Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
File: SY_UU_XjX5x30dcG5WUTit-CJWo.mft (raw, json)
Hash identifier: Dcl17n/FT6zECbwN+MEltFARvBOgbUDffecf0OvQxHA=
Subject key identifier: 28:98:92:E3:A1:94:67:8E:6A:8F:E7:92:26:8E:AE:9B:71:3C:27:CF
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 019A706E88A18C50BF7EEE3568C37B890324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 01:01:23 +0000
Manifest this update: Tue 11 Nov 2025 01:01:23 +0000
Manifest next update: Wed 12 Nