Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: k447dX2LZIdeM7YOHezh6bbU/TyFfEGF71xazFK2/+g=
Subject key identifier: BD:A8:6D:CA:3F:18:7A:2C:4D:D8:D3:8A:73:FD:F7:02:20:15:1F:67
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 01974779DDF476393D876E6C9F569C2E6CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 150E
Signing time: Fri 06 Jun 2025 23:00:58 +0000
Manifest this update: Fri 06 Jun 2025 23:00:58 +0000
Manifest next update: Sat 07 Jun 2025 23:00:58 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 3pHRQ1QuSSRq4PaW7c3WcUV5y+zpe2Hv2oV6t1C+63w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:dd:f4:76:39:3d:87:6e:6c:9f:56:9c:2e:6c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Jun 6 23:00:58 2025 GMT
Not After : Jun 7 23:00:58 2025 GMT
Subject: CN=bda86dca3f187a2c4dd8d38a73fdf70220151f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:74:3a:b8:88:d2:f3:81:39:8a:02:54:3e:7d:
51:e1:62:1c:0a:83:19:6c:2b:db:24:ae:9f:c5:df:
f8:fe:eb:64:ef:f5:01:f1:68:3e:b4:bb:87:57:0d:
30:9d:06:82:b8:f7:23:13:14:55:86:de:a5:b5:9f:
93:a5:5d:89:44:78:c2:98:0c:d0:f0:09:a1:b4:5c:
55:e6:21:65:c9:97:ad:9c:22:db:9c:33:22:4e:87:
60:cd:fe:30:c0:ad:8c:11:26:11:48:3b:a2:c0:85:
d8:54:dc:97:90:3a:93:7e:6a:19:07:f0:5c:ae:8a:
80:3f:9d:7b:b2:75:5f:58:98:98:75:fb:22:96:b3:
22:e6:23:bc:69:0e:b8:d8:9f:ec:a5:b9:eb:d5:8b:
d1:a9:b0:b1:c4:a7:9f:bf:aa:cf:e5:50:7d:1a:93:
14:71:0d:b7:ee:94:94:29:96:05:f7:ec:84:56:df:
ba:ad:e0:89:5e:77:34:9a:4d:b7:cd:2e:37:ec:f0:
b1:8a:60:cc:d0:2c:fc:08:8c:ae:da:02:bb:65:84:
e1:4c:c4:3c:14:b7:e4:2d:fa:eb:14:13:38:de:d7:
f1:a6:55:6f:b6:2f:7e:f4:b2:21:46:5b:0a:9b:96:
9a:f8:04:d3:f7:24:cf:1c:e0:83:e4:d2:fc:d4:ac:
62:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A8:6D:CA:3F:18:7A:2C:4D:D8:D3:8A:73:FD:F7:02:20:15:1F:67
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:48:36:3d:d7:a8:de:cc:3e:c3:dd:d6:1b:c5:40:22:a3:f0:
6e:b6:3a:0b:3b:6e:c1:1b:c4:01:fc:85:a9:ec:f2:a9:fc:74:
60:f9:b5:6c:e1:7c:6b:76:84:53:54:f1:ee:5a:86:33:aa:fd:
28:6e:39:04:67:42:43:1e:04:73:1d:c2:43:6d:96:d8:ea:5a:
59:5c:a7:24:0d:c9:a6:be:fd:c1:f4:6a:2e:b4:18:3a:e2:3b:
9e:63:02:0e:52:80:0a:51:fa:04:5f:6a:fb:08:b7:83:c1:d1:
ec:3c:bc:5e:c2:6b:b7:a8:aa:22:e4:db:24:e1:63:7e:1a:00:
70:b5:08:ae:c4:d4:b8:59:6c:c4:8f:b1:9b:b9:1c:e2:d9:19:
7e:b6:77:a3:76:c9:34:3a:1b:41:cd:3f:48:13:9a:c5:bd:b3:
9b:9e:36:ad:90:c6:e8:95:2f:f1:08:43:10:8c:1d:10:15:e5:
c3:b7:4d:6c:8f:10:29:16:bf:ea:fb:69:15:fb:75:3e:40:51:
58:5c:47:09:24:47:ee:92:a6:c9:c5:c2:82:e4:55:61:16:31:
2d:1e:1e:bc:02:8f:28:dd:e9:4c:78:4b:76:be:24:45:04:3b:
89:0d:c6:9a:89:e5:b1:d4:af:8d:4e:7d:8d:17:bc:6d:03:b7:
b4:b5:c0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:17 2025 by rpki-client