Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
File: SYKxcZtP7HCLpmsper4NsI-tDh4.mft (raw, json)
Hash identifier: 5ikBrZDrlNrQkQfjPSpsR41lcJPr+YnZXUoYPA6P5EY=
Subject key identifier: A7:A8:28:FB:18:1A:47:0E:08:B0:C1:C9:5A:67:6C:44:38:C4:76:9E
Authority key identifier: 49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
Certificate issuer: /CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Certificate serial: 0198C5DB7FEB3D6A19FD5CF3B1BE8C3EF0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
Manifest number: 1413
Signing time: Wed 20 Aug 2025 05:02:33 +0000
Manifest this update: Wed 20 Aug 2025 05:02:33 +0000
Manifest next update: Thu 21 Aug 2025 05:02:33 +0000
Files and hashes: 1: 0KNJIwezZb-3FaFJUpqxhGPSa2k.roa (hash: A4j/zF7WMM+1P8qhcyYitAkcAPo5hxRepqaqzU+Jk9c=)
2: CLHhdOeMNXgExKSCdON9sy75K9Y.roa (hash: 38I9hpL0OwteLRFzo32bZbguPasIk9LP7nDY3tAu3zY=)
3: Mz_0oopSyUD8tIkNMNqzhKplVuM.roa (hash: DOtqb1hTDcb0EkPiiKGPxHU95felEP0mxUFdKqkLpas=)
4: SYKxcZtP7HCLpmsper4NsI-tDh4.crl (hash: gBGrlxKtQpwIgTyOV3P6mDocvsex3WzzoSqt38x12ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:7f:eb:3d:6a:19:fd:5c:f3:b1:be:8c:3e:f0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4982b1719b4fec708ba66b297abe0db08fad0e1e
Validity
Not Before: Aug 20 05:02:33 2025 GMT
Not After : Aug 21 05:02:33 2025 GMT
Subject: CN=a7a828fb181a470e08b0c1c95a676c4438c4769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6c:89:b9:94:a1:c6:53:65:34:af:2f:7c:95:
ad:8f:ef:9f:b0:b4:d9:1e:fa:ed:93:85:b8:b7:99:
b0:ee:eb:46:29:e5:38:0d:24:c8:f1:50:97:44:3a:
6d:12:09:d0:97:ea:32:24:a2:ca:ab:0f:14:af:a9:
f1:a8:ef:aa:39:7d:ae:7f:86:96:f5:f4:17:b4:30:
01:c1:08:32:b6:c7:fa:d7:88:3b:73:7f:b6:d6:d0:
6e:f5:2a:4c:04:d5:6c:d2:14:a4:d0:64:79:44:99:
13:12:05:12:5b:46:8d:d2:fa:b1:ce:60:9b:15:a1:
cc:99:37:4c:2d:65:2c:1a:9f:11:fc:4e:96:3b:99:
5a:82:e0:f5:d4:76:59:35:33:48:d0:9e:d9:df:96:
53:ea:54:90:f3:fc:eb:81:78:86:d1:a8:8c:4f:2e:
6e:ef:4b:ff:00:cb:07:63:70:57:80:18:92:07:36:
e5:15:4e:0c:93:a7:32:25:3e:5e:2b:d4:dd:ad:6a:
7b:83:b7:30:54:6c:c7:46:82:b7:a7:ed:00:a3:94:
e0:06:15:e9:b8:90:47:d9:73:ef:e2:6d:a7:13:ea:
2b:cb:7c:d8:5a:dd:d1:f9:a9:d8:23:e3:74:37:f2:
8f:1c:b0:1d:51:24:8d:11:06:83:9f:bd:d0:65:1c:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:28:FB:18:1A:47:0E:08:B0:C1:C9:5A:67:6C:44:38:C4:76:9E
X509v3 Authority Key Identifier:
keyid:49:82:B1:71:9B:4F:EC:70:8B:A6:6B:29:7A:BE:0D:B0:8F:AD:0E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYKxcZtP7HCLpmsper4NsI-tDh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d8f145-1e0d-471d-8536-ae6b84c28195/1/SYKxcZtP7HCLpmsper4NsI-tDh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:db:0f:af:2a:08:07:d2:4c:5c:0f:73:6f:ea:87:25:71:
63:22:fd:f3:26:b3:e8:65:a3:00:18:bf:01:9f:2f:31:96:d1:
67:bf:b8:f9:90:4e:62:73:c7:3e:9a:d3:79:ca:5d:09:c0:77:
ae:84:b7:1b:27:bf:4d:86:0c:2e:7b:fb:89:07:ab:84:14:93:
c2:dd:07:c0:91:f5:91:3a:7b:9f:2f:0d:91:51:7b:9d:ba:97:
ea:27:8a:55:81:52:35:3b:17:ec:29:cc:07:fa:08:ff:62:fd:
9b:6d:12:0a:03:58:15:9c:dc:b8:c2:88:97:d7:5f:7f:cb:af:
af:5a:3b:37:5c:1d:8a:dd:dc:38:73:69:b7:32:f5:c9:54:5d:
43:9a:f8:9b:3b:4e:a8:41:8f:6c:42:98:d1:3d:d0:97:e5:ce:
67:6b:4a:84:53:ce:e0:20:bf:b0:3d:75:ad:e2:d2:d0:81:41:
78:03:27:cc:b6:58:c1:b0:f9:24:0c:9e:44:32:1d:8c:f5:52:
50:2e:82:9c:eb:58:fe:0d:c2:9b:4e:86:e9:f2:64:d4:67:8d:
4d:9b:9b:ed:86:fa:6b:7e:9b:76:48:58:2a:19:9d:16:ba:df:
76:26:86:70:9f:77:53:3c:40:a7:df:b6:a0:97:16:5e:a1:57:
74:4e:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:20:06 2025 by rpki-client