Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: +Bc7P2rmxcZKxasaovD3J38yEPWSFZtnxNbOe15HohI=
Subject key identifier: 19:61:70:A3:FF:D2:10:AD:AD:C1:58:93:14:B5:43:59:9B:BF:D9:E2
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019A006BE73C9FD74A28F2A072516F0B2AC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 07:01:02 +0000
Manifest this update: Mon 20 Oct 2025 07:01:02 +0000
Manifest next update: Tue 21 Oct 2025 07:01:02 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: CuXKxWtpMVpUBnkGHlWrE/4bc8eiLQUiuK2mc+Htvd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e7:3c:9f:d7:4a:28:f2:a0:72:51:6f:0b:2a:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Oct 20 07:01:02 2025 GMT
Not After : Oct 21 07:01:02 2025 GMT
Subject: CN=196170a3ffd210adadc1589314b543599bbfd9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:65:1b:e4:d5:cd:8f:db:4d:50:40:9d:22:83:
58:d9:07:13:b8:46:c6:81:00:af:14:a1:3f:b4:f0:
da:4e:e1:32:9e:58:30:8b:dd:1c:8c:0c:7b:eb:0c:
61:87:ef:90:b8:1f:03:6b:e7:92:7b:10:aa:1f:c6:
a2:41:12:4b:30:c9:4e:af:a7:f6:92:1f:ca:22:5e:
c7:1a:cd:49:fa:e2:90:49:86:01:76:c8:9c:c0:55:
d0:d8:1a:fe:79:a9:16:c2:6c:aa:65:a2:b1:2d:4c:
46:26:03:32:90:03:95:ce:9f:72:bd:b0:b7:e5:e2:
69:8b:18:b4:4d:c7:14:21:2e:70:0c:94:81:e1:40:
f1:64:bd:fd:ce:1a:62:90:81:fa:41:4f:aa:24:85:
67:ff:46:86:23:72:a2:0b:e0:e7:04:c5:46:4a:9f:
af:72:a7:a7:c2:59:f6:91:8d:79:f5:a3:48:6e:ae:
c1:ec:27:3c:41:68:0d:78:23:0f:d9:28:b2:d3:b4:
e2:55:b3:c1:b6:23:55:ed:99:a1:a3:0a:4e:88:39:
99:12:a4:68:92:1a:0e:8a:e1:95:42:eb:36:d3:0c:
c5:5e:38:60:0a:52:49:6b:13:0c:ec:f1:34:54:00:
43:60:e7:cf:cb:fc:77:4f:ef:9f:a0:e0:35:58:c3:
ae:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:61:70:A3:FF:D2:10:AD:AD:C1:58:93:14:B5:43:59:9B:BF:D9:E2
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:54:cd:ef:5f:9e:e6:a0:38:71:de:4e:d3:1b:80:12:28:
f0:03:f1:94:1a:92:b8:05:74:94:63:e1:4c:bb:7c:ea:fa:eb:
87:71:3a:6b:f4:30:da:62:9f:f0:29:83:e5:81:c0:a4:78:d2:
1e:78:8b:29:2f:ef:5a:6c:7c:c9:02:04:ec:9f:64:49:8b:04:
a1:47:89:43:18:95:49:1a:45:65:9f:a4:50:18:c1:46:fa:e1:
0b:84:a4:61:12:0e:03:0b:a0:f6:b6:e5:f0:7e:f7:ca:e9:d5:
e4:0b:6d:94:3d:f0:a7:dd:1c:cc:1c:29:af:1c:ee:7e:7e:9c:
a7:47:4f:28:f8:d5:db:42:ab:88:10:61:b2:12:99:91:56:8e:
ce:34:27:5e:5e:c7:d6:68:9f:87:85:ee:a9:51:4d:6c:8f:10:
ad:e2:f1:09:8f:09:43:33:a9:ec:7e:71:fa:3f:3e:8e:93:4b:
27:3d:a7:5f:51:63:8d:e8:08:8c:ec:22:9b:e0:f9:c0:7f:06:
e1:9d:4f:19:1f:e5:3d:21:54:02:6d:67:1e:86:e8:dc:12:6c:
65:41:5d:16:e5:98:99:9d:38:e8:1f:10:0d:76:10:38:0e:ff:
48:e5:1b:4f:66:b0:02:2f:a7:46:6b:96:a4:be:e5:13:56:4d:
fe:0e:38:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:52 2025 by rpki-client