Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
File: Sy7AqbnmDoZSFoymnZI58nMHw3I.mft (raw, json)
Hash identifier: IZsu7czljmMuU5mMFDYShPdF/O17OtIWG6rmr9azkWw=
Subject key identifier: E7:0A:A3:51:D6:83:A7:2E:B9:21:9B:7C:C4:73:87:FC:91:80:8A:B6
Authority key identifier: 4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
Certificate issuer: /CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Certificate serial: 01992255B96AE1CDEE12532AC28187B67EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
Manifest number: 15D6
Signing time: Sun 07 Sep 2025 04:01:07 +0000
Manifest this update: Sun 07 Sep 2025 04:01:07 +0000
Manifest next update: Mon 08 Sep 2025 04:01:07 +0000
Files and hashes: 1: I0uKuQxKXFKWPHV3tWp8USg1X-E.roa (hash: WXxoeNxUFy+lmF1DwKWF+FMyVOrtNM4sTEwb6rXBq/g=)
2: Sy7AqbnmDoZSFoymnZI58nMHw3I.crl (hash: 3M4mEqTDexzqQgif26X9rKuc2/Z+a9dR4DIeRXkK/C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b9:6a:e1:cd:ee:12:53:2a:c2:81:87:b6:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2ec0a9b9e60e8652168ca69d9239f27307c372
Validity
Not Before: Sep 7 04:01:07 2025 GMT
Not After : Sep 8 04:01:07 2025 GMT
Subject: CN=e70aa351d683a72eb9219b7cc47387fc91808ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:22:ce:8f:62:5d:df:1d:1b:61:6f:fb:97:
9b:be:7e:76:dc:09:70:c7:29:74:03:f0:42:6a:1e:
bf:e9:8d:c6:6b:a1:39:2f:6d:a7:f1:e1:e7:aa:f4:
a7:06:71:94:05:5a:c0:fa:cb:65:a7:72:a1:54:5f:
4e:ed:6e:9c:39:4d:84:13:4f:04:b5:78:e3:7d:21:
2e:48:f8:1b:51:91:23:57:40:71:54:14:3d:47:8d:
ff:d0:3a:3c:4b:50:89:cd:d2:50:10:33:bf:36:fc:
e2:86:fa:f3:ad:86:d5:82:42:db:63:05:bf:a8:8c:
59:97:1d:b1:3b:46:50:10:ce:a1:cd:ae:cb:ac:50:
fe:ea:26:f4:c4:ee:2a:e0:67:07:62:41:2b:f7:8b:
a1:46:c8:3f:4f:2a:bd:fb:41:64:14:d9:e3:e3:c8:
6b:ae:d7:9b:60:36:67:d0:ca:5c:7c:27:8f:ce:8c:
b8:59:c6:5d:c2:ae:f0:b1:21:65:23:14:89:6b:a4:
5b:a2:65:dd:71:9f:a9:cd:5c:af:eb:86:76:ac:59:
69:13:be:c0:b0:44:06:50:43:60:55:49:68:c3:96:
28:ca:0e:1b:19:a4:5f:08:f3:e4:f1:df:df:5e:9c:
9d:ef:4b:e3:6e:76:f4:7d:e6:60:26:89:35:6e:aa:
ce:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:A3:51:D6:83:A7:2E:B9:21:9B:7C:C4:73:87:FC:91:80:8A:B6
X509v3 Authority Key Identifier:
keyid:4B:2E:C0:A9:B9:E6:0E:86:52:16:8C:A6:9D:92:39:F2:73:07:C3:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy7AqbnmDoZSFoymnZI58nMHw3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fd53f7-8315-40d2-915b-cd0f59c28d2d/1/Sy7AqbnmDoZSFoymnZI58nMHw3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:31:56:cb:f0:35:90:3c:c7:1f:fe:2d:32:08:ef:98:ed:
d4:2c:bd:b1:57:08:33:6e:d6:b1:bf:8d:a0:a7:f0:7d:7d:27:
97:84:dd:eb:2e:6d:36:3e:a1:c7:5e:f1:21:5d:49:6a:6a:e1:
bd:67:8b:8f:6b:fe:89:1f:7a:f5:a2:dd:20:6f:59:09:73:f5:
11:c1:6f:27:0f:38:68:19:9a:2c:fa:b0:4b:33:db:9b:cb:d5:
9d:25:04:63:9b:17:a8:a6:83:b9:df:fd:d4:48:7c:20:09:12:
07:36:bc:d8:0d:f0:b4:eb:32:3e:3b:9f:87:e3:ff:11:63:2d:
0b:ca:17:14:67:8c:a1:b0:97:b9:1a:f6:2b:b0:f1:d8:6c:28:
c9:5e:e7:8e:92:90:73:f2:10:90:db:07:c7:3b:f9:a4:a0:4a:
7f:42:c5:cf:94:3e:1e:cd:0f:73:00:42:b1:1b:79:10:3d:09:
14:dc:69:1d:a5:96:3c:fe:15:83:6b:9a:fd:90:3b:59:49:1c:
99:85:ef:5c:63:7d:9c:6a:74:d1:f2:a4:58:23:b6:48:2e:c1:
cf:02:bf:7d:75:86:37:e5:24:94:91:94:ae:21:87:00:73:8d:
20:44:2f:65:4d:c7:5c:65:f9:0e:c9:fd:d6:20:fe:af:e1:c6:
ac:d4:cb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:09:18 2025 by rpki-client