Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
File: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft (raw, json)
Hash identifier: rZEbzAj1Ysn65PPR6c4gTg8EnoR/aO6D3hGnsnmsrhE=
Subject key identifier: 3A:58:85:54:D2:15:39:ED:F2:BB:94:CE:DF:57:D9:90:1E:E1:7D:84
Authority key identifier: 49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
Certificate issuer: /CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Certificate serial: 0197470C0AB400CD5A866DA6320FBA2867FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
Manifest number: 0F12
Signing time: Fri 06 Jun 2025 21:01:00 +0000
Manifest this update: Fri 06 Jun 2025 21:01:00 +0000
Manifest next update: Sat 07 Jun 2025 21:01:00 +0000
Files and hashes: 1: Exo16zEYgO3PueRCaRsMKkkEhy0.roa (hash: kH5z+KdUp6OrMDZjKD02kQC0jLALZ4m/6if0eLS0ZaE=)
2: SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl (hash: /yXRa4ey9aarWRCASgfNeHXiOLvS39QGRFlP7gFFSSs=)
3: eNexU45z9hsg8uDVbcM1xgFPzmA.roa (hash: lxTKbrWjdwK3UVl5lIUje+cFbf9AlxZL9yRVio/psAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:0a:b4:00:cd:5a:86:6d:a6:32:0f:ba:28:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4984d0cc6703bf942c6dac89dff1a7bf6632ea8b
Validity
Not Before: Jun 6 21:01:00 2025 GMT
Not After : Jun 7 21:01:00 2025 GMT
Subject: CN=3a588554d21539edf2bb94cedf57d9901ee17d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:33:fa:09:c9:23:fd:9b:e4:5d:7a:55:47:
44:b2:c4:29:e2:9c:e7:a1:5d:d6:48:90:8c:2f:6e:
e6:fe:96:b1:6d:64:9e:43:35:98:0e:88:28:5f:9d:
6b:84:a3:af:09:dd:d3:0a:42:b3:ed:1e:f1:49:71:
ef:a8:4b:37:fa:51:2c:5d:b2:7b:de:0e:c9:81:fa:
31:08:39:3f:07:d1:af:47:bc:b8:88:5c:45:ea:21:
5c:35:05:26:eb:cb:03:25:bc:51:c4:d3:55:57:a1:
29:b3:2f:a3:6c:82:3f:87:d8:3c:e2:1a:2c:cf:f0:
1b:a1:8b:d6:3d:28:9c:cb:e2:1e:ee:fd:9c:67:72:
bd:ab:e1:63:d5:f8:51:9c:52:8f:2f:93:94:36:e7:
7d:55:51:0d:af:15:47:38:7d:3c:27:31:bf:ca:d7:
d6:4d:12:16:26:12:d1:63:57:3f:51:d4:c6:53:ad:
ea:3e:9d:31:c0:00:55:99:8d:67:0d:4f:7a:8b:70:
b3:7a:55:6b:4e:17:79:bb:63:4a:09:2b:d5:8e:81:
d5:a0:fa:dc:19:be:fd:80:b4:d2:38:74:e0:6a:57:
32:95:50:0a:57:05:f5:fc:7b:f2:9e:38:02:e0:55:
11:2f:17:f9:ed:d6:8b:5f:fb:64:c9:0d:ca:49:89:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:58:85:54:D2:15:39:ED:F2:BB:94:CE:DF:57:D9:90:1E:E1:7D:84
X509v3 Authority Key Identifier:
keyid:49:84:D0:CC:67:03:BF:94:2C:6D:AC:89:DF:F1:A7:BF:66:32:EA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a58311-e674-405c-98f2-1470bcceeb1b/1/SYTQzGcDv5QsbayJ3_Gnv2Yy6os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f3:e2:eb:48:10:66:2c:48:0a:6f:0d:20:eb:b6:2b:f4:e4:
4f:71:c4:1d:ec:ff:b5:9b:84:d0:58:e4:cc:54:db:e2:23:9f:
0c:0d:48:c6:4a:91:d1:bf:de:1f:64:30:05:c3:8c:f3:2b:f7:
4e:05:5f:4f:94:df:56:c9:5d:2e:cc:45:a2:e9:eb:0e:fc:77:
a3:8d:f5:32:56:15:df:27:bd:08:5d:e4:41:2c:65:e8:3d:07:
a4:bd:92:d7:cf:17:e7:62:8d:17:29:60:de:25:f5:a3:62:21:
81:2f:a5:dd:c7:71:fb:4b:ef:80:98:84:81:e4:94:08:bf:b3:
ef:44:3e:c5:e9:3a:54:31:72:b8:16:97:90:ed:21:dc:8e:47:
b3:b3:4b:ae:83:2b:21:53:86:7f:37:43:95:f7:0b:1a:2b:e6:
bb:d8:e1:9f:f0:22:07:51:9f:98:ed:ee:b8:8c:92:7b:d4:fa:
fb:96:6b:45:e6:d2:a9:12:2a:b2:83:26:f3:dc:e9:f9:54:47:
9d:de:96:b7:01:cb:e5:ff:64:a7:2e:f9:88:1e:0e:a2:f1:21:
d4:db:c6:d4:29:3f:75:53:32:51:13:64:42:71:46:41:05:5c:
23:20:fd:c6:a0:e4:ba:62:57:ba:81:78:12:47:b7:70:c4:f8:
6e:7f:0c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:21 2025 by rpki-client