Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
File: SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft (raw, json)
Hash identifier: BzwfKpPgjnCcVQMoZZZoFDoqyv4nS1LJBJZodPZygNI=
Subject key identifier: 72:6A:0B:99:A9:C0:76:C8:85:A9:7E:57:51:B7:AC:76:C8:04:9B:15
Authority key identifier: 49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
Certificate issuer: /CN=4983e96ff270f4eca9701258081bb5cf818966c8
Certificate serial: 01974EC5FDC8B2A34DD5D0CD760987E8CAA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
Manifest number: 015C
Signing time: Sun 08 Jun 2025 09:01:27 +0000
Manifest this update: Sun 08 Jun 2025 09:01:27 +0000
Manifest next update: Mon 09 Jun 2025 09:01:27 +0000
Files and hashes: 1: SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl (hash: +GEdeJuZp1CY2E7+tCLdvCFP8krNd6jY4xFsufKlGDA=)
2: kFX-uYTQe-hNv7R7b32AFNfIUMM.roa (hash: dfEaZcwO+Rs/PwwE6piUHmyj/TNPDDXLzEVdyeyS3Ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:fd:c8:b2:a3:4d:d5:d0:cd:76:09:87:e8:ca:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4983e96ff270f4eca9701258081bb5cf818966c8
Validity
Not Before: Jun 8 09:01:27 2025 GMT
Not After : Jun 9 09:01:27 2025 GMT
Subject: CN=726a0b99a9c076c885a97e5751b7ac76c8049b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cb:9e:70:d5:f0:1a:36:73:d7:26:26:83:7d:
b7:e6:f2:08:29:ce:e4:29:de:f3:a6:47:48:ba:d8:
e9:0a:16:20:eb:09:3e:90:ad:73:ec:92:56:2f:c4:
a4:65:ee:ba:fd:c9:94:e7:c0:9b:8a:87:b3:36:4e:
37:40:d0:93:ec:90:03:18:04:1e:1e:dc:7b:4f:5b:
97:53:c9:17:95:91:e7:a5:0c:08:23:9a:1f:27:17:
0e:90:39:c2:9f:f6:24:e6:d5:b8:7f:c5:30:6d:56:
6d:17:aa:a6:04:75:ca:f9:20:6d:b7:21:6e:84:10:
e4:10:c7:14:56:ea:34:d8:de:c5:fa:a2:df:1d:62:
44:a6:1d:c3:d2:9e:bf:05:cb:b3:0b:9b:20:af:13:
d9:92:0e:9a:f3:26:70:1f:0c:af:f2:cf:84:c4:30:
16:1d:d2:39:42:58:14:96:65:03:fb:72:e0:90:d7:
46:68:df:ed:94:8f:25:f9:06:fa:01:99:b7:81:13:
b2:77:54:e7:28:99:b5:df:46:9b:8c:4d:19:7e:fa:
78:aa:4b:b6:98:02:47:54:8b:22:69:be:26:3b:00:
b3:9e:62:28:23:44:d4:c7:30:a6:e1:56:4e:b4:8b:
36:ef:ef:35:a3:b4:d1:a7:19:7e:39:8d:80:cf:86:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6A:0B:99:A9:C0:76:C8:85:A9:7E:57:51:B7:AC:76:C8:04:9B:15
X509v3 Authority Key Identifier:
keyid:49:83:E9:6F:F2:70:F4:EC:A9:70:12:58:08:1B:B5:CF:81:89:66:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYPpb_Jw9OypcBJYCBu1z4GJZsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9e0a67-0d44-429e-9f97-6cf682a185d4/1/SYPpb_Jw9OypcBJYCBu1z4GJZsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:3d:5d:04:f0:b6:aa:1b:f2:76:1b:63:2e:43:4f:83:43:8f:
39:44:a7:c7:7b:c4:01:48:17:b4:f3:d8:1f:77:01:79:b1:bc:
88:3c:9d:e4:14:a7:2f:44:2c:45:51:8b:2a:46:a7:21:ba:e7:
4f:17:d7:f6:56:ed:65:2b:ed:7d:d6:d0:3f:45:3e:aa:28:02:
85:01:96:f4:6f:9e:2d:f2:bb:39:7e:4a:f0:d1:51:ef:b4:37:
8c:97:3b:24:6f:7f:3d:18:95:68:d3:7b:51:13:8f:d2:60:f7:
6d:a8:d6:93:a4:a6:7e:43:58:b4:20:eb:92:07:88:61:91:74:
5d:f0:41:4e:3d:69:e1:6b:95:ff:09:d0:78:6f:01:85:0b:9b:
6d:a7:5f:1c:b7:a2:92:03:d2:7a:bf:4d:1a:ed:c7:74:5d:bd:
40:3b:0d:ef:68:cb:ba:ec:3b:73:8f:a3:40:7b:08:eb:cd:8a:
89:ad:1a:5b:fc:d4:d7:95:cd:ba:b0:77:fd:83:8f:6d:a6:f6:
43:46:c3:7d:ac:0a:92:d5:eb:df:11:18:b8:e1:47:9a:8d:74:
c2:46:8c:27:0b:df:6e:57:d4:6a:f6:69:f3:cc:fd:7f:ed:b7:
40:17:af:b3:52:9a:3e:de:9f:1a:ec:02:4f:a0:af:bd:fd:fe:
b2:7e:b8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:50:36 2025 by rpki-client