Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: R22IcF5vi/FDlDjmYne/W5YUauGiIe3UWJ8PHY7Jq1k=
Subject key identifier: 79:9D:7D:19:AB:1F:5B:5C:BC:7B:0C:2F:87:69:55:90:72:41:6F:DF
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 01976DAB1AB3F87BB63D3E49E007238FF79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0C6F
Signing time: Sat 14 Jun 2025 09:00:19 +0000
Manifest this update: Sat 14 Jun 2025 09:00:19 +0000
Manifest next update: Sun 15 Jun 2025 09:00:19 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: wI+TBWPQHfYSDPepP9z94N3+a2MbGd7AnPTtHB9Acx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:1a:b3:f8:7b:b6:3d:3e:49:e0:07:23:8f:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Jun 14 09:00:19 2025 GMT
Not After : Jun 15 09:00:19 2025 GMT
Subject: CN=799d7d19ab1f5b5cbc7b0c2f8769559072416fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:11:22:c8:6c:20:ce:87:ca:1d:00:b4:97:
39:cc:5f:f7:9a:10:8f:0e:37:ef:a5:d8:aa:a2:f5:
b4:1b:d6:26:c0:dd:9c:69:99:46:ce:94:7c:31:30:
8c:81:a4:14:98:b9:14:c9:48:da:7e:ad:70:f9:b1:
5e:79:49:79:c4:66:bf:d4:54:24:ad:b0:e1:08:45:
62:ae:dc:73:77:a4:33:7d:80:b8:e4:1d:0c:88:ac:
ed:08:a0:37:11:ff:10:ee:3f:f3:aa:2f:d9:15:8a:
e0:cd:4d:25:c7:ff:25:4d:df:4c:1e:1d:ad:fa:44:
91:e1:0b:51:7f:df:1d:64:0e:08:27:08:9f:60:69:
6c:2d:1a:56:ad:ff:7b:9f:cf:17:e4:89:0b:5b:2a:
f4:05:9e:9a:4f:b3:f0:00:c9:13:1d:ee:66:3a:18:
e3:3e:3c:38:c7:59:c7:2f:2f:75:ab:49:ff:14:13:
16:7a:df:73:f9:b0:32:60:28:7b:a5:d6:24:cd:68:
4a:20:1c:bf:1f:a0:86:39:1c:a3:a4:89:3a:2e:b8:
cc:e0:9b:68:b1:f1:14:61:5b:a9:fa:2f:7c:48:ed:
fa:1c:51:d0:87:a9:da:77:21:40:f5:70:13:f4:d2:
9f:7c:7e:16:41:76:d2:0b:fa:7b:51:6c:d9:bc:40:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9D:7D:19:AB:1F:5B:5C:BC:7B:0C:2F:87:69:55:90:72:41:6F:DF
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:7f:19:86:95:6b:84:0c:c4:e0:de:5c:97:b1:92:76:41:
a2:08:2d:31:d3:fb:ba:5b:7d:08:2a:8f:7c:6a:eb:95:58:18:
91:4e:b7:8a:8b:88:b9:12:a9:f6:4d:d4:2f:93:16:0f:70:1a:
78:45:2b:07:13:c7:b8:87:cd:7d:2e:16:58:0e:13:97:44:81:
ed:ef:69:d4:b4:45:41:9f:c9:6a:ba:40:bb:2b:1a:8c:55:f6:
98:d2:06:f3:27:23:12:10:30:8b:16:03:36:3b:f2:37:7d:21:
9d:31:f7:fb:19:60:60:c4:da:3c:40:93:a2:81:41:66:28:87:
73:07:23:87:2a:ef:4a:4c:f0:b2:8a:cb:cd:74:ff:18:0c:f1:
ef:d8:29:61:ad:64:96:5c:94:6a:cd:29:fd:ea:54:41:e2:3c:
a2:2a:be:52:47:03:4c:2f:15:f2:e6:f9:89:b3:55:01:a3:23:
ac:06:f7:d8:b7:05:5e:18:3a:ef:af:6f:5a:49:bd:8b:68:cd:
32:d0:38:48:ec:b4:fa:50:ce:71:81:cd:58:2b:31:04:37:a7:
a1:ae:2e:0a:1d:44:f3:f1:63:00:31:c8:75:3d:3e:c3:bf:5f:
02:59:eb:ae:fb:f1:c8:26:d5:8e:4c:ad:f8:12:7d:c7:a9:40:
62:d2:fa:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqxqz+Hu2PT5J4Acjj/ebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0
OTY0MWUwHhcNMjUwNjE0MDkwMDE5WhcNMjUwNjE1MDkwMDE5WjAzMTEwLwYDVQQD
Eyg3OTlkN2QxOWFiMWY1YjVjYmM3YjBjMmY4NzY5NTU5MDcyNDE2ZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1MRIshsIM6Hyh0AtJc5zF/3mhCP
DjfvpdiqovW0G9YmwN2caZlGzpR8MTCMgaQUmLkUyUjafq1w+bFeeUl5xGa/1FQk
rbDhCEVirtxzd6QzfYC45B0MiKztCKA3Ef8Q7j/zqi/ZFYrgzU0lx/8lTd9MHh2t
+kSR4QtRf98dZA4IJwifYGlsLRpWrf97n88X5IkLWyr0BZ6aT7PwAMkTHe5mOhjj
Pjw4x1nHLy91q0n/FBMWet9z+bAyYCh7pdYkzWhKIBy/H6CGORyjpIk6LrjM4Jto
sfEUYVup+i98SO36HFHQh6nadyFA9XAT9NKffH4WQXbSC/p7UWzZvEAqdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmdfRmrH1tcvHsML4dpVZByQW/fMB8GA1UdIwQY
MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt
Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5
LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6V/GYaV
a4QMxODeXJexknZBoggtMdP7ult9CCqPfGrrlVgYkU63iouIuRKp9k3UL5MWD3Aa
eEUrBxPHuIfNfS4WWA4Tl0SB7e9p1LRFQZ/JarpAuysajFX2mNIG8ycjEhAwixYD
NjvyN30hnTH3+xlgYMTaPECTooFBZiiHcwcjhyrvSkzwsorLzXT/GAzx79gpYa1k
llyUas0p/epUQeI8oiq+UkcDTC8V8ub5ibNVAaMjrAb32LcFXhg6769vWkm9i2jN
MtA4SOy0+lDOcYHNWCsxBDenoa4uCh1E8/FjADHIdT0+w79fAlnrrvvxyCbVjkyt
+BJ9x6lAYtL6ug==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:32 2025 by rpki-client