Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
File: SiyGN2LOnZltKrq27eGSnM7ctjI.mft (raw, json)
Hash identifier: lpv6KxFkqum45gpCJ4WbJSdeVgQaKY3G/6d++WYwmuM=
Subject key identifier: 03:4D:3E:C1:DD:D7:78:F4:58:A1:26:D0:39:7E:D7:68:90:7B:8F:44
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 0199239EB241AE80A46137EB03ABAF5105AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 10:00:26 +0000
Manifest this update: Sun 07 Sep 2025 10:00:26 +0000
Manifest next update: Mon 08 Sep 2025 10:00:26 +0000
Files and hashes: 1: HSzy_sdTpMM9eJp_2_sbD1IEYy0.roa (hash: ieQeEh5XwIx3cGbKm9ddEXjqNduJq3qUmYGe9bdZpCY=)
2: SiyGN2LOnZltKrq27eGSnM7ctjI.crl (hash: zAPlU9L9wxXONOjm9kt6itVi7QYIKc1NjLo6VuZrdz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b2:41:ae:80:a4:61:37:eb:03:ab:af:51:05:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Sep 7 10:00:26 2025 GMT
Not After : Sep 8 10:00:26 2025 GMT
Subject: CN=034d3ec1ddd778f458a126d0397ed768907b8f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f8:73:51:7d:1f:f5:05:d4:11:bf:3f:42:1e:
97:25:6e:e7:47:5d:d9:65:42:bf:d4:1b:6c:e9:e8:
4e:df:b6:17:37:6b:71:59:31:66:ea:f9:d9:5c:63:
4d:7a:82:70:0d:c7:35:9c:a6:4a:3b:fb:38:b2:fa:
16:ac:87:09:79:04:e0:9f:29:8b:29:32:e1:33:c8:
61:84:d3:19:37:8f:78:33:07:6c:cc:4c:74:a6:90:
7b:fc:6f:2b:de:08:57:31:07:72:09:05:99:d8:d1:
e6:3c:f3:1b:d0:e5:36:e0:74:ed:a3:78:09:33:c5:
67:b9:fd:e1:6e:b0:44:26:57:28:ed:91:5b:e5:9a:
95:50:0c:f9:b7:cf:34:0f:ff:01:d9:c9:ca:9e:0e:
1b:52:de:a4:29:53:18:70:a5:19:25:7e:4e:55:e7:
d0:68:15:7c:b5:32:bf:9f:ad:52:13:ae:eb:e1:7b:
7b:db:8d:1b:c0:7d:03:56:df:81:20:89:6b:e1:ca:
5a:1b:88:23:02:01:ce:af:95:44:b9:64:4c:b8:d4:
4c:61:65:1f:f1:d9:df:7a:ed:00:46:88:3c:86:c4:
87:2c:6a:60:0a:2b:f8:d9:05:cd:59:7f:f3:79:e6:
91:c8:5e:f4:96:a7:de:ed:c5:ff:ff:49:64:f9:48:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4D:3E:C1:DD:D7:78:F4:58:A1:26:D0:39:7E:D7:68:90:7B:8F:44
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:17:3c:f4:17:7c:5a:2e:99:88:75:08:fa:97:1e:82:81:bd:
60:c5:1e:80:f1:75:68:60:5a:40:7a:a1:1f:b0:0c:fe:1a:57:
7b:de:65:b8:9b:7d:4d:63:e1:99:9a:54:4e:37:94:20:c4:c1:
dc:2f:19:da:37:3d:7a:0f:e6:b7:11:90:2e:ba:34:ea:ed:4a:
46:0b:96:15:f1:26:25:af:5e:5b:83:6e:23:f1:74:75:49:d7:
50:87:41:57:bb:c5:e1:e1:e2:d8:db:ed:09:69:8d:c1:7d:b6:
36:3b:a0:f1:cf:a7:03:b7:e4:cb:88:1c:c5:1e:aa:e7:6f:0e:
bf:f1:eb:5d:83:a5:83:dc:d7:2a:9d:75:44:24:3c:1d:45:4e:
91:af:35:c2:32:48:61:c8:f3:d3:32:8d:a0:db:72:b2:be:7d:
54:c6:9d:24:70:19:d9:b8:af:a0:ed:46:22:7e:40:87:7e:2f:
cb:cf:da:6f:8f:48:9c:89:01:2e:19:f5:30:2c:7b:08:d3:24:
7a:ab:fc:25:b7:73:3b:2b:65:b9:f5:fb:63:5f:b2:f0:a9:bd:
6e:58:82:72:bb:ba:b1:46:8d:90:39:00:c1:07:d9:bd:93:0d:
fe:d1:8c:aa:47:d9:6b:cc:81:15:ed:75:8d:df:1e:91:f0:d7:
e2:28:a6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:28:06 2025 by rpki-client