Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: e8DlTsaxbmVtZuWZ4XVMyCpvVz0LAPj7X3XO0fcwsJ0=
Subject key identifier: 30:90:A8:00:60:56:BE:BA:CE:53:23:5C:DA:FE:F2:8A:6F:CA:1E:CC
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 0197BA7EACEFE2065DD504CE371BB926EF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0D28
Signing time: Sun 29 Jun 2025 07:02:33 +0000
Manifest this update: Sun 29 Jun 2025 07:02:33 +0000
Manifest next update: Mon 30 Jun 2025 07:02:33 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: JBQQ5P9Mr2tp7gajPm2wtvKrrvJsCcthqME4Ugloihw=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:ac:ef:e2:06:5d:d5:04:ce:37:1b:b9:26:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jun 29 07:02:33 2025 GMT
Not After : Jun 30 07:02:33 2025 GMT
Subject: CN=3090a8006056bebace53235cdafef28a6fca1ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:dd:cf:3f:b6:b1:44:b5:3a:c9:4e:0e:4a:
02:60:cd:e9:af:52:12:35:a5:fa:a4:a9:b3:be:90:
e5:54:81:2e:73:70:32:77:fb:6e:b7:30:15:bd:8e:
0c:31:c7:cd:b5:bc:f4:5b:10:ff:6f:52:1d:f4:dc:
08:56:0a:18:6f:31:39:5b:7b:8c:c1:ae:5e:2b:7c:
fb:9d:92:b8:cd:73:11:60:6c:66:b0:d3:82:e5:25:
94:36:9d:a0:66:7a:bb:77:63:28:b1:b4:aa:24:1b:
7e:90:7d:ee:af:43:34:7e:4c:da:5d:ea:de:14:7a:
91:ce:eb:93:0d:06:eb:5d:a0:c3:21:b6:18:9a:00:
a9:8c:70:a4:ba:20:7e:67:78:af:35:f9:65:42:02:
41:cf:1e:07:62:9c:72:94:a8:11:85:07:c7:70:8b:
6a:76:e1:c1:e0:6c:14:64:1e:85:fb:c8:1b:60:d7:
cd:df:85:c9:78:ec:0b:13:e3:2a:90:12:be:e4:4a:
d9:59:92:0a:80:00:7f:2b:06:e3:98:70:3d:b0:53:
25:8a:c0:49:89:f5:b1:29:ee:ad:eb:d3:57:32:1c:
90:02:3e:27:c1:dd:29:d0:b4:e0:8f:15:f8:96:9d:
42:a2:f8:45:e1:1e:70:64:7b:3b:44:34:2b:22:c9:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:90:A8:00:60:56:BE:BA:CE:53:23:5C:DA:FE:F2:8A:6F:CA:1E:CC
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:69:dc:8b:67:37:1f:a6:bd:36:ac:ce:f4:ac:71:e0:03:67:
88:8f:47:f7:75:a8:41:cd:bd:8e:05:3a:b0:18:90:36:a1:75:
fb:98:47:18:3b:42:d3:19:c4:ef:ba:a8:57:0a:8b:bd:73:bf:
da:86:0c:4d:fc:c1:d6:fd:4b:10:9a:40:93:27:bd:08:81:cd:
78:aa:df:27:85:84:8e:42:91:cd:3f:83:4a:8a:4b:c6:18:65:
99:56:bf:c0:24:a3:55:a6:3e:b2:9e:0e:32:6c:85:31:ab:ae:
6a:e8:68:d5:59:f0:5e:31:7e:09:86:4c:d2:1f:2b:e7:f6:fa:
c4:b7:30:15:e3:15:79:8c:5c:b8:53:0a:a0:34:9a:f9:a4:a1:
77:71:67:c7:e7:fa:a8:e5:15:84:c9:c0:5e:3b:3d:a1:5b:d7:
e9:e3:8c:71:c3:12:e4:2d:85:ec:87:70:58:63:ce:52:46:94:
35:a9:6c:61:b4:fa:32:59:38:61:e1:46:f2:0e:28:73:55:e0:
29:19:d9:37:69:7c:88:3c:59:7a:26:80:23:70:56:fe:2c:8c:
b4:c4:b7:f6:d8:6d:ec:27:35:96:7d:10:16:6e:1a:f1:42:f3:
51:8c:5a:da:5e:bf:c6:55:87:f9:f7:8d:7b:79:cd:3d:d5:7a:
b5:53:46:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:46:59 2025 by rpki-client