9:13:88:e6:e6:da:61:6e:26:74:7c:22:
4d:10:4b:65:51:6c:ae:0a:22:7e:df:f1:ca:e2:06:54:22:1f:
e2:c1:ba:7e:81:99:d9:2c:54:9e:39:6c:28:89:bc:7e:c8:ef:
f4:62:71:ec:3e:59:cc:72:a8:39:48:2c:7e:33:94:ad:c5:4d:
3a:b8:d2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:10 2025 by rpki-client