Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier: /NCLAogPhJ5eCM/Z5x/k5HlWUKDkYnkQO5IQ8Xy/Syc=
Subject key identifier: DB:A7:0D:B9:F2:0F:51:93:A1:C3:D9:99:A2:47:C2:2A:C4:51:E3:4D
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer: /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial: 019A72932F29EF18030A1092596C20E49CF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number: 052F
Signing time: Tue 11 Nov 2025 11:00:39 +0000
Manifest this update: Tue 11 Nov 2025 11:00:39 +0000
Manifest next update: Wed 12 Nov 2025 11:00:39 +0000
Files and hashes: 1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: 08a+94WZ5s87BSq8kAtXHT9rmaxz/CkTIulGcqeXieY=)
2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2f:29:ef:18:03:0a:10:92:59:6c:20:e4:9c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Validity
Not Before: Nov 11 11:00:39 2025 GMT
Not After : Nov 12 11:00:39 2025 GMT
Subject: CN=dba70db9f20f5193a1c3d999a247c22ac451e34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:e3:11:b4:eb:91:02:14:e0:1c:d0:9e:69:
2b:42:50:fa:9c:ca:1d:d9:9f:9f:b4:d9:6d:22:90:
aa:2b:d9:e4:57:9e:eb:c4:67:44:fc:a8:62:b4:98:
28:31:88:ec:55:9a:e0:94:a9:5a:ee:5e:30:90:7a:
0d:27:07:5f:2a:75:fc:0a:73:e5:66:55:1f:eb:5f:
d0:05:fe:d0:f5:ce:97:0f:33:97:d4:61:fa:6e:98:
b1:e7:6c:15:c5:85:c1:b6:19:d7:8d:98:1a:46:cd:
b7:70:d9:55:c4:a1:a8:5f:8c:e7:66:7d:d8:bb:70:
c8:fc:11:9c:72:9a:15:4f:8e:34:e7:2d:2f:31:96:
2f:63:a0:34:4c:a0:70:f9:d3:0b:5e:bb:1b:82:d8:
5e:ca:ff:be:36:c5:aa:88:f1:77:fc:e2:cb:56:ff:
a0:cc:19:b5:b1:51:19:4d:44:20:fd:67:09:75:b1:
7c:f3:8a:b4:3a:4b:bd:00:c4:3c:b9:19:c0:1a:77:
78:6e:a8:f5:aa:65:05:18:36:0f:41:b6:63:d0:ad:
78:2a:71:2e:0d:4f:e1:96:db:51:d3:0b:cd:13:9a:
50:b5:3b:bb:ff:98:cd:8c:08:ec:f0:74:c2:89:cd:
97:ba:ba:00:d3:18:89:a5:2b:5c:bf:76:fe:2c:4a:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A7:0D:B9:F2:0F:51:93:A1:C3:D9:99:A2:47:C2:2A:C4:51:E3:4D
X509v3 Authority Key Identifier:
keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:36:65:73:7f:88:b5:27:d9:67:32:99:d7:56:20:d5:fd:3b:
7c:e1:db:02:49:12:99:a7:38:ac:ca:54:0d:de:76:62:ff:da:
90:65:7b:4b:8e:1d:26:02:23:ff:0b:63:ae:fd:82:98:e7:ae:
51:91:cf:3c:7a:ac:40:25:54:9e:19:09:fa:57:42:91:ba:93:
ca:fa:3a:c5:9c:7f:fd:d2:65:66:24:9e:7b:21:2e:27:3f:6d:
b6:a2:51:69:f7:22:a5:ca:19:44:13:89:af:b8:95:4e:ae:f0:
b7:72:cc:fa:88:51:5c:9a:bd:21:f0:bb:17:a5:6c:0d:30:d1:
2d:8a:f4:f6:36:02:01:05:e7:99:d9:44:74:3f:b9:d1:47:65:
45:8a:bb:17:c5:71:1f:2c:0a:e8:ff:7f:95:65:95:bb:1e:34:
e4:c4:77:bf:b6:a8:ac:66:6c:21:95:8d:52:cb:77:5a:84:00:
7d:df:9c:97:13:94:e3:bc:1a:b9:b9:44:d1:81:c6:17:7a:b5:
7f:3e:6e:8e:c6:83:b7:0e:be:fa:fb:24:5a:a1:7b:2f:3a:5a:
42:3d:36:a5:c2:8a:16:3b:a3:b3:42:a5:96:0d:01:8e:de:66:
84:f9:77:93:b1:e0:f7:b2:cd:b4:77:32:7b:f6:2d:d4:37:74:
3f:c0:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:05 2025 by rpki-client