Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: ts9PTebv9Y+oUWc1803owPvZeq0r67y64YdIO2BIrQM=
Subject key identifier: 6E:E2:7E:45:6C:C3:92:89:7B:3F:7B:EB:D4:7F:21:53:51:82:BB:04
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 019A7225DEF657B22E1D310B5EB366316142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0DFF
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: yxcKybu03Rfk8fa7z9/99AnHGd7dISRs8wtzr1M1pmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:f6:57:b2:2e:1d:31:0b:5e:b3:66:31:61:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=6ee27e456cc392897b3f7bebd47f21535182bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:67:c7:94:de:c2:13:8c:39:28:7b:33:6b:2e:
25:fa:8b:26:d6:d9:c0:99:79:6b:0a:ac:72:12:7f:
53:cd:da:65:60:37:47:df:ed:42:b8:a2:b3:af:f7:
f9:97:a4:d6:98:86:33:30:1d:52:ac:0e:d7:a3:67:
b3:fe:dc:9a:89:f8:e2:eb:e0:72:b5:79:f8:37:9c:
a5:19:b4:1d:2d:9a:c9:17:81:2d:be:4e:f1:40:59:
c8:c6:d6:bd:0c:3c:44:2c:74:e4:49:c2:68:e5:d5:
ba:b7:c1:fb:27:bb:19:fe:4b:43:29:9b:a7:b3:52:
d3:11:26:f2:4d:8a:60:e9:0a:03:09:74:b1:04:22:
b9:b7:7d:14:06:6c:28:b4:4a:ab:07:ac:9a:d8:0d:
e0:04:cc:8c:a9:13:ec:d1:01:fd:f0:b7:77:8b:85:
87:0d:dd:2c:05:b8:53:a9:56:20:8a:06:9a:ca:94:
46:f2:9e:05:56:f4:94:48:d8:1c:f1:f2:d9:1f:f7:
5d:ec:be:ca:a5:12:68:e7:c5:55:ae:e2:ec:12:52:
0d:71:c4:f8:05:c4:91:b4:d4:1c:ed:26:fa:97:80:
c4:7d:62:8d:54:ba:e5:93:ee:4d:8c:37:8d:50:a2:
a2:ad:55:32:57:39:de:c3:a7:c7:89:42:cf:ae:5d:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:7E:45:6C:C3:92:89:7B:3F:7B:EB:D4:7F:21:53:51:82:BB:04
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:ee:ce:97:d1:dc:0d:7c:5d:ad:9e:e9:b0:4e:cc:25:e6:
21:80:d3:89:12:7c:59:f8:7e:6f:38:64:9a:28:76:8d:8a:bf:
35:04:18:c1:89:02:93:31:80:b1:ca:30:13:c0:ca:6f:5c:05:
b9:32:35:dd:c5:2a:40:17:58:99:63:bb:b7:51:dd:f5:f0:fe:
4c:5a:b7:5d:3e:36:39:5a:ab:48:7d:53:bc:a6:63:94:93:a0:
ba:a3:a1:67:6d:80:10:02:b9:d1:09:1f:6c:e2:ac:07:a9:21:
7b:b5:37:e7:ed:eb:85:9d:4c:85:3f:2c:17:af:f1:0a:1a:0e:
fd:4d:2b:2c:d6:fa:e5:2c:41:67:d8:30:f9:b6:48:3a:ba:dc:
05:4a:14:e5:ee:48:6b:aa:37:28:a5:b9:8b:34:9d:de:1b:e8:
d0:84:d0:83:eb:41:d1:99:73:69:a8:88:98:bd:67:31:bc:71:
29:e4:96:82:44:0e:6c:00:c2:c4:69:5c:e1:e1:5b:52:1c:30:
b3:8c:23:5b:1c:fb:72:bd:04:a3:16:0d:8c:17:49:b3:b6:87:
81:2f:7f:a8:3e:79:08:3c:20:5a:f3:2e:d2:54:40:d4:9d:66:
8c:2b:99:e8:db:87:07:3f:58:19:70:b2:b8:ac:ed:23:9e:2b:
05:5c:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:35 2025 by rpki-client