Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: lvQ3AKAqvR1f7JMI8E/H/HwVIKJqYitJ607EgINNA6s=
Subject key identifier: B5:C9:53:01:79:85:7D:09:C3:2F:9D:0D:5F:71:11:89:62:29:24:EE
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 01992367C988BF8429F215F967A522DC8BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0ACA
Signing time: Sun 07 Sep 2025 09:00:28 +0000
Manifest this update: Sun 07 Sep 2025 09:00:28 +0000
Manifest next update: Mon 08 Sep 2025 09:00:28 +0000
Files and hashes: 1: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: tCF63N8CJ/ekmNlRkR1WRNQXdkvwPD2yB5UHNGToAWw=)
2: nBqkJ21E89xpdJHsjMjUY6q0t8s.roa (hash: cYjf2nhrD03sJ2C+YxabZIv8XeqfYPE9uhBxiZGoO6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:67:c9:88:bf:84:29:f2:15:f9:67:a5:22:dc:8b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Sep 7 09:00:28 2025 GMT
Not After : Sep 8 09:00:28 2025 GMT
Subject: CN=b5c9530179857d09c32f9d0d5f711189622924ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:9e:1f:5f:9d:09:29:53:30:7d:3e:ed:4e:
5d:45:72:2f:88:1d:5b:d2:ff:5e:ce:d1:29:e1:14:
b8:83:06:89:91:e7:ee:fa:54:60:e1:1c:1c:43:6f:
fa:cf:c8:bc:c0:4a:2c:af:59:0a:1a:61:54:3b:c3:
dc:54:83:b3:69:d3:a5:40:5d:f5:55:70:29:ed:56:
99:95:7e:15:61:3e:ca:bc:fd:40:0c:58:2e:fa:11:
6b:11:8b:08:84:fe:17:1e:6c:13:54:8f:d1:96:82:
73:7e:9b:e9:3c:dd:15:4a:11:ab:f5:c6:3f:fc:29:
b6:86:f4:d2:3f:4c:78:68:6f:fb:f5:8a:f9:7f:09:
87:82:52:43:29:ae:6e:54:bc:15:a2:d0:a9:cd:07:
a8:2b:d7:a1:5f:30:8a:f3:20:f1:b2:b3:25:d8:37:
0a:9f:28:f0:37:fa:a3:7e:8e:20:4c:4c:85:58:b0:
c1:50:e9:e9:19:65:15:e1:0c:85:cf:d7:8c:79:d3:
7b:85:d5:54:ad:7a:91:bd:b8:eb:3e:f4:10:08:43:
f1:4d:d4:13:77:c1:27:35:62:c0:ad:76:87:f9:2f:
59:04:ee:a7:7f:c1:0f:c0:3f:e2:4c:26:b5:6e:7d:
00:57:8a:8d:5b:f4:e1:5a:5a:71:26:15:e2:0e:56:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C9:53:01:79:85:7D:09:C3:2F:9D:0D:5F:71:11:89:62:29:24:EE
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5a:20:93:00:11:ed:5d:e9:90:cd:ee:e5:80:c3:e7:9e:30:
10:2b:3e:4b:b2:0e:ee:19:b9:7f:df:59:27:3f:2f:27:a4:82:
b9:20:6f:cb:06:f8:04:ad:20:98:1e:dc:7b:70:be:e0:79:f6:
ef:d8:c3:d1:20:51:62:e7:d9:42:d6:4f:4f:51:f4:d3:e0:b7:
37:73:81:43:28:c0:b4:d4:5b:f7:c1:3a:29:2d:45:cc:94:31:
b0:ec:77:ec:8b:c1:b3:1e:58:60:e4:82:b0:49:01:78:97:85:
e0:bb:31:76:77:36:7a:15:a7:50:d2:7e:f7:8d:14:05:cc:da:
eb:ba:57:f8:b4:25:c7:cb:65:22:9b:6f:56:2a:ba:77:4e:b1:
c1:c5:98:f9:36:81:f6:c6:1d:52:cc:3d:2e:38:dd:b0:e0:d2:
48:df:27:1b:b1:e4:99:f0:d7:2d:52:0a:b1:d8:17:ff:99:98:
e0:f8:94:a2:da:1f:2d:54:ed:8a:66:6c:b8:ce:0a:77:61:fb:
9f:e9:a1:fe:50:4c:8c:00:d8:42:32:8b:47:d1:d9:97:44:0e:
56:a9:b6:fe:2e:f0:87:d9:81:25:6c:45:22:68:f7:e7:ad:2d:
36:53:e6:c4:9d:0b:77:f4:a2:37:ba:f4:72:99:89:77:b7:f8:
00:26:71:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:36 2025 by rpki-client