Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: HYhVQTTe6jS9b64I18+zlhHZoLkNALd6YFiDLa3FkCs=
Subject key identifier: 34:F6:0D:FD:C0:EE:9B:19:1B:AC:24:D4:F0:43:98:6F:99:5C:D0:AF
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0199FC5841F19FF0E49D3573DE0605FA9C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 1079
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: tcYj9oYJrsyM5dhe4LKgQItXUWjVGSsVW0i2z6GG2M4=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:41:f1:9f:f0:e4:9d:35:73:de:06:05:fa:9c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=34f60dfdc0ee9b191bac24d4f043986f995cd0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:81:e2:8a:54:44:ca:f8:62:f6:c9:c5:0c:
9d:7e:2d:f9:8d:43:94:0c:b0:0f:9a:f2:a4:74:83:
9a:a4:78:3a:d2:ee:2a:86:0c:c7:94:f2:aa:ba:6f:
2d:bc:75:41:5c:a1:02:a5:9e:5b:c4:48:6b:0d:90:
58:36:a4:0d:3f:8a:8e:71:f4:a2:59:ee:6c:27:30:
10:55:73:42:db:22:3a:1a:d1:36:9d:60:24:75:78:
16:e6:90:d8:34:d2:49:3a:58:a3:83:86:88:04:d0:
e9:46:e0:e3:78:8a:5c:06:69:4b:58:3f:5a:29:c0:
57:3f:87:bd:a5:86:1b:c9:61:a4:f9:06:56:15:21:
b3:ac:77:01:b4:87:3b:72:92:94:fd:7d:87:55:9f:
a0:36:0a:e1:17:67:e3:5f:c1:d2:61:51:cb:e4:14:
8a:5a:d9:7e:8f:7a:90:c7:f2:cd:1b:12:a3:ff:99:
04:a5:1d:8b:eb:42:9e:cd:00:73:d6:bb:5e:2d:cd:
fa:fb:db:d6:4e:e2:67:93:ab:93:ec:7b:f1:ff:35:
7a:ae:12:53:17:2a:71:b1:7f:4b:fd:68:3b:91:f4:
7e:a0:c6:be:d0:2e:e1:c5:d6:c5:d4:27:e3:63:53:
a1:7c:90:f5:99:47:a7:21:e3:6d:c1:49:8a:fd:e4:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:0D:FD:C0:EE:9B:19:1B:AC:24:D4:F0:43:98:6F:99:5C:D0:AF
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d5:92:d7:a3:3e:86:a0:0b:ff:47:9a:65:f3:42:07:3c:38:
87:c3:7e:72:cb:93:65:db:5c:68:27:f2:31:83:52:c1:da:74:
c8:9b:62:7f:d9:5f:22:08:fa:6b:fb:d1:73:3b:24:d8:c4:aa:
89:80:e5:41:4c:5a:d9:24:18:b6:d4:a1:5d:28:c9:73:e3:63:
76:d8:7f:4d:f0:63:6d:6c:f3:34:1a:10:13:5f:d6:00:18:f8:
ea:09:a5:73:71:83:a1:d9:e3:54:6c:8f:ca:ea:d8:bf:ed:36:
f4:aa:45:8e:cc:7e:73:bd:f8:8b:98:20:b0:95:e2:a7:92:3e:
e8:be:36:97:67:ae:2b:f0:b0:30:77:83:2a:42:c6:1e:44:74:
ff:fa:5a:ce:69:4f:67:38:07:44:f0:0c:9a:7d:f8:c9:69:ff:
d6:dc:0e:2b:3c:e1:ef:2d:4d:e6:36:f6:30:12:0a:94:67:ab:
f3:42:96:da:78:44:c6:46:60:57:54:6e:0a:d9:f3:5d:08:1f:
08:db:44:88:32:3c:23:41:97:26:e0:d9:0e:bb:48:df:f5:0a:
92:c2:8e:e4:53:32:07:2d:5f:7a:0f:17:49:00:77:28:c3:40:
42:f3:d3:8b:69:76:7d:74:e9:e5:cd:ef:c4:eb:8c:29:54:8c:
1d:d5:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:54 2025 by rpki-client