Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: 6GCaAooC7s1//cpUxSa5e4Zc1AB5uF5H01W3Nu+i1oA=
Subject key identifier: BF:30:34:54:66:E4:92:2F:E5:BB:84:C1:37:B9:96:12:A0:07:38:90
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 0198D5F14CC08F28F0860F75EC7182A30303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 0445
Signing time: Sat 23 Aug 2025 08:00:17 +0000
Manifest this update: Sat 23 Aug 2025 08:00:17 +0000
Manifest next update: Sun 24 Aug 2025 08:00:17 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: XRrDQGigJVFm95FUJiyI2qWYy1F5r03q1yRI0PbMZhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:4c:c0:8f:28:f0:86:0f:75:ec:71:82:a3:03:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Aug 23 08:00:17 2025 GMT
Not After : Aug 24 08:00:17 2025 GMT
Subject: CN=bf30345466e4922fe5bb84c137b99612a0073890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:47:9c:e8:50:62:05:73:c4:2c:e1:cf:f4:5b:
cc:8c:f7:cb:3a:08:fb:99:fd:46:b6:f6:fc:7a:9b:
7e:d1:be:94:13:4b:20:59:bb:3b:59:ec:79:eb:8f:
ee:72:8b:a1:56:2d:bd:d3:24:21:da:c1:17:7d:77:
aa:23:c7:81:3e:bc:76:e0:bb:92:8e:63:18:33:53:
d3:af:dc:0e:8d:de:c5:0d:47:a6:b0:d4:7a:ee:4c:
b1:7b:40:2b:66:23:30:ea:ff:48:97:b7:00:fe:fe:
a9:83:50:b6:9b:ed:f1:86:8e:d2:1e:42:7f:45:e5:
75:9f:20:2b:5a:4b:54:cc:3e:90:74:2b:6e:fb:ce:
38:97:65:0a:b3:4c:cb:29:a0:67:da:68:c4:00:c9:
e2:d7:a1:37:70:44:d1:33:6d:3a:b3:da:15:f4:3d:
7c:bc:2a:a4:f8:58:c5:c1:68:c7:92:54:f4:37:88:
36:e2:bf:88:b9:c6:12:21:0d:35:e0:9e:60:5a:2f:
60:1f:5b:36:45:8d:69:8e:ff:44:bb:fc:c5:0e:e9:
b5:41:ad:3a:ff:4f:87:f0:cc:fa:83:71:a9:9a:c9:
29:95:34:d8:41:9a:9b:cf:f7:1d:6b:8e:65:67:7b:
00:84:7c:2d:a4:41:7c:19:76:1d:70:8e:9a:fe:4d:
4d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:30:34:54:66:E4:92:2F:E5:BB:84:C1:37:B9:96:12:A0:07:38:90
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:66:17:5d:8b:7c:9d:e8:90:25:7f:d7:50:16:68:85:b5:9a:
a8:7e:42:37:9c:80:0c:7a:d3:ce:be:8b:60:53:04:e9:61:92:
45:a7:90:c6:b0:4f:86:a4:12:5d:29:42:cd:c8:90:12:06:03:
4e:62:4a:b5:77:c8:2d:32:30:bd:d7:c5:c8:65:0c:72:91:be:
10:52:8f:c2:60:c6:1e:82:99:5a:d2:7e:50:4d:83:1e:80:48:
21:d5:c5:e1:c4:49:3c:ce:f0:e2:9a:29:c9:77:4e:a6:1a:a6:
a4:e6:06:22:b1:f6:b1:1f:62:10:c0:27:56:24:88:cd:3b:f0:
c0:ce:15:b8:13:de:73:c9:ce:46:c1:9a:5a:0f:89:da:56:38:
31:38:9c:eb:09:a2:e8:e3:26:0c:97:cb:f1:c2:ba:0e:f7:75:
4b:84:ca:3a:96:41:ea:11:e5:59:12:4f:1e:d1:ba:5b:32:7e:
a9:76:b7:eb:bd:a9:1e:d0:21:7f:ca:2a:a1:44:21:6a:7a:71:
04:f2:14:76:bb:9e:97:b9:c4:0a:ee:9c:d2:2c:02:98:e1:a2:
c7:78:f1:e4:4d:11:b6:36:3d:af:60:f7:b2:6a:9d:9c:82:4d:
e3:71:11:2d:94:5a:d2:b8:64:9f:be:88:72:c4:c6:de:e4:60:
96:bb:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:07 2025 by rpki-client