
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: eUJApZ4ib3YEV8kJ/gZnLDqgmq9Sm95TTVbULpKhG1s=
Subject key identifier: 73:33:DF:86:39:C4:5F:25:EA:0E:7E:05:08:AB:75:B4:24:2B:8D:D1
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 0199221EDA6844376782D9094830FD2B2FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0D51
Signing time: Sun 07 Sep 2025 03:01:11 +0000
Manifest this update: Sun 07 Sep 2025 03:01:11 +0000
Manifest next update: Mon 08 Sep 2025 03:01:11 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: 2ljhE6puP35ci+boWrZnePA/8NKnI3rA4cLlrMjFor4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:da:68:44:37:67:82:d9:09:48:30:fd:2b:2f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Sep 7 03:01:11 2025 GMT
Not After : Sep 8 03:01:11 2025 GMT
Subject: CN=7333df8639c45f25ea0e7e0508ab75b4242b8dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:fc:34:3e:2a:1f:7f:08:19:f1:b4:1f:46:
4f:a9:b9:99:eb:07:24:ae:55:3c:ef:3c:ff:bd:15:
ef:05:5d:f3:0a:72:09:fd:26:09:4b:08:20:90:a6:
f3:b9:2a:39:20:5e:a1:fd:f1:9a:38:db:ec:8a:3b:
3a:61:e0:12:67:be:d9:72:56:b9:33:49:26:fb:87:
f4:3f:a1:14:16:9a:16:6f:4a:7c:b5:dc:f8:7b:7e:
94:a0:b4:c8:0f:95:67:86:f1:61:50:49:c1:c8:34:
95:59:fa:56:eb:47:90:e6:ae:62:7e:49:77:55:3c:
c6:07:a4:b7:c1:a5:57:7b:17:af:59:70:29:65:c6:
2a:a9:5f:30:26:fb:c9:13:b3:6c:b3:df:85:99:4b:
95:8c:72:d4:9a:59:e5:23:db:b7:19:7d:2b:93:49:
ac:7e:50:c4:83:5a:1b:82:29:69:4b:40:5f:8a:be:
ae:8e:c8:76:70:67:da:51:0f:cc:7c:fb:27:e7:3a:
b3:b6:91:58:a3:fb:05:1d:cd:d7:44:d3:c8:8c:10:
b7:44:6a:a1:7b:d3:a1:6d:76:9e:df:39:2c:5c:5b:
15:b6:26:f9:3c:96:ae:9a:50:21:38:ce:3c:81:e5:
8d:2d:27:c7:35:a1:47:6d:f6:b7:39:6d:da:2a:8f:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:33:DF:86:39:C4:5F:25:EA:0E:7E:05:08:AB:75:B4:24:2B:8D:D1
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:82:8d:fe:0b:0e:88:1e:25:2b:a8:b1:e9:3e:03:45:e0:f4:
4e:52:21:5b:21:84:ab:67:87:1e:66:3b:c8:7e:21:bd:b2:26:
3a:63:cc:cd:9c:61:bb:b5:9a:e5:e5:b0:e5:e2:4d:8b:bb:2e:
57:82:47:14:62:6a:ce:5a:bd:64:a8:4c:ab:70:95:9a:1d:bb:
2d:00:08:d1:74:b6:20:4e:71:1f:b9:b1:12:62:0e:a0:50:81:
25:e3:7e:06:d6:62:4a:ee:70:93:7e:9c:4b:e2:d2:b0:4c:b3:
22:f9:0d:3b:a4:5e:f2:2d:69:a3:31:3b:f0:d7:26:18:37:0b:
58:1a:74:f7:53:49:96:ae:f0:03:49:1c:4a:60:a8:07:1a:25:
c6:3b:ca:40:4a:40:80:6e:a5:ac:86:f3:5a:83:a7:09:ff:15:
d2:61:80:be:88:23:ba:f1:7a:52:b2:53:b5:c2:fd:c3:e2:16:
21:4a:d3:85:41:68:67:eb:68:63:cd:66:fc:72:0b:34:4b:ac:
70:4d:4c:7c:ac:5d:14:ce:63:2e:bd:81:18:5b:a3:2b:8c:c7:
fa:ef:2d:f7:f4:4a:e9:ce:10:be:93:e0:74:59:ef:1e:ab:16:
a8:f1:b1:c9:4c:b1:d0:af:41:eb:ac:c8:4a:e7:31:1b:83:04:
21:e3:76:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:43 2025 by rpki-client