Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: jJEKqwqbxc6taunmhlIOYF3qttP7fe58cLGA+z9cs7c=
Subject key identifier: 3E:E3:70:22:5A:55:6A:88:75:2B:8A:6A:D2:E6:4F:C1:FE:D7:A6:21
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0198D4DFD5F894EE59579EAE1BD9415585A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0FE0
Signing time: Sat 23 Aug 2025 03:01:35 +0000
Manifest this update: Sat 23 Aug 2025 03:01:35 +0000
Manifest next update: Sun 24 Aug 2025 03:01:35 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: XCqAeoZyAwg+tMZIs9sLOnTbMSuiJHhLrjcqTgfAGaQ=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:d5:f8:94:ee:59:57:9e:ae:1b:d9:41:55:85:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Aug 23 03:01:35 2025 GMT
Not After : Aug 24 03:01:35 2025 GMT
Subject: CN=3ee370225a556a88752b8a6ad2e64fc1fed7a621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:c1:ef:e7:eb:b7:17:13:b3:8e:22:d8:63:
1a:c2:ba:9e:bc:c1:21:e7:d4:98:bf:88:88:05:d8:
84:33:7a:7e:76:b0:8f:e6:98:cc:a9:80:f8:f4:41:
2a:24:0c:12:e3:d2:6b:f5:1b:02:9c:e1:c7:64:df:
d3:51:b7:2c:20:2d:56:3f:35:58:ab:30:73:78:56:
1c:00:73:40:37:4f:b8:34:c1:fb:bc:09:c2:a1:f6:
7c:4e:45:e1:f2:25:da:81:9b:eb:04:89:68:e8:dd:
31:da:4b:bb:98:ed:6c:b7:5c:b0:10:77:ac:38:1d:
b9:52:db:16:1a:0d:f3:a6:b3:b3:64:19:9f:cc:9f:
2d:c8:19:26:af:12:42:ad:cd:da:4f:c0:32:f3:fe:
1f:9b:68:c2:3d:3e:11:9d:d5:c6:b1:2e:37:4b:2b:
b2:45:88:e7:8e:c8:9b:58:62:6e:a5:65:2c:ce:97:
03:0d:6b:43:fa:f2:b6:46:47:e5:f2:10:0c:7e:31:
b0:c9:db:db:12:20:39:20:43:e6:bd:b3:ae:89:55:
96:a1:76:10:a0:aa:b9:32:4e:fc:b2:08:0a:6e:ef:
b0:23:27:2b:b8:c3:84:31:1f:9b:d8:d1:d0:56:b4:
6a:6f:40:4c:dc:36:26:d0:f3:f4:44:5e:1b:b5:2a:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E3:70:22:5A:55:6A:88:75:2B:8A:6A:D2:E6:4F:C1:FE:D7:A6:21
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:63:24:1c:e6:f6:ab:c9:8d:03:d4:99:36:a9:c4:8f:23:b5:
ee:56:c6:14:f9:3f:5d:35:37:a0:c7:08:c1:cf:c7:1e:e1:f1:
22:df:fd:50:f1:76:7d:a9:26:8a:cb:fa:3f:04:15:35:13:8f:
77:1d:0d:0d:a7:16:06:a1:37:86:92:5c:d5:ae:7f:dc:a3:2d:
e5:e3:96:52:84:44:2c:3e:89:b5:25:8b:aa:20:4d:8b:8f:56:
8b:77:76:06:76:12:cf:b7:2d:0c:3e:81:cc:75:82:7d:a8:b6:
51:05:12:19:3d:9c:3b:46:a5:ec:fe:9d:75:12:2d:63:0a:4d:
4f:fb:4c:30:ce:90:be:b9:8f:2b:9c:64:8b:4c:77:79:5f:f9:
9e:d2:6b:65:ad:dc:27:55:4c:04:c1:0c:1d:b1:1a:5b:6b:64:
32:77:7f:b0:a1:e0:6a:68:7c:cf:9c:91:ba:08:74:dd:9b:46:
63:d4:4a:11:aa:8c:f4:89:81:50:18:78:9c:7f:2b:30:d1:3e:
bc:2b:51:f4:94:36:60:6a:21:ba:66:6a:d5:e4:5d:df:f5:1f:
ca:e1:18:a0:cd:16:8e:31:10:9c:f4:bc:c4:5d:a1:88:de:52:
11:00:dc:55:60:8c:ea:9f:c6:29:1e:32:a0:0f:63:9c:66:cd:
26:89:3d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:52 2025 by rpki-client