Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
File: SY9VU0446sLDJ6lB4aJrnEAxvhg.mft (raw, json)
Hash identifier: NW9JhLFuTfmPV1WMo6AwODGDaKhLRLZ3MJOkV5iLV/U=
Subject key identifier: C9:95:5D:26:0F:CA:EF:9D:35:68:91:38:55:9F:25:F0:FD:F4:DB:CB
Authority key identifier: 49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
Certificate issuer: /CN=498f55534e38eac2c327a941e1a26b9c4031be18
Certificate serial: 0199364A626E1EE43C31D58F501F50008D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
Manifest number: 0D62
Signing time: Thu 11 Sep 2025 01:01:08 +0000
Manifest this update: Thu 11 Sep 2025 01:01:08 +0000
Manifest next update: Fri 12 Sep 2025 01:01:08 +0000
Files and hashes: 1: SY9VU0446sLDJ6lB4aJrnEAxvhg.crl (hash: HHwJ7CKHLW78Z3wvK/axHeaoGHzdSZutZv6DRFTOvAc=)
2: bTKBc42tXDi_zX0dMq0HddtScgI.roa (hash: lEi06vaib9NpWsrvDpoqTavKihSNsj4G7hhaYfH95VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:4a:62:6e:1e:e4:3c:31:d5:8f:50:1f:50:00:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f55534e38eac2c327a941e1a26b9c4031be18
Validity
Not Before: Sep 11 01:01:08 2025 GMT
Not After : Sep 12 01:01:08 2025 GMT
Subject: CN=c9955d260fcaef9d35689138559f25f0fdf4dbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:dc:15:09:e7:a0:00:8c:de:d4:bb:1c:5d:a4:
0e:d8:e3:cc:f0:7e:d4:cd:f5:01:e7:5b:66:ee:56:
a0:a3:73:b7:ac:b5:81:b1:30:47:72:14:56:b8:f1:
72:51:81:69:74:da:01:b8:4c:c0:49:da:f7:cc:79:
37:7c:71:9e:7f:b7:8e:72:52:b0:f1:84:e6:0b:4e:
9c:a9:2d:02:ca:db:c9:64:f8:ff:62:0a:75:0d:81:
64:66:d9:40:f2:36:df:2d:d0:49:15:26:3a:a3:89:
f5:61:68:2f:ce:72:69:25:a5:34:f5:16:33:96:5d:
75:4f:5a:52:56:c4:ac:a8:7e:66:68:72:25:65:55:
4a:12:3c:87:e0:0e:da:05:80:a8:1f:83:d7:4f:1c:
6d:d5:2d:8a:dc:26:16:f8:13:d0:e8:8f:8b:ca:4c:
94:7a:a7:28:72:b0:5a:4a:89:4e:fb:28:ff:63:8e:
87:e5:a9:df:a6:14:3e:41:a4:b5:3b:59:08:45:4f:
da:d7:56:10:66:cd:9e:fe:b0:e6:8f:d4:cb:e0:44:
68:ce:dd:c5:03:0f:b4:a5:30:cc:5a:c9:43:e6:03:
6c:6d:05:f1:6f:23:4a:05:6b:a3:4d:3c:ef:86:6d:
f6:a0:64:4d:a5:6f:83:e0:60:b3:34:c9:1d:37:b4:
5f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:95:5D:26:0F:CA:EF:9D:35:68:91:38:55:9F:25:F0:FD:F4:DB:CB
X509v3 Authority Key Identifier:
keyid:49:8F:55:53:4E:38:EA:C2:C3:27:A9:41:E1:A2:6B:9C:40:31:BE:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY9VU0446sLDJ6lB4aJrnEAxvhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/25b37f-3b68-484e-b29f-3ee6362ea37b/1/SY9VU0446sLDJ6lB4aJrnEAxvhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:89:a4:53:87:f6:51:f3:6b:34:3b:b5:87:e1:e3:51:ea:2f:
c3:cc:e3:71:3f:81:30:20:06:3c:a2:ee:8c:f9:81:59:3e:a0:
a8:6f:3c:61:2f:12:00:ee:d0:b8:6b:f7:4b:ac:eb:ba:08:cd:
a8:8d:31:77:79:4b:fd:4e:5d:fe:85:b0:db:9d:05:7d:26:2b:
87:d8:e6:9b:9a:55:b8:77:6f:f5:8e:bc:82:18:f6:fc:43:25:
93:37:3f:e9:62:1d:51:0f:8a:5b:10:7b:ec:86:b7:53:94:77:
33:50:d7:f1:e4:ba:30:6e:51:07:b9:6e:99:d4:10:db:be:d8:
45:95:d8:78:72:77:21:ef:4b:07:ec:71:d7:6f:b1:22:fd:26:
51:f7:d4:b6:65:cd:b0:e4:6f:5c:fe:24:9e:86:20:93:d4:99:
98:55:29:53:54:dd:32:16:c1:db:10:81:ed:d2:6c:2c:54:e8:
e8:9e:80:9e:cb:88:91:30:d5:db:51:1a:50:1c:e8:dd:be:b0:
aa:8f:56:cb:17:20:74:83:4e:08:29:a1:fd:6c:05:2c:1f:a6:
a6:b0:02:9d:be:e8:80:05:e9:ad:7f:0d:34:c3:95:89:9c:1e:
79:19:1c:2b:50:ea:69:60:e1:dc:d8:4d:c5:3d:06:14:18:5e:
f6:de:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:12:56 2025 by rpki-client