
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
File: x_SYwou91eWf9XaMbTikEMqCZkA.mft (raw, json)
Hash identifier: uOtScltM+m80GmN3vbVppF1h8Aj4Lle2BpEunOZuYEU=
Subject key identifier: 20:48:62:AD:37:15:18:7A:50:F7:54:21:1C:BF:11:F4:97:5C:39:18
Authority key identifier: C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
Certificate issuer: /CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Certificate serial: 0199239FD31AB4F57905FD9367B0AD6B7DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
Manifest number: 0E5F
Signing time: Sun 07 Sep 2025 10:01:40 +0000
Manifest this update: Sun 07 Sep 2025 10:01:40 +0000
Manifest next update: Mon 08 Sep 2025 10:01:40 +0000
Files and hashes: 1: x_SYwou91eWf9XaMbTikEMqCZkA.crl (hash: uOyoB1MkHgl61zp9EnTRQMXPd7ySPZTLkcBtiawwgSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:d3:1a:b4:f5:79:05:fd:93:67:b0:ad:6b:7d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f498c28bbdd5e59ff5768c6d38a410ca826640
Validity
Not Before: Sep 7 10:01:40 2025 GMT
Not After : Sep 8 10:01:40 2025 GMT
Subject: CN=204862ad3715187a50f754211cbf11f4975c3918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:c2:38:4f:60:ec:8b:1a:91:a4:44:15:24:
df:c8:10:d5:50:6b:17:bb:ac:30:21:57:23:10:d6:
42:16:5c:bb:df:0e:3e:f0:bb:dd:ec:84:eb:df:e9:
67:e4:07:03:9f:3b:a8:d8:5e:5f:b4:46:d5:e8:b4:
54:d6:3c:a7:40:06:30:1f:12:93:68:c3:87:0c:56:
e4:6f:9c:3a:01:4c:bb:e9:3a:a8:49:18:d4:6a:a7:
1f:9a:4e:03:13:08:24:a1:e8:b2:79:49:6e:62:ad:
f7:95:83:92:16:a6:cd:1d:e0:da:c3:76:9e:0a:63:
52:1d:72:64:c9:89:16:a9:f3:3a:ae:25:8e:6a:83:
f4:b3:07:29:be:80:af:28:de:2d:d9:72:3d:9c:a4:
c9:da:97:d2:44:37:5d:62:91:e6:6c:0e:a0:32:49:
12:ca:d5:a5:a1:86:7a:15:ca:02:8a:5a:bf:a3:e5:
c5:8f:03:75:aa:35:ac:b4:13:80:29:cc:98:dd:49:
78:4b:2e:32:2f:ad:6b:64:e8:6b:10:71:e1:99:5b:
a2:1b:09:dd:78:66:8c:cb:3d:af:84:5a:88:58:94:
5c:5b:ea:53:5d:9d:94:32:4b:31:9c:0d:73:14:5e:
42:53:8a:4a:a3:27:bd:71:f3:cb:19:b8:3d:49:ba:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:48:62:AD:37:15:18:7A:50:F7:54:21:1C:BF:11:F4:97:5C:39:18
X509v3 Authority Key Identifier:
keyid:C7:F4:98:C2:8B:BD:D5:E5:9F:F5:76:8C:6D:38:A4:10:CA:82:66:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_SYwou91eWf9XaMbTikEMqCZkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7dfb24-30f1-4e09-95de-cb19913ebdb5/1/x_SYwou91eWf9XaMbTikEMqCZkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:42:d8:07:25:ae:ee:5e:cd:1f:78:62:82:3c:4e:07:c1:b1:
7f:5f:1e:1a:c2:43:22:e8:af:a5:33:90:aa:62:f5:4f:87:20:
86:e6:1a:0f:17:c1:fc:a4:d2:79:3b:05:7f:0b:0e:f9:df:ae:
f3:f2:20:5c:fb:c0:41:65:ff:d6:52:ca:e1:fb:a0:80:3f:fd:
18:2f:ab:41:61:e4:9f:ce:4b:d0:a4:20:03:4f:87:60:b8:42:
06:f0:28:53:ef:33:c1:4e:20:d6:f8:ca:49:e1:63:5e:77:9a:
c6:ac:72:ea:02:1d:37:12:5c:6b:1f:42:6e:73:aa:6a:fe:86:
24:5b:47:d4:9a:5b:2d:df:35:73:91:7c:e4:e4:ed:13:7d:6b:
eb:06:85:50:4e:a3:8e:90:08:7e:d0:5a:c4:d0:19:68:03:25:
91:d9:11:44:99:d5:7d:26:7e:77:f3:a1:fc:cf:7a:17:62:4c:
1f:49:f0:0f:68:a5:6d:b8:c0:1b:25:5d:31:af:c3:97:4c:aa:
89:92:69:46:dd:c2:f1:f0:ee:f1:bf:64:fb:1b:e7:ed:87:71:
99:e0:aa:81:5b:1b:f0:d4:42:eb:10:44:3c:31:86:c0:7e:e9:
f8:e8:8d:25:56:bd:8b:57:14:67:8b:ee:10:22:37:e8:d6:79:
67:12:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:54:32 2025 by rpki-client