Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
File: SyOwbWDsPna0kgsrZBQfo69uX7s.mft (raw, json)
Hash identifier: /Kw/eVNO2JnKf6lQkoTZgiLo8gXNw1s4y4H6homVAyc=
Subject key identifier: C4:48:9D:92:3A:8A:B2:93:FB:B2:0D:26:65:E6:CB:3B:23:A7:2B:51
Authority key identifier: 4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
Certificate issuer: /CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Certificate serial: 01974C69C4A0A4787813985DC7CDD68AC528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
Manifest number: 0CEF
Signing time: Sat 07 Jun 2025 22:01:29 +0000
Manifest this update: Sat 07 Jun 2025 22:01:29 +0000
Manifest next update: Sun 08 Jun 2025 22:01:29 +0000
Files and hashes: 1: 2FAwhQu6ok9bOg22C73ws6AzeTA.roa (hash: NjIG5kr55nDYslaJlr/UrfkcBYGbRIfRwF+wfXlzJDo=)
2: SyOwbWDsPna0kgsrZBQfo69uX7s.crl (hash: 2GPKOm+3p8kgBVF006zjtDhVkXDF8l8Er0baQX3e7+A=)
3: oPMyM9DlgGOhMRIoLDO1OdPuuaA.roa (hash: ZO3/wqoicRWPL4+s7QSyOKEb1NF7BoLY/968foDdnC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:c4:a0:a4:78:78:13:98:5d:c7:cd:d6:8a:c5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b23b06d60ec3e76b4920b2b64141fa3af6e5fbb
Validity
Not Before: Jun 7 22:01:29 2025 GMT
Not After : Jun 8 22:01:29 2025 GMT
Subject: CN=c4489d923a8ab293fbb20d2665e6cb3b23a72b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4c:a6:9a:d5:86:80:bd:43:8c:25:12:b4:fa:
82:d1:bd:f0:d6:a6:7c:cd:d1:8e:22:eb:7a:88:1d:
d0:a9:65:ff:49:e6:19:18:72:bc:cd:2c:b7:4f:a9:
c4:c5:50:1c:fb:e2:8a:6c:39:23:5d:7d:d3:10:77:
b4:12:42:b1:90:b7:ee:bf:62:17:91:05:6c:20:36:
1b:7c:9e:29:ee:09:12:ff:42:ac:c2:a4:c8:78:6b:
ac:11:09:94:47:a0:f1:57:35:4c:27:8e:10:1a:3b:
a3:c3:fc:aa:45:66:10:0c:9e:08:2f:0d:c7:05:fb:
dc:54:f1:0e:80:15:96:8a:e4:b5:a1:c7:e4:11:d4:
8a:e4:04:6f:be:6e:14:82:74:30:a1:d5:1a:b0:1e:
2b:95:bf:e4:59:33:a0:d4:dc:35:57:41:3b:b2:ba:
d4:78:96:27:6c:70:89:0c:e5:14:5d:f5:31:88:06:
5a:3a:2b:0a:19:66:3d:d8:bd:9e:47:94:70:be:15:
63:33:cd:95:18:f6:86:ac:db:3d:46:c2:7b:a8:22:
3d:e0:1d:51:da:8b:53:70:70:f4:db:70:64:55:8c:
ca:6c:16:f7:e3:97:70:9e:c9:c2:69:3a:a4:b0:ed:
8f:99:44:c7:a1:00:65:fb:fd:b3:62:0f:b1:8b:2c:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:48:9D:92:3A:8A:B2:93:FB:B2:0D:26:65:E6:CB:3B:23:A7:2B:51
X509v3 Authority Key Identifier:
