
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: bLAl8y8FaRI4KWkIFf6wLZIvxuHEqOd6sVuE17pkjB0=
Subject key identifier: 0C:8D:B2:B7:DD:A3:4F:14:67:BA:D8:C3:63:B7:11:A8:2E:80:26:BD
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0198D661012859C495367E455136E870ADF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0DBB
Signing time: Sat 23 Aug 2025 10:02:18 +0000
Manifest this update: Sat 23 Aug 2025 10:02:18 +0000
Manifest next update: Sun 24 Aug 2025 10:02:18 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: BHeyRvMnP7//pyOX4Z8K3dFy0GJq6+9P3qyUORYGrYg=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:01:28:59:c4:95:36:7e:45:51:36:e8:70:ad:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Aug 23 10:02:18 2025 GMT
Not After : Aug 24 10:02:18 2025 GMT
Subject: CN=0c8db2b7dda34f1467bad8c363b711a82e8026bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:42:16:66:eb:37:9e:6b:b9:05:b7:74:fc:
aa:b2:0a:f9:81:6f:f5:17:50:2e:7d:ac:cb:74:19:
9f:6b:f9:75:c8:f6:27:4e:90:fe:05:19:be:8d:bd:
e3:c6:52:d4:04:f5:3a:03:50:7b:30:87:b6:e5:cd:
1c:c7:ff:30:20:43:46:fe:e9:35:92:f3:b5:25:f9:
44:99:9a:c2:c3:44:ed:91:32:18:eb:70:ce:85:04:
07:b8:4d:d9:f9:fc:e1:35:31:7c:d8:ef:7a:72:f7:
07:29:ad:de:51:f4:9f:70:1b:40:0b:b1:c2:42:4c:
82:8b:be:fa:98:d6:d9:9b:ac:5c:49:68:fb:45:49:
3b:5d:bd:2e:7c:87:32:9b:83:ac:89:73:d1:2d:d5:
dd:62:55:bc:6e:0b:eb:58:48:01:3d:0a:45:28:c2:
53:21:88:08:6e:8a:af:58:22:55:4c:5b:af:16:60:
65:bb:3d:1f:9f:50:ba:c7:e2:66:2c:27:22:21:b1:
2c:2b:43:e7:43:5e:e0:89:8f:25:f2:c6:4a:1d:b5:
39:77:e6:c4:a1:b9:b3:33:00:eb:7e:0b:dc:87:03:
b9:01:04:62:fe:38:34:00:8a:09:91:4d:c2:b4:47:
7e:f9:11:64:9f:98:44:ba:9c:41:d5:53:ba:4a:e5:
dd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8D:B2:B7:DD:A3:4F:14:67:BA:D8:C3:63:B7:11:A8:2E:80:26:BD
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:77:df:4c:32:d7:70:32:77:96:06:90:cb:be:6f:8c:c1:29:
9b:d6:3a:10:95:da:e4:4f:8f:e6:2e:74:5c:3c:c5:db:c3:50:
d4:c7:9b:46:46:b8:69:8b:df:cf:62:ee:0d:d3:c5:f6:17:5c:
fe:4b:32:53:55:a9:de:fd:ec:4f:e0:f0:a3:f2:0e:3a:a9:87:
ed:03:e2:e2:72:5d:94:e3:ab:07:34:b8:56:ce:e3:f8:9d:7b:
d3:d6:6e:b9:b7:ab:e7:34:26:97:07:41:50:8a:b3:43:57:9a:
b1:8b:66:22:60:e0:f8:bd:c7:3d:cd:bf:ce:fa:92:aa:8a:09:
ae:4f:10:46:d3:57:75:33:a5:f2:58:13:25:4b:7e:a2:ea:0f:
45:3f:80:cd:c9:6c:ee:3c:fc:d5:e3:89:42:7f:d5:d5:8f:1e:
10:54:71:b8:0e:2e:c9:82:94:ee:80:3b:f7:0b:0c:30:c5:2e:
52:18:62:98:01:41:4f:71:50:5c:13:ba:24:60:23:b5:ea:07:
7e:1c:b2:ed:46:1e:12:9e:35:c8:cf:95:d5:c6:e5:b9:62:5c:
48:16:81:88:f0:16:c7:02:e9:0b:cb:5c:bd:52:67:59:99:47:
71:af:48:b6:d7:74:21:2c:de:2f:21:93:a3:21:e9:8b:c2:5a:
f0:d1:b5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:04 2025 by rpki-client