Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: PALL6BZHpAQ4iq+6GZrjop5jxejhx5447biUxCO+PO8=
Subject key identifier: 07:89:07:1E:84:86:9D:19:63:65:2D:24:0F:1F:D7:BB:3D:AA:19:8A
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 019849D39472EE69F36BE0F259545B427FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 01DE
Signing time: Sun 27 Jul 2025 03:00:59 +0000
Manifest this update: Sun 27 Jul 2025 03:00:59 +0000
Manifest next update: Mon 28 Jul 2025 03:00:59 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: oNlxrxzuyHqxMfSBGcDmHdDuKHSKJP1J4Jd/GmyxC/o=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:94:72:ee:69:f3:6b:e0:f2:59:54:5b:42:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Jul 27 03:00:59 2025 GMT
Not After : Jul 28 03:00:59 2025 GMT
Subject: CN=0789071e84869d1963652d240f1fd7bb3daa198a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:33:a4:c9:45:58:a8:0e:29:2e:70:d8:46:
1d:7c:f1:ab:b9:38:8f:b1:81:6b:49:76:e4:c1:b3:
0a:6a:c7:47:29:33:cb:a4:e3:3d:3b:6b:61:5d:ff:
96:55:4d:9d:fb:30:51:99:22:d3:c2:89:d6:1e:6e:
a5:53:4d:6b:1f:05:7c:b2:ef:74:d9:a0:4d:65:e0:
17:d2:eb:90:e7:14:f6:f7:5f:e0:7c:85:35:2b:8f:
34:9a:ba:4f:6e:22:a1:e0:60:6f:64:98:21:f3:ec:
6c:11:54:cf:45:98:63:41:23:87:f1:ac:df:93:a3:
76:9e:f0:68:4c:fa:43:7b:f0:f6:89:0c:ae:50:a7:
ca:cd:87:5a:8e:4e:0b:dc:4c:a2:ac:3a:aa:02:dc:
39:f0:60:5b:dd:7c:50:b5:41:47:ae:54:ef:c3:a7:
87:d2:e8:a9:40:44:3f:7a:2a:ea:ea:e5:5c:0f:4c:
28:6e:5f:42:59:de:5f:a2:b9:bc:62:5c:9a:92:24:
54:72:0f:17:2c:29:39:8e:1d:32:3a:f3:2a:cc:55:
c5:9e:c7:bd:fa:28:b1:b6:ce:64:16:05:32:fb:82:
88:36:26:9d:eb:6c:e4:1f:da:f3:a7:6f:46:2f:d5:
9f:09:b2:d0:bb:ae:d9:13:00:4b:7b:fe:b4:8b:d7:
21:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:07:1E:84:86:9D:19:63:65:2D:24:0F:1F:D7:BB:3D:AA:19:8A
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:5c:25:f8:df:e9:f5:40:6e:54:d2:a5:c6:0e:02:a0:8b:
3c:79:4c:1e:06:1c:90:42:15:fd:62:45:68:ff:bf:7d:46:5e:
d5:69:9e:4f:c8:b2:dd:ee:ab:9f:11:6e:fe:76:8b:81:a9:1f:
dc:cd:f8:0c:65:04:d5:ce:3a:f7:92:4d:f0:60:07:65:87:87:
66:fb:2d:11:8b:b1:65:1b:58:05:bd:c9:34:d1:cf:3e:fb:e7:
bf:e6:2e:6b:2d:df:ef:5c:10:b0:4a:2e:b8:9f:0e:d8:8c:34:
29:c4:80:ae:21:ab:89:cc:f8:26:22:e4:5b:fd:a7:c6:b4:37:
86:fc:de:6f:b6:e4:e1:11:42:16:ce:8a:21:9b:59:8c:ee:01:
b2:f1:b6:75:c2:3e:16:cb:ef:84:96:a0:4e:a0:32:3c:4a:18:
d0:c1:1e:08:c0:da:58:80:bc:6a:19:fc:45:8d:ed:fd:a0:21:
b1:99:55:0f:c5:88:4d:74:f3:ad:d6:5f:85:4d:ba:9e:b5:83:
b8:22:15:a6:46:b1:df:04:7a:a9:7a:55:83:ef:53:9d:48:36:
dc:ae:0f:78:1b:07:28:06:6b:0e:77:86:59:45:db:28:2e:9a:
f0:fa:12:2a:e9:89:05:a5:ed:c7:f8:32:e2:59:d9:45:53:29:
b1:45:83:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:39:32 2025 by rpki-client