Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: CUJe/bfet+rAECmSKEau6w5kGU6UiB2ckzi6iZ98GlU=
Subject key identifier: 65:5A:D5:49:66:64:D1:1B:36:25:91:2B:AF:D7:32:36:E1:E5:5D:D6
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0199270E71418AAB92348437FF7A019F1891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 16F4
Signing time: Mon 08 Sep 2025 02:01:21 +0000
Manifest this update: Mon 08 Sep 2025 02:01:21 +0000
Manifest next update: Tue 09 Sep 2025 02:01:21 +0000
Files and hashes: 1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
2: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
3: 4eOCFNOBECX2Vv6GWaN08OGzQEk.roa (hash: SHh7w4LZwKE1It7Jc8tpdQbiqOFLXylf+YxEAvmby8E=)
4: 6eTh4HjpwhP0yy4gl6mlpnwuhNo.roa (hash: X74Sl2aaVeXnMe6YeKSUm/NLH9L0iQzrWyncVKk85OU=)
5: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
6: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 0/UFqymwDSIpAh/9sWPvoLMaEvmK1qHvHud7Qv9fxhM=)
7: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:71:41:8a:ab:92:34:84:37:ff:7a:01:9f:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Sep 8 02:01:21 2025 GMT
Not After : Sep 9 02:01:21 2025 GMT
Subject: CN=655ad5496664d11b3625912bafd73236e1e55dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:69:08:2e:53:52:55:d5:52:69:75:a2:e4:
e8:d0:03:4d:0c:56:94:80:b5:d0:27:7b:a6:0d:9b:
0e:f6:e2:f7:f4:0d:84:28:dc:39:d7:bc:c5:89:a5:
bc:75:37:03:97:27:e0:a7:18:24:6b:ad:e9:2d:bc:
9e:43:92:a3:1d:33:71:ac:82:83:f7:d2:6d:4f:f3:
b3:29:aa:7b:52:a0:05:d1:fd:46:14:aa:9a:cc:e4:
41:8a:14:8a:51:b1:35:8a:7b:57:68:90:47:63:b5:
10:4d:4a:74:63:63:47:f2:52:bf:7c:59:c6:d0:42:
f0:81:d7:d9:d5:c2:6f:10:1e:70:e3:54:72:2c:6b:
59:f0:bb:45:d3:27:89:23:bb:c4:d0:5d:c7:3a:ef:
ac:88:8a:7e:55:48:98:bb:d2:6c:ce:d4:b4:97:66:
e3:67:3e:47:7d:01:d3:02:d5:1c:56:c9:d2:7e:e1:
53:15:f9:33:37:bd:ac:7e:ed:b4:14:51:ea:bb:96:
06:f0:ca:ee:b2:77:05:44:09:d7:b3:ed:d5:67:29:
be:59:18:db:56:53:8f:76:e1:83:c6:cd:33:83:43:
e9:59:da:15:d7:7e:ab:ff:0d:55:c6:30:dd:25:4e:
af:c6:06:6f:cb:82:45:49:08:17:1d:f5:14:5b:ec:
aa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:D5:49:66:64:D1:1B:36:25:91:2B:AF:D7:32:36:E1:E5:5D:D6
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9e:67:d6:a6:ac:f8:e8:24:08:8b:6a:17:15:9c:67:1d:68:
97:50:58:a8:ea:66:c0:57:9f:64:fa:b2:f5:39:45:98:5b:ce:
4e:25:85:aa:bf:0a:52:0c:29:d7:c5:0d:42:e0:5e:71:46:b3:
30:ba:07:5f:2d:00:14:9b:f2:cd:1a:a9:4f:27:9e:94:83:19:
68:ed:09:14:9c:e5:57:1c:fd:a5:d0:e6:02:d2:4c:df:e7:a1:
cd:98:08:04:07:c6:92:39:d9:ba:b9:14:dd:12:77:3e:c2:f4:
ff:91:05:c5:ca:e4:56:4c:85:c9:7a:36:f5:40:5c:7f:98:67:
bb:ea:54:83:cb:0c:75:2b:a4:b8:5c:cd:13:69:a9:2d:83:1e:
2e:0a:d1:15:90:93:95:8d:1a:c0:29:d7:ac:ce:f8:b2:9f:85:
13:0a:13:c1:0a:9b:ce:66:b3:9f:3f:a9:cd:ff:44:28:17:02:
df:1e:4e:f5:69:11:03:36:c1:ac:14:a2:9b:75:c8:be:c7:58:
c0:d9:36:47:91:61:ef:56:ef:de:65:2b:1b:40:10:f3:9d:83:
e7:f5:61:6d:59:89:75:18:ab:e9:a2:0f:06:80:05:67:83:12:
02:5f:12:88:d9:74:99:ce:7a:4f:63:5b:75:c4:cc:ce:c6:b2:
10:03:a5:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknDnFBiquSNIQ3/3oBnxiRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjUwOTA4MDIwMTIxWhcNMjUwOTA5MDIwMTIxWjAzMTEwLwYDVQQD
Eyg2NTVhZDU0OTY2NjRkMTFiMzYyNTkxMmJhZmQ3MzIzNmUxZTU1ZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb5pCC5TUlXVUml1ouTo0ANNDFaU
gLXQJ3umDZsO9uL39A2EKNw517zFiaW8dTcDlyfgpxgka63pLbyeQ5KjHTNxrIKD
99JtT/OzKap7UqAF0f1GFKqazORBihSKUbE1intXaJBHY7UQTUp0Y2NH8lK/fFnG
0ELwgdfZ1cJvEB5w41RyLGtZ8LtF0yeJI7vE0F3HOu+siIp+VUiYu9JsztS0l2bj
Zz5HfQHTAtUcVsnSfuFTFfkzN72sfu20FFHqu5YG8MrusncFRAnXs+3VZym+WRjb
VlOPduGDxs0zg0PpWdoV136r/w1VxjDdJU6vxgZvy4JFSQgXHfUUW+yqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVa1UlmZNEbNiWRK6/XMjbh5V3WMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm55n1qas
+OgkCItqFxWcZx1ol1BYqOpmwFefZPqy9TlFmFvOTiWFqr8KUgwp18UNQuBecUaz
MLoHXy0AFJvyzRqpTyeelIMZaO0JFJzlVxz9pdDmAtJM3+ehzZgIBAfGkjnZurkU
3RJ3PsL0/5EFxcrkVkyFyXo29UBcf5hnu+pUg8sMdSukuFzNE2mpLYMeLgrRFZCT
lY0awCnXrM74sp+FEwoTwQqbzmaznz+pzf9EKBcC3x5O9WkRAzbBrBSim3XIvsdY
wNk2R5Fh71bv3mUrG0AQ852D5/VhbVmJdRir6aIPBoAFZ4MSAl8SiNl0mc56T2Nb
dcTMzsayEAOllA==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:43:34 2025 by rpki-client