Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: 3cLfPjQi5Ht8lS91EjcG15esdUabGJtG/c1BNdvHw3A=
Subject key identifier: D2:5B:36:8B:21:CE:0C:DD:C6:F7:CF:F0:07:AE:11:AF:D7:C1:75:3B
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01985532DDCE815234C4B57D531A0816BA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1613
Signing time: Tue 29 Jul 2025 08:00:53 +0000
Manifest this update: Tue 29 Jul 2025 08:00:53 +0000
Manifest next update: Wed 30 Jul 2025 08:00:53 +0000
Files and hashes: 1: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: HtfKERvZiu2yATgun3ESegUitZL6oztoWcbm318rT9g=)
2: xEp6XmkmNbTybu1XUwMmDt6_9jE.roa (hash: cZqbPTueBj9vCDYnLlC1UgUveS09KimRo59Frnm2fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:dd:ce:81:52:34:c4:b5:7d:53:1a:08:16:ba:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Jul 29 08:00:53 2025 GMT
Not After : Jul 30 08:00:53 2025 GMT
Subject: CN=d25b368b21ce0cddc6f7cff007ae11afd7c1753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:f8:f2:78:92:64:77:98:b2:78:47:40:52:
65:6b:9a:51:93:70:c3:85:64:eb:06:f0:02:f0:f4:
5b:c8:44:98:95:89:50:32:56:24:a5:ff:fd:69:b9:
2c:ed:c8:61:72:15:fc:53:1f:09:65:ad:53:55:6d:
f3:75:64:03:50:05:49:84:46:72:06:ad:a4:c1:85:
24:bb:3c:6b:2a:cc:a9:81:56:84:11:5e:48:a3:cf:
23:65:94:d2:a5:6a:9a:89:2b:b6:69:b9:8f:3b:7c:
79:e2:2d:9c:68:51:6d:58:0d:cb:5d:20:e6:23:3a:
aa:54:4b:a7:3f:b4:70:e7:d3:b7:4e:b6:83:38:05:
c5:9c:ce:11:39:46:16:dd:86:2d:6c:7b:d8:0b:bd:
8f:80:ca:ff:14:13:c5:9d:71:d6:ef:1f:8f:1d:15:
2b:f2:b2:11:f1:1a:5a:3d:7b:2e:69:3c:1f:16:f7:
31:78:2d:26:a1:fa:da:73:72:c5:a0:02:eb:72:05:
26:4e:45:93:df:18:83:b8:aa:b3:8b:31:3b:25:e0:
2b:00:2d:3d:69:f2:c1:c3:d7:e6:13:c7:a8:e3:e2:
17:42:46:d0:81:28:a1:c7:3d:30:16:12:18:65:2c:
12:e1:74:39:49:ec:93:76:48:54:09:34:b7:a3:c5:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5B:36:8B:21:CE:0C:DD:C6:F7:CF:F0:07:AE:11:AF:D7:C1:75:3B
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:24:b3:f6:7c:c5:d0:cf:ec:60:7e:82:bc:ff:41:ab:b2:e1:
63:01:e8:19:bf:02:73:a6:03:46:09:10:1b:13:44:9c:97:2d:
e8:01:a3:5e:be:ff:be:02:b1:31:56:32:b9:58:f9:3d:3e:90:
83:4f:9d:b6:4c:04:9e:28:48:39:33:07:9c:46:a7:9d:53:ac:
35:48:61:9e:88:1c:b8:4d:07:96:25:49:c5:64:d2:40:36:58:
33:e5:48:67:ff:aa:df:97:79:d3:89:c2:21:54:8d:7f:d6:09:
91:bb:14:f9:53:33:5e:de:a7:7b:70:fa:0b:e3:9b:02:7a:37:
38:24:fc:59:e6:cf:3c:c9:b7:69:97:3f:5e:19:82:c8:08:97:
6b:2e:6b:12:d7:5f:9b:4f:93:85:38:32:2b:61:dd:1a:ce:a4:
f7:df:0c:85:11:95:46:d9:34:41:50:27:63:fd:a2:37:3c:49:
8e:e8:15:a0:40:5e:ac:68:82:88:10:af:71:fe:f6:43:87:a3:
34:03:e4:40:38:57:08:c2:de:b5:67:38:a3:f3:46:42:f8:0b:
3b:97:3e:43:8d:3c:51:86:63:51:11:8e:55:6d:fc:c2:72:57:
07:df:60:03:fb:69:61:30:e1:f2:18:a2:b4:fb:0d:63:c2:cf:
47:23:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:39:43 2025 by rpki-client