Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: u5sCCTeycWUA1NSeT9ZKSqvUuGREBTzpQ8YpNcKCCQw=
Subject key identifier: 67:8F:D5:45:BC:09:33:30:8B:59:DB:79:51:77:E5:52:34:72:E4:68
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 01995FB3FCE64B8C0E4925CB1AE4536C1096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 169D
Signing time: Fri 19 Sep 2025 02:00:55 +0000
Manifest this update: Fri 19 Sep 2025 02:00:55 +0000
Manifest next update: Sat 20 Sep 2025 02:00:55 +0000
Files and hashes: 1: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: hVThPskwflFdI1IUxMYEyc6hHGedZd9TNbOseF9Z0Io=)
2: xEp6XmkmNbTybu1XUwMmDt6_9jE.roa (hash: cZqbPTueBj9vCDYnLlC1UgUveS09KimRo59Frnm2fPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 02:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:b3:fc:e6:4b:8c:0e:49:25:cb:1a:e4:53:6c:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Sep 19 02:00:55 2025 GMT
Not After : Sep 20 02:00:55 2025 GMT
Subject: CN=678fd545bc0933308b59db795177e5523472e468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:66:e3:00:d6:3a:37:0f:ff:9a:f4:ab:f4:
47:5d:92:9c:96:91:3b:c7:c2:6a:20:59:97:76:e4:
e6:4a:30:ad:ca:25:cf:21:ce:ba:47:45:8b:37:1a:
80:d5:90:72:ca:2a:97:b4:bb:78:6d:ea:bc:a1:b0:
47:25:24:0b:b3:e4:97:e5:f7:ea:dd:14:c7:0a:56:
4f:dd:81:74:98:48:4d:0d:58:02:91:fe:ba:6e:62:
eb:63:11:6e:33:9a:82:8b:46:91:6d:64:eb:ef:b8:
65:16:0b:cf:da:d9:05:c1:7d:75:68:45:15:36:7d:
1d:57:06:14:3e:f1:a5:14:87:24:07:67:51:71:91:
9e:31:07:d6:5f:72:ff:42:f9:8b:ab:2a:a8:fc:df:
ca:25:7e:03:a3:c1:8c:a9:a9:1f:60:bc:d9:5f:61:
5c:b2:00:24:a6:a8:c4:ba:f7:41:79:19:53:56:ea:
1b:94:51:5b:33:08:a6:66:e6:45:6c:16:77:66:8b:
9b:e6:d6:36:5d:df:18:6c:c8:bc:8a:0b:54:71:27:
6f:70:c3:d5:cd:57:03:b9:37:8d:ce:f3:17:8b:16:
62:cf:bd:62:1a:7c:54:c1:d3:d7:d0:fc:fa:f0:30:
89:22:5a:3d:da:42:d0:91:38:a1:f2:02:be:e0:73:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:D5:45:BC:09:33:30:8B:59:DB:79:51:77:E5:52:34:72:E4:68
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:60:49:a6:f5:cc:e1:b6:f6:7c:5c:42:9a:fc:02:6c:85:83:
95:e8:8f:7f:20:f9:48:a1:88:a7:c3:0c:42:05:4f:cc:2e:b9:
32:2a:0e:74:4b:83:69:ed:4b:8c:8a:c4:da:7f:bd:8f:e8:62:
c3:69:02:6f:0d:20:b1:8f:b8:46:a6:72:00:b1:8d:95:c5:b2:
8a:11:82:cb:76:67:b5:b2:9b:c9:31:91:c6:43:16:1f:76:84:
45:20:ed:f7:c9:d8:03:0b:61:41:f4:63:17:5b:2d:74:56:5d:
5d:f3:9d:c5:a4:0c:ab:70:b9:0a:00:9c:d3:df:54:2a:98:65:
69:f7:23:57:ce:92:cd:41:68:de:4f:1c:18:64:9d:cc:c9:c1:
14:41:82:a3:72:d4:50:0a:3e:a6:b4:15:a0:cb:51:3f:d2:21:
af:eb:8d:c2:72:64:f0:7f:8e:e4:44:32:48:bb:55:23:a1:ae:
d7:46:cd:81:dc:70:48:17:d0:a2:48:c5:21:a2:42:6a:bd:63:
56:c5:d8:50:71:0a:c7:31:d4:01:7d:cf:b7:43:3e:9b:ef:ee:
57:d4:e2:6f:7a:43:cd:43:b5:62:9a:c5:88:da:43:9e:00:ea:
a0:e5:34:f3:27:e6:6e:8c:f2:3e:b9:c0:8b:ca:f3:e3:20:b7:
af:9f:2d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:43:48 2025 by rpki-client