Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
File: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft (raw, json)
Hash identifier: FnlA67hHhmsTjwDdUNq0g1S3U3HOG84JWyHFvc65SXg=
Subject key identifier: EF:30:EB:00:7B:CB:69:97:6A:E6:E0:9A:A1:5E:E2:B6:89:38:23:9F
Authority key identifier: B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
Certificate issuer: /CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Certificate serial: 0199221F041C50E8D69E5B25EF39DF2ED3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
Manifest number: 63
Signing time: Sun 07 Sep 2025 03:01:21 +0000
Manifest this update: Sun 07 Sep 2025 03:01:21 +0000
Manifest next update: Mon 08 Sep 2025 03:01:21 +0000
Files and hashes: 1: FUgWL_lEitw648dAxbpzgHtUVSg.roa (hash: wprSxLZeem8Akk4r6OWoOul/6l4o4VUD6WM3B2aSMl8=)
2: sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl (hash: D90voDfEeDmjy+IDC/UMsk5df4SwReWmrpCIJs3Gb2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:04:1c:50:e8:d6:9e:5b:25:ef:39:df:2e:d3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18156818642dc8f04e40f8677568d663ccf4b1b
Validity
Not Before: Sep 7 03:01:21 2025 GMT
Not After : Sep 8 03:01:21 2025 GMT
Subject: CN=ef30eb007bcb69976ae6e09aa15ee2b68938239f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6a:65:2c:de:0f:cb:3e:92:da:51:35:84:b8:
c0:71:a1:b5:60:08:01:67:11:85:3d:a5:48:b8:91:
c0:f6:c8:e0:47:0b:0d:d1:5f:0b:31:a3:31:ef:85:
e5:c7:a2:db:b4:3c:7b:e1:af:8b:78:dd:19:41:0d:
47:33:0f:09:40:38:a6:79:e2:bf:48:6c:4c:00:56:
ea:c2:53:03:b2:cf:20:cd:e4:c5:9f:9f:66:4f:21:
70:da:d9:72:05:c6:c5:56:7a:9d:9c:13:cc:b2:06:
8b:9b:fc:12:39:16:35:97:39:1e:9f:af:83:67:c7:
ba:4b:47:89:89:5a:c8:a2:50:51:fd:14:2f:49:55:
1a:1f:f2:45:60:89:27:0f:70:e3:b4:4b:8c:79:13:
8a:91:51:3d:71:19:0b:9d:5c:9b:e6:18:42:a3:a7:
44:d3:27:84:53:d7:7f:f8:ab:9e:92:9b:e6:98:f4:
ce:ca:8e:54:f1:4d:21:f9:6e:fe:1c:d5:00:7b:4c:
86:cf:5c:04:4d:8e:8f:00:71:c4:0f:3b:83:62:50:
a4:1d:87:3d:7b:ba:24:c6:58:92:59:75:fb:69:94:
f2:37:62:7d:0c:a2:a3:27:0a:b4:ac:51:13:12:42:
13:ae:7f:70:37:5a:67:ca:1f:87:1f:21:f4:cb:19:
e6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:EB:00:7B:CB:69:97:6A:E6:E0:9A:A1:5E:E2:B6:89:38:23:9F
X509v3 Authority Key Identifier:
keyid:B1:81:56:81:86:42:DC:8F:04:E4:0F:86:77:56:8D:66:3C:CF:4B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/566532-b077-4889-9fe6-6576c6d9aa69/1/sYFWgYZC3I8E5A-Gd1aNZjzPSxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3a:78:e9:c7:f0:cc:92:f1:a9:54:21:25:65:12:e3:f2:9a:
e7:89:e8:e4:7c:b5:bc:76:da:f2:e9:d7:48:61:c0:3c:57:88:
dd:c9:27:c7:8b:a9:ce:7c:29:d8:6c:0c:5f:37:3c:a1:75:30:
9d:f8:52:5c:40:10:63:20:60:66:c1:17:c8:fb:eb:e9:68:98:
f4:5e:5e:66:61:d5:23:54:5a:99:92:76:18:cb:f3:c1:a2:ab:
f3:a9:ff:9a:f9:4f:26:15:18:ee:c6:3d:05:e7:cc:ba:43:36:
da:e9:8a:42:9a:25:f8:04:0b:e1:b3:d1:71:20:07:7c:51:66:
18:96:05:9a:1b:54:e7:21:1e:2f:49:70:ec:3d:fe:0d:9d:71:
c3:0f:b2:40:81:45:3f:0c:fc:7a:c7:84:b6:b4:e5:0d:7d:e8:
ed:75:04:a6:5c:3e:56:2b:27:f8:6f:5c:49:bd:38:a8:7e:0e:
91:bc:96:ab:53:20:56:17:56:1d:96:4f:72:55:98:cd:1d:05:
1e:ae:f5:ee:8b:80:b1:96:16:df:5e:92:e8:42:f8:d9:f9:2b:
1b:cf:2f:6f:4c:c7:36:2e:f5:95:ab:a9:6c:0d:3f:6a:55:71:
a2:8c:d6:55:e4:f1:78:3c:05:e3:ad:3e:97:45:b4:24:8b:12:
45:cc:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:12 2025 by rpki-client