Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: Eyw7K34Y941FW7rqE39Adv82LWaDzu7YcAqCiktMqX4=
Subject key identifier: 45:E4:0B:80:BA:9B:05:26:A1:0C:A2:A1:90:EA:1F:BE:FA:55:DF:30
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 01984AAEAB9F4056989D324F0DCC96D80601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0CE8
Signing time: Sun 27 Jul 2025 07:00:17 +0000
Manifest this update: Sun 27 Jul 2025 07:00:17 +0000
Manifest next update: Mon 28 Jul 2025 07:00:17 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: iK/sp1ajbxERWvt2ENLlUptpouYDmoWqEYK8CMFc2BU=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:ab:9f:40:56:98:9d:32:4f:0d:cc:96:d8:06:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Jul 27 07:00:17 2025 GMT
Not After : Jul 28 07:00:17 2025 GMT
Subject: CN=45e40b80ba9b0526a10ca2a190ea1fbefa55df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:aa:86:c1:34:04:44:43:28:ad:02:c7:cb:b1:
8d:e4:f7:a0:88:52:a2:2f:f2:2d:57:e5:2f:61:fc:
3a:db:47:d2:95:c0:ea:7f:ae:91:e2:1b:1c:fc:23:
38:e7:ff:34:59:a5:f5:2c:7a:9e:c3:10:fc:d2:e9:
24:9e:16:a5:fc:ff:4f:49:8d:58:47:e7:fe:b4:fd:
d0:c2:01:a4:54:40:5f:8b:7b:d0:c0:71:c1:83:9f:
eb:32:fe:d2:dc:95:b8:68:65:ba:4c:d7:f1:17:e2:
24:39:d7:b0:a3:60:9f:74:70:09:db:ab:77:0d:b0:
9d:d6:a9:45:5e:18:9e:bd:70:ee:19:34:ce:3f:bb:
68:e2:54:da:b9:4e:b9:b6:f5:53:38:87:b0:e9:55:
fd:a7:c9:2c:4f:5d:65:76:2f:ef:d2:2c:b6:5e:1e:
aa:54:db:ee:25:8d:81:bd:f7:d1:e3:b6:00:b6:29:
6f:0e:86:32:08:e9:56:fb:e6:08:2c:8a:95:d1:84:
11:17:af:28:57:67:6a:c1:3c:63:98:3c:89:5b:c1:
e0:00:f7:c1:1f:cd:a4:82:2b:9d:29:48:bf:a1:7b:
51:d1:cf:f2:ac:bf:14:41:51:10:aa:b9:ea:15:71:
09:3c:d0:2b:c9:1b:6a:d4:f3:4b:39:3b:f4:13:a4:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E4:0B:80:BA:9B:05:26:A1:0C:A2:A1:90:EA:1F:BE:FA:55:DF:30
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:ff:cb:f9:65:1e:d4:f8:a6:7f:60:d0:43:1f:2d:83:0a:be:
8e:eb:6a:94:fe:49:ed:06:4f:06:1a:d3:6c:11:5c:61:36:0a:
e4:a7:60:d3:70:79:c4:60:99:b8:60:ed:b7:e3:8b:98:8d:d7:
24:20:be:39:02:3b:45:86:1e:42:97:e3:3c:c0:56:be:25:60:
1a:5c:ff:69:b2:91:9d:f2:ba:fe:a7:ec:22:6b:03:28:d1:79:
da:e4:94:dd:5a:ae:2d:0f:b1:7a:55:bb:16:1d:8d:bb:c3:45:
29:46:b3:d1:64:6e:5a:17:c4:25:f3:0b:ae:9a:70:3f:8e:2b:
b6:6a:ba:41:d0:b1:c3:a3:10:1a:1c:de:4b:72:24:24:61:63:
04:06:fc:db:55:f3:27:0f:24:b1:6e:05:26:12:95:b0:d9:55:
5a:39:9f:78:b9:1b:4f:cd:2a:19:3b:16:c3:cf:bd:a0:72:96:
f6:d3:39:ca:d5:cf:ad:ce:3d:3f:1b:88:7d:a8:eb:73:88:f1:
9a:ef:b5:1b:ab:d3:2b:e6:9f:1a:56:38:2f:d5:0a:76:08:87:
d2:90:23:5f:af:25:9c:1a:4f:71:0f:25:19:6b:41:ea:8a:fc:
9c:d1:6f:d8:85:8f:b9:bc:3c:bd:99:1d:45:41:cd:e7:cf:de:
53:f7:89:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:05:03 2025 by rpki-client