Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: sijxx5u1+2GQFNjpKRIIwy0zO+fYW93SMK535d3C9Ok=
Subject key identifier: BD:18:77:F5:6F:F4:5C:72:59:E3:F0:69:73:57:5D:31:24:74:CF:53
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 0198D7062EDA363BB89FFC0BB6611B8DFC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:43 +0000
Manifest this update: Sat 23 Aug 2025 13:02:43 +0000
Manifest next update: Sun 24 Aug 2025 13:02:43 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: MnRve96C9GJn+o6TEpAHcqt2wVjSL9CqjRYZGHwf/6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:2e:da:36:3b:b8:9f:fc:0b:b6:61:1b:8d:fc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Aug 23 13:02:43 2025 GMT
Not After : Aug 24 13:02:43 2025 GMT
Subject: CN=bd1877f56ff45c7259e3f06973575d312474cf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:4a:a8:66:a7:e4:7d:e9:a8:d9:9e:c0:4d:
8d:35:19:51:fa:44:50:11:49:cc:f6:ca:18:b4:dd:
9b:f9:95:b8:79:47:52:36:e1:34:0b:bc:d0:04:2e:
43:27:42:8e:e5:41:9c:ed:1b:8e:73:8b:e7:e9:ca:
13:8a:ac:0e:0e:94:be:e3:84:6b:99:e4:1c:99:c6:
42:b1:01:db:ed:1f:56:20:5e:bd:4f:65:02:21:39:
f9:70:c8:b5:de:2c:2c:a7:6f:81:83:ff:d6:49:5b:
f8:7a:ad:69:b2:02:57:fe:4b:54:18:64:41:79:c4:
5d:62:b1:3d:c3:bd:31:4a:0a:53:7d:c4:60:87:a3:
e8:7c:a8:b2:21:06:cf:bf:f1:37:d7:e6:07:21:d2:
b4:43:20:a3:be:24:99:69:4b:1f:51:7d:dc:be:1c:
25:71:c2:f9:81:39:f4:9b:e6:36:70:0e:64:56:54:
12:8a:02:3d:a7:c3:b4:68:0e:78:5b:44:48:ab:a9:
d9:d2:45:98:16:f7:4f:51:cc:b2:4e:10:28:45:ae:
9d:a5:cc:d3:dc:2a:c2:70:78:83:55:41:a5:c8:a5:
0c:3b:20:41:8f:3e:92:12:c0:20:ab:46:b5:ba:bc:
60:0f:b6:81:56:e3:01:e2:fc:55:9c:48:31:f5:0c:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:77:F5:6F:F4:5C:72:59:E3:F0:69:73:57:5D:31:24:74:CF:53
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:ac:5e:fb:78:0c:af:ad:13:4f:d8:a6:7b:2f:bf:b4:d2:
c4:16:4e:82:f7:83:7a:82:fb:13:c1:40:34:cc:93:26:74:ea:
92:24:da:eb:a8:93:b3:79:34:3e:a3:6d:07:99:ca:e7:98:e1:
ca:50:a6:8f:11:d5:1c:d6:8f:0b:08:24:96:17:44:70:4a:3a:
bf:37:83:2d:93:21:32:11:e7:ea:ee:4c:6b:73:b1:18:1a:b7:
b3:8c:75:16:89:5b:41:18:4c:8b:15:54:ea:d3:23:a0:1d:21:
9d:bc:95:de:c0:84:41:90:09:3a:de:69:5e:ba:78:45:05:0f:
13:2e:a1:7e:d1:ef:f9:57:da:7b:2a:a5:20:05:6a:d5:21:fc:
89:d1:21:0e:14:5f:2d:7a:c6:3c:21:2d:84:96:c2:6b:67:0d:
7d:9f:61:f3:a5:95:66:f3:28:cc:28:5e:0b:45:20:fc:27:9a:
c7:a1:7b:79:40:9f:ae:cd:a6:fd:7a:fb:88:2b:5d:53:fd:b2:
4c:3f:da:b7:f1:b0:d1:d3:17:1b:e6:b0:56:de:17:95:83:ba:
6d:3b:4d:86:f5:00:ab:9e:ee:af:f9:84:16:a4:c5:f5:c1:ba:
f6:1a:52:ec:29:f0:b4:2a:e1:35:e9:bd:c2:fd:94:26:e2:39:
37:76:71:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:03 2025 by rpki-client