Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: AxLJ3+SHc1fBgI+0NmKFHhp8FZInbhoUCDdWkPAHqpw=
Subject key identifier: 5C:B8:A2:C5:B1:E1:57:5E:27:DF:4A:9C:25:C4:13:E5:4B:E7:45:8D
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 0197586D72042224E6C4D933C0633DAC852F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0C64
Signing time: Tue 10 Jun 2025 06:00:56 +0000
Manifest this update: Tue 10 Jun 2025 06:00:56 +0000
Manifest next update: Wed 11 Jun 2025 06:00:56 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: asaCUj5ZuSVtCOCak8tqqm6SrE48chKkVSqEbzS4oO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:6d:72:04:22:24:e6:c4:d9:33:c0:63:3d:ac:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Jun 10 06:00:56 2025 GMT
Not After : Jun 11 06:00:56 2025 GMT
Subject: CN=5cb8a2c5b1e1575e27df4a9c25c413e54be7458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:67:56:a2:cc:e6:f0:1f:a3:df:eb:22:82:
09:3d:ca:76:ae:2e:2e:cd:32:3e:f6:b1:99:72:96:
a6:36:0c:59:7a:e3:29:1e:c0:6e:a5:73:f2:d5:d7:
ca:d1:50:6b:b0:77:fb:28:72:4d:dd:c8:5d:35:2b:
32:4b:fe:64:2f:34:ec:69:0f:11:d3:9d:d7:83:30:
90:db:8a:2f:87:75:7f:59:bf:11:08:2d:4c:9a:07:
ba:57:7f:dc:4d:a8:5f:32:d5:1e:a7:bb:55:18:63:
60:89:56:36:61:aa:b5:4a:f9:01:d7:06:b0:cd:11:
d8:ee:40:65:78:47:14:e3:c3:dd:5f:2c:3e:ca:c0:
5d:a7:ed:0b:09:d9:52:06:25:ae:ce:ee:46:df:1b:
d4:40:bd:aa:2d:80:d8:06:a0:e5:6c:34:43:93:1c:
ba:25:30:e9:7c:e5:31:0c:b4:86:99:6a:92:f7:33:
5b:b6:81:1d:b5:f7:ae:e3:91:73:08:89:8e:81:d7:
de:1d:44:37:29:73:cc:94:4d:08:75:e1:10:b0:84:
9e:fb:a8:ec:15:b8:4a:7d:78:88:87:1a:11:59:3b:
d7:a0:76:85:98:ae:d8:c6:1b:13:e0:44:b5:ae:79:
88:25:83:e7:01:42:7a:cf:f9:04:b1:2f:e0:9b:8c:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B8:A2:C5:B1:E1:57:5E:27:DF:4A:9C:25:C4:13:E5:4B:E7:45:8D
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fe:cd:41:90:da:b1:d9:40:78:af:51:48:3f:43:81:7a:c0:
b4:69:4e:ac:82:d8:81:3d:59:00:cc:b4:6a:09:88:83:40:17:
47:34:5e:59:e9:43:eb:cb:f4:21:d9:ef:4b:23:13:d4:4b:9f:
e1:1c:80:45:5c:8c:b2:0e:bf:bd:30:45:50:8d:e0:4e:7f:52:
5b:3b:96:f1:1f:74:c1:67:34:49:0c:2c:a2:fe:51:4b:8d:a8:
15:da:fc:e5:ea:52:ae:da:e2:44:cc:6a:83:d9:a0:1c:c0:3f:
1b:a5:98:84:3b:04:32:d0:60:55:e6:2b:d6:39:f9:cc:ed:01:
ae:c2:00:51:7a:aa:d5:84:5a:34:e5:7f:f4:4e:31:02:54:43:
58:34:e6:8f:0d:7f:ae:37:cc:46:6d:a7:f5:9c:75:e1:4e:d4:
f4:4e:61:66:f7:6a:e2:21:e4:cf:d1:97:d7:82:17:d1:20:98:
af:8a:16:b4:58:d1:b2:d6:66:e5:b9:b5:9a:ba:9b:22:9f:07:
47:8e:e2:3f:71:b4:74:50:b7:61:15:8c:5c:c1:8a:39:3f:dc:
eb:dd:3d:11:4b:09:ad:2f:1e:20:b7:6e:28:d2:4f:16:73:87:
32:57:41:9a:74:c9:5b:b6:b0:a2:37:64:7e:c2:0c:d3:90:6c:
fa:c4:f3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:08:14 2025 by rpki-client