Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: BcWZBOGT1wTY9/v4iUuHuqTeAUKYcxU26xQSvHIotMY=
Subject key identifier: 79:01:24:A4:5F:5A:65:05:3D:A9:DF:15:4A:BC:97:E7:36:0F:22:E7
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 01982FDCE19842C1FFE710563A85A5FAAE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 1673
Signing time: Tue 22 Jul 2025 02:01:01 +0000
Manifest this update: Tue 22 Jul 2025 02:01:01 +0000
Manifest next update: Wed 23 Jul 2025 02:01:01 +0000
Files and hashes: 1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
2: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
3: 4eOCFNOBECX2Vv6GWaN08OGzQEk.roa (hash: SHh7w4LZwKE1It7Jc8tpdQbiqOFLXylf+YxEAvmby8E=)
4: J3_YLrgVTtHhaIXMn-n8MERklDk.roa (hash: a/80gAPIMgHXsY9Cw4xHsmJ3FXrDPwo71ePNixo6CIQ=)
5: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
6: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: zXMkYGXwZ/2RpZMw7sKHMifCHrroNry9+GwVUYCJEhw=)
7: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
8: rHTykAFRMMhCD9nS_bBwMQq3wlg.roa (hash: N6ZZ7BxbwbLPSHJvcUQzzld1J542SpEPgWc0QrEIaRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2f:dc:e1:98:42:c1:ff:e7:10:56:3a:85:a5:fa:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jul 22 02:01:01 2025 GMT
Not After : Jul 23 02:01:01 2025 GMT
Subject: CN=790124a45f5a65053da9df154abc97e7360f22e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:c0:9d:90:28:e0:6d:ee:e2:9c:38:2e:d2:
83:91:71:f0:63:f6:8c:dc:09:5e:04:26:4f:59:f7:
bd:c3:d5:08:22:9b:47:2b:98:8b:4a:5b:ba:55:90:
e5:5d:7f:6c:0e:55:67:87:a7:bd:a3:b7:0d:34:d9:
91:67:2f:fe:6d:4a:e2:a5:03:05:78:08:14:f4:12:
38:eb:b7:b6:ca:59:b8:84:4d:b5:35:f0:6c:cf:ab:
f5:2c:15:06:22:2a:70:10:ec:75:6c:0b:cd:29:f5:
c6:4b:a6:46:19:a2:05:c7:a4:14:2a:a8:f2:8a:21:
32:f1:e0:f8:70:e0:db:13:fd:e7:ba:b4:10:54:f9:
c9:80:84:e7:91:ba:54:a6:32:9d:19:be:e3:54:af:
2d:9d:cc:cc:e6:b9:f8:72:a9:6e:b8:af:15:1c:f1:
7c:22:25:6f:47:6b:0f:61:c1:ed:c2:09:bd:d6:71:
ff:d8:74:26:28:bd:8e:c0:a1:a9:c7:b7:85:50:34:
39:e5:5d:4a:8e:60:4c:5c:9c:fc:90:de:dd:f5:fc:
f4:41:ce:e1:d0:b8:87:33:c5:b7:87:8e:a7:97:19:
cf:e5:dd:1e:88:1a:42:57:13:4f:a3:dd:6f:39:8b:
2c:27:85:64:e9:2c:64:5b:19:4e:3c:fa:73:aa:e1:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:01:24:A4:5F:5A:65:05:3D:A9:DF:15:4A:BC:97:E7:36:0F:22:E7
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:52:05:fd:62:db:4e:ba:5a:69:d1:b0:cd:11:67:6c:d6:21:
a7:1e:3d:72:31:0a:91:86:71:47:d8:ab:d0:e4:fe:94:ca:3d:
c3:1a:20:7f:8e:bb:f4:5e:a6:d3:8b:e2:2c:0d:1d:a9:65:e3:
37:30:d3:21:8a:e7:50:4f:28:52:65:34:d1:03:dd:ae:a6:5b:
1a:bb:bb:97:a8:37:38:5b:02:cf:89:9c:dc:11:81:cf:74:55:
03:17:55:61:cb:3e:35:d4:ff:4e:bc:b9:78:24:5e:8b:c4:e0:
11:a5:11:71:42:6c:85:13:bc:f1:3f:ad:36:a7:f0:ab:a3:8e:
86:9a:9f:f0:3e:2b:b6:90:94:17:ea:96:66:65:1e:9c:2a:f3:
e3:fa:50:79:d9:d2:a7:61:3c:7d:5b:33:63:b5:3b:9d:c8:5a:
ba:a9:ce:4f:6e:6b:98:9b:3c:6d:e4:e3:57:05:28:cc:e5:63:
fd:2b:b1:01:88:94:27:b1:e6:34:46:52:c3:5e:77:28:54:e9:
97:e3:86:f9:84:03:64:7d:90:ab:d7:fc:90:68:4b:f8:92:cc:
38:b3:ed:77:91:33:2d:33:6f:bc:a7:a1:ae:4c:bb:a1:a3:ec:
40:ca:27:ec:1a:82:d8:9c:ad:e0:72:90:08:41:bc:cc:b8:11:
57:5f:7b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:29:59 2025 by rpki-client