Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: RYQ1WK0+EAqK4sCux0clAv8qTxcCUWls3Xz+5H58m/w=
Subject key identifier: C3:63:90:11:7F:3F:8D:7E:CB:F9:E9:10:EB:38:78:4F:C6:F2:ED:93
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 019849D3C35B8916E5D5DDF76655531F6B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0F98
Signing time: Sun 27 Jul 2025 03:01:11 +0000
Manifest this update: Sun 27 Jul 2025 03:01:11 +0000
Manifest next update: Mon 28 Jul 2025 03:01:11 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: VXLD+NiGiR+/fhZ4XAS/gtvTRg8LSmKvAZCCj9xvR2g=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c3:5b:89:16:e5:d5:dd:f7:66:55:53:1f:6b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Jul 27 03:01:11 2025 GMT
Not After : Jul 28 03:01:11 2025 GMT
Subject: CN=c36390117f3f8d7ecbf9e910eb38784fc6f2ed93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:07:4b:6e:15:ac:da:46:46:f4:c0:d7:1c:
f7:b4:76:73:d0:d1:70:ef:b4:97:b1:d7:fe:ae:d1:
8b:d8:f6:2f:46:89:e6:1d:8e:fe:08:9f:5c:34:8b:
cb:94:0f:47:bb:74:43:aa:2a:75:1e:a3:2c:f3:16:
67:4e:b3:3d:28:25:2b:64:a8:bb:2a:d1:9e:32:ef:
f0:9b:89:29:f0:97:56:02:6b:7b:00:91:8f:a7:14:
20:be:57:ce:22:02:9b:e6:3d:6a:92:30:be:ff:32:
73:f9:36:5c:73:03:e2:fc:32:69:2b:99:de:50:67:
b6:77:ff:f8:00:3e:20:9c:ff:ad:1b:4e:ff:3b:b3:
b7:4e:4d:a7:bf:c1:da:23:d1:46:32:7b:8a:5c:cd:
bc:8f:d1:09:1d:77:9d:39:d0:f9:ac:5a:e9:94:b6:
39:0b:ad:10:d9:16:e3:92:a9:8a:84:19:24:b1:27:
b7:bd:63:ce:92:b5:a8:4d:73:07:2c:85:fd:d8:48:
ce:9e:3f:ae:23:9c:a0:ef:fd:60:40:2b:c1:2c:0c:
b7:62:46:de:6a:be:27:a4:65:a8:b3:63:d8:68:85:
32:d4:4d:1a:14:9b:01:ff:b8:37:26:f5:d7:23:23:
2a:e0:f9:7b:67:d3:18:63:6a:cf:25:3b:3d:64:a1:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:63:90:11:7F:3F:8D:7E:CB:F9:E9:10:EB:38:78:4F:C6:F2:ED:93
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:62:5d:6f:7b:5c:ed:b7:50:18:fa:47:97:6e:d8:ce:9a:ab:
6e:43:d5:09:93:9a:c1:08:51:c3:a7:d2:b5:36:58:e4:83:c5:
aa:3d:d7:6a:ba:b7:0b:d9:95:88:93:46:a8:3d:69:63:01:ce:
82:e2:74:e1:27:73:98:7e:36:0e:aa:6f:35:a7:96:9c:0e:03:
fc:97:8e:33:a9:ce:99:6c:4a:19:df:b0:03:d6:49:ce:03:4a:
10:54:79:a0:83:c4:89:d9:88:8a:2c:ff:ce:20:ee:d5:b3:07:
ff:9b:a2:11:4f:c9:aa:2c:3d:29:e5:24:38:8e:84:27:4d:bb:
87:0c:9a:0a:d9:70:fc:64:43:a9:8a:69:c5:c0:f5:f6:ae:a7:
f4:92:24:0b:2f:7c:3b:9c:60:ce:ee:56:96:89:4d:16:ab:27:
0a:a8:c9:28:2e:60:23:d8:8f:2c:83:32:51:87:82:f6:57:1a:
9d:99:73:97:7e:e1:a5:31:a8:96:59:9a:0f:37:8d:82:c3:25:
0f:e0:04:50:f2:9d:c8:a7:ba:11:50:57:fb:bf:d9:89:8f:e6:
8b:3c:d3:e6:16:ae:a6:da:a0:17:e7:19:20:b5:a1:ab:3a:f7:
8d:42:40:6c:87:93:6f:f5:6f:39:87:31:23:ab:f9:3b:40:8a:
91:7e:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:26:54 2025 by rpki-client