Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
File: SYbHOZTQLZH8l9kW6YCabZgeaxc.mft (raw, json)
Hash identifier: baGP+qKkjjeNHwQSDxkgc5C6J/irk9aAAH4NO/USEK4=
Subject key identifier: 78:DC:07:1E:6A:49:00:A7:84:84:79:BF:F0:E3:98:74:25:B8:51:56
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0197470C1F718393B1CAA1C7E37C1BB2B710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
Manifest number: 15F6
Signing time: Fri 06 Jun 2025 21:01:06 +0000
Manifest this update: Fri 06 Jun 2025 21:01:06 +0000
Manifest next update: Sat 07 Jun 2025 21:01:06 +0000
Files and hashes: 1: 0bnoilJqdREsxptDb-ivl7D9RO8.roa (hash: xwj9p29IkVHnJneRSxNDQqnx9KWrH7LG11fEPkl1kbA=)
2: 2H8bk0scnZWZCejbJpVwKzPODxU.roa (hash: hMVwt69RjByg01GyzZs8pwlz2+q4Wpy8Ui3CHMqWQVM=)
3: Ix9O-i4_zw0G5oouxc3xseGA8Eo.roa (hash: c7xx1EFWXS87VmDm0MCiaBwoUVVt5kZzZI5Y7YpQiDg=)
4: NTSXzohORWZtttaszZbsV3DOOYA.roa (hash: MaEVUaFakhLRs6dfJtYL3YU29Q2ZDO5rsA2rJVtVQpY=)
5: SYbHOZTQLZH8l9kW6YCabZgeaxc.crl (hash: 0Eon0qAOkedzFp6Jf9q3d082DziqhpJ1U0a/cf0u40o=)
6: dEkWV8xPj6ZjKfgx5t3dIacQr1A.roa (hash: ZOk1wKX5K0Mx4fspQclTvx+3kOne5shTmWgvCBY9O/Q=)
7: rHTykAFRMMhCD9nS_bBwMQq3wlg.roa (hash: N6ZZ7BxbwbLPSHJvcUQzzld1J542SpEPgWc0QrEIaRo=)
8: yozNJC2GV7zwKI3kCqD2Kg47OHw.roa (hash: Q9hJIdmDY+Zqg0O4o2JjEv06jvmUsaDGnP+EBbtFdvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:1f:71:83:93:b1:ca:a1:c7:e3:7c:1b:b2:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Jun 6 21:01:06 2025 GMT
Not After : Jun 7 21:01:06 2025 GMT
Subject: CN=78dc071e6a4900a7848479bff0e3987425b85156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:4d:57:d5:52:91:ed:fc:0d:b9:7b:f5:40:
4f:95:40:e2:f7:90:8e:7e:b5:99:f4:d2:81:41:dc:
01:c8:ba:94:f1:d5:80:5a:50:1d:cb:35:f3:07:40:
4a:1c:49:63:1d:42:c0:a9:47:ca:eb:b3:4a:f7:31:
2c:b1:cc:11:93:aa:ea:6c:d5:a0:09:a9:c9:99:85:
ec:4d:70:53:82:f0:6e:b9:b7:18:c0:65:24:3b:85:
85:52:ff:b2:7c:e8:e5:cb:15:6b:6a:92:3a:4f:ac:
38:79:c9:c0:d5:6c:b4:b5:b7:96:07:98:3b:1a:70:
30:03:00:d4:4d:b4:05:3d:b9:a4:cc:8e:c3:f7:1e:
2b:97:c4:43:18:e7:2e:16:9e:2e:37:da:34:50:bf:
ba:95:a8:36:d7:34:16:91:b4:d4:7a:1b:18:78:50:
95:6d:72:d0:e0:c0:5b:d1:79:1a:5c:c9:ce:5b:83:
42:97:89:f4:14:81:9e:53:b6:6f:ba:9f:13:a2:85:
e0:ee:b0:ee:ce:ac:25:46:ad:63:34:c8:d2:6e:82:
a7:31:f6:3e:85:49:c5:a8:41:59:e3:71:18:61:b7:
72:c1:a9:59:4b:26:57:f7:91:e0:a7:71:79:e2:88:
3b:14:ec:31:1b:fe:47:31:fb:38:02:b2:96:01:fb:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DC:07:1E:6A:49:00:A7:84:84:79:BF:F0:E3:98:74:25:B8:51:56
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:89:b5:4a:8c:64:42:5a:80:a4:e2:ff:b0:21:b1:a4:0c:
fb:ed:41:3a:e3:72:92:7d:bc:1f:da:e8:70:72:0d:60:2a:76:
f5:22:29:90:45:2e:cc:4c:45:43:71:01:ac:aa:5e:0d:54:70:
d2:d9:57:18:2a:61:cd:3d:00:15:9e:31:2c:ba:88:26:6f:08:
15:6b:c5:17:82:0c:7b:7f:b8:15:db:e8:ad:22:1f:43:f2:30:
cc:a8:c3:f6:cd:db:cb:53:7d:7b:67:c7:a6:04:3c:38:04:93:
dd:76:62:66:4d:4b:22:0c:dd:3d:c5:bf:73:49:5b:9a:91:5d:
2b:33:2a:5f:ca:2d:7a:6c:08:d1:47:d5:93:bd:7a:08:38:00:
fe:76:1c:2a:36:9d:10:46:88:e6:3e:de:6d:be:84:d8:17:58:
6c:73:9b:28:77:84:f9:47:a9:4c:41:56:44:ee:a7:e2:ac:5f:
47:75:62:50:d2:24:e3:29:f6:00:13:d8:6f:08:15:89:77:b1:
43:02:5a:f5:64:a9:32:5b:ef:66:ff:53:5a:04:4c:0e:7d:d6:
86:e9:81:b4:8e:39:58:25:11:75:df:43:ad:94:f3:96:e5:59:
c2:01:10:ca:22:7c:c7:a5:3d:fe:b5:ff:7f:46:19:17:03:9d:
51:9c:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:40 2025 by rpki-client