keyid:4B:23:B0:6D:60:EC:3E:76:B4:92:0B:2B:64:14:1F:A3:AF:6E:5F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyOwbWDsPna0kgsrZBQfo69uX7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/5aacf3-bbc9-43c4-86f0-54f6e52f547b/1/SyOwbWDsPna0kgsrZBQfo69uX7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6a:a5:49:f2:58:c2:26:77:aa:85:ba:9a:4b:15:24:6c:05:
da:c0:12:66:e4:c5:34:a6:c8:4f:f8:31:33:79:44:36:aa:46:
52:86:1b:e7:d8:c1:e0:76:c7:75:92:eb:18:5c:32:af:c5:88:
25:c1:67:c0:b4:81:35:9e:71:b6:44:64:36:dd:6f:d8:d7:82:
60:91:e2:67:1d:fd:f5:c0:0a:32:86:ff:99:d0:47:c3:ae:b1:
8a:e5:26:e3:cb:55:0b:36:ec:5f:4f:90:b7:dc:ff:a1:3e:d1:
ef:11:c2:96:09:6d:9d:97:52:e9:e0:a1:17:b4:32:83:50:a7:
11:26:c2:cd:13:a7:b5:8a:91:f8:52:b9:8e:00:14:27:45:6d:
fa:46:be:dd:f2:a9:08:42:48:f1:45:be:7b:16:42:15:fe:e9:
74:0e:14:63:7d:1b:ca:78:df:58:c8:1e:5f:0b:c6:64:9e:1c:
85:64:8a:06:f9:72:fb:a0:01:8b:5e:9b:54:4b:ef:04:ce:ad:
ee:f7:49:80:a5:04:3a:0d:ca:a1:dc:54:a8:43:d4:9a:f7:9d:
91:38:a8:16:73:f8:53:8a:83:8d:df:32:10:1e:61:c7:07:ef:
eb:0b:23:00:6f:e0:f2:10:de:c7:aa:7b:6a:ec:d4:fc:8a:3e:
79:59:8d:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMacSgpHh4E5hdx83WisUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjNiMDZkNjBlYzNlNzZiNDkyMGIyYjY0MTQxZmEzYWY2
ZTVmYmIwHhcNMjUwNjA3MjIwMTI5WhcNMjUwNjA4MjIwMTI5WjAzMTEwLwYDVQQD
EyhjNDQ4OWQ5MjNhOGFiMjkzZmJiMjBkMjY2NWU2Y2IzYjIzYTcyYjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EymmtWGgL1DjCUStPqC0b3w1qZ8
zdGOIut6iB3QqWX/SeYZGHK8zSy3T6nExVAc++KKbDkjXX3TEHe0EkKxkLfuv2IX
kQVsIDYbfJ4p7gkS/0KswqTIeGusEQmUR6DxVzVMJ44QGjujw/yqRWYQDJ4ILw3H
BfvcVPEOgBWWiuS1ocfkEdSK5ARvvm4UgnQwodUasB4rlb/kWTOg1Nw1V0E7srrU
eJYnbHCJDOUUXfUxiAZaOisKGWY92L2eR5RwvhVjM82VGPaGrNs9RsJ7qCI94B1R
2otTcHD023BkVYzKbBb345dwnsnCaTqksO2PmUTHoQBl+/2zYg+xiyxPGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRInZI6irKT+7INJmXmyzsjpytRMB8GA1UdIwQY
MBaAFEsjsG1g7D52tJILK2QUH6Ovbl+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAt
NTRmNmU1MmY1NDdiLzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81YWFjZjMtYmJjOS00M2M0LTg2ZjAtNTRmNmU1MmY1NDdi
LzEvU3lPd2JXRHNQbmEwa2dzclpCUWZvNjl1WDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2qlSfJY
wiZ3qoW6mksVJGwF2sASZuTFNKbIT/gxM3lENqpGUoYb59jB4HbHdZLrGFwyr8WI
JcFnwLSBNZ5xtkRkNt1v2NeCYJHiZx399cAKMob/mdBHw66xiuUm48tVCzbsX0+Q
t9z/oT7R7xHClgltnZdS6eChF7Qyg1CnESbCzROntYqR+FK5jgAUJ0Vt+ka+3fKp
CEJI8UW+exZCFf7pdA4UY30bynjfWMgeXwvGZJ4chWSKBvly+6ABi16bVEvvBM6t
7vdJgKUEOg3KodxUqEPUmvedkTioFnP4U4qDjd8yEB5hxwfv6wsjAG/g8hDex6p7
auzU/Io+eVmNkA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:08:57 2025 by rpki-client