Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: 3cixXZgcKL+vUf8pAtefs+KpitQSX5pgLg1WHt+QEwA=
Subject key identifier: B9:BC:9C:53:F0:F9:D2:88:F6:69:B0:61:9C:DC:79:25:36:73:BF:06
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01984A0A204C0C1FF3274B7268677E4D04F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 04:00:34 +0000
Manifest this update: Sun 27 Jul 2025 04:00:34 +0000
Manifest next update: Mon 28 Jul 2025 04:00:34 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: 9sJQIfpreMbOv0CpYfWNoDGxhSkeQuLOaR0yNpW/0eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:20:4c:0c:1f:f3:27:4b:72:68:67:7e:4d:04:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jul 27 04:00:34 2025 GMT
Not After : Jul 28 04:00:34 2025 GMT
Subject: CN=b9bc9c53f0f9d288f669b0619cdc79253673bf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:64:6d:98:04:27:9c:01:5e:bd:42:63:99:
75:14:2e:6b:f0:99:ec:c0:93:48:35:97:eb:ab:02:
5f:46:b4:6f:df:6d:93:97:58:94:a9:bd:8e:51:12:
19:b7:79:58:cf:dc:a3:f7:6e:56:cf:a8:81:5d:1b:
40:e8:e7:8b:5b:b4:85:94:b4:f0:9c:41:05:aa:37:
50:7b:92:3b:55:81:6e:27:6f:a4:31:d6:a5:02:25:
c9:1b:30:62:c0:3f:21:1d:39:d5:f6:32:ea:f9:8d:
27:cc:4d:ef:c4:d0:56:89:43:68:10:80:2d:5b:5b:
d1:0f:38:25:f2:5c:be:8e:8f:f8:8c:c2:1c:a4:18:
cf:7f:57:66:23:e1:00:55:ab:88:82:f4:30:3c:c1:
aa:da:0f:e4:a1:a2:91:03:fe:8f:60:f4:21:2c:eb:
c1:4e:7d:1d:47:e3:3c:8d:aa:9f:a8:1f:e2:3e:e0:
6a:f2:32:28:3d:fe:06:e6:a4:89:65:8c:0d:ec:ca:
fc:85:4d:ba:db:06:c3:04:8a:bb:fd:5e:6f:ab:b3:
5b:6f:53:02:e0:26:bd:f5:7d:e3:b8:74:d0:9f:69:
c9:40:38:ec:84:67:59:01:ee:c7:bf:5f:34:34:cc:
5f:1b:9f:50:57:5d:82:39:8e:4b:ca:2b:89:6f:10:
85:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:9C:53:F0:F9:D2:88:F6:69:B0:61:9C:DC:79:25:36:73:BF:06
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:32:8e:76:a7:f0:4f:9b:35:b5:81:2f:4b:1b:34:cf:7d:06:
b7:2e:1a:9b:61:08:b8:a8:ed:f9:89:4c:47:01:de:f1:cd:ad:
c9:3f:29:85:8d:03:af:ce:06:f8:4d:0a:ea:9b:3e:fb:b8:8d:
d5:a4:74:3e:d7:8a:fc:b2:69:41:72:92:53:47:48:de:04:35:
98:04:12:18:17:5b:21:33:ff:4a:94:93:4d:05:05:3e:ef:35:
94:fd:6c:88:b8:c1:3b:70:54:a3:70:6c:c8:fc:71:61:14:10:
7b:98:80:ed:0e:ff:16:2a:ad:5b:54:08:8c:d2:9e:de:d2:cb:
87:fe:87:22:b3:06:09:06:96:e5:45:c9:3a:06:91:4b:75:b6:
a3:9a:e7:90:02:21:95:99:f4:35:76:07:db:30:6c:1c:d9:f4:
d2:e1:2a:4e:5a:c4:d5:d7:97:18:41:1a:c9:5e:d6:e6:bd:3e:
a7:0a:95:c7:26:17:76:32:33:7f:4d:91:2a:67:6b:05:e6:cd:
b4:8b:97:b3:ad:f9:93:6f:b8:4b:8f:26:73:b4:52:00:a8:fc:
71:2c:65:eb:ca:8c:26:47:fe:f0:de:1a:d1:d7:09:17:d4:39:
69:8c:bb:e0:fb:cd:7c:b8:cc:aa:3e:2a:fa:36:ac:e7:f2:fc:
63:7b:44:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCiBMDB/zJ0tyaGd+TQT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZkNDUzZjVlMzVmOWM3N2QxZDcwNmU1NjUxMzhhZGY4
MjI1NmEwHhcNMjUwNzI3MDQwMDM0WhcNMjUwNzI4MDQwMDM0WjAzMTEwLwYDVQQD
EyhiOWJjOWM1M2YwZjlkMjg4ZjY2OWIwNjE5Y2RjNzkyNTM2NzNiZjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5RkbZgEJ5wBXr1CY5l1FC5r8Jns
wJNINZfrqwJfRrRv322Tl1iUqb2OURIZt3lYz9yj925Wz6iBXRtA6OeLW7SFlLTw
nEEFqjdQe5I7VYFuJ2+kMdalAiXJGzBiwD8hHTnV9jLq+Y0nzE3vxNBWiUNoEIAt
W1vRDzgl8ly+jo/4jMIcpBjPf1dmI+EAVauIgvQwPMGq2g/koaKRA/6PYPQhLOvB
Tn0dR+M8jaqfqB/iPuBq8jIoPf4G5qSJZYwN7Mr8hU262wbDBIq7/V5vq7Nbb1MC
4Ca99X3juHTQn2nJQDjshGdZAe7Hv180NMxfG59QV12COY5LyiuJbxCFMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm8nFPw+dKI9mmwYZzceSU2c78GMB8GA1UdIwQY
MBaAFEmP1FP141+cd9HXBuVlE4rfgiVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYt
Mzk3OWVmMGQzMmRiLzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi81NDViMDYtODU3Mi00MTJmLWE4MGYtMzk3OWVmMGQzMmRi
LzEvU1lfVVVfWGpYNXgzMGRjRzVXVVRpdC1DSldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzKOdqfw
T5s1tYEvSxs0z30Gty4am2EIuKjt+YlMRwHe8c2tyT8phY0Dr84G+E0K6ps++7iN
1aR0PteK/LJpQXKSU0dI3gQ1mAQSGBdbITP/SpSTTQUFPu81lP1siLjBO3BUo3Bs
yPxxYRQQe5iA7Q7/FiqtW1QIjNKe3tLLh/6HIrMGCQaW5UXJOgaRS3W2o5rnkAIh
lZn0NXYH2zBsHNn00uEqTlrE1deXGEEayV7W5r0+pwqVxyYXdjIzf02RKmdrBebN
tIuXs635k2+4S48mc7RSAKj8cSxl68qMJkf+8N4a0dcJF9Q5aYy74PvNfLjMqj4q
+jas5/L8Y3tEXw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:37 2025 by rpki-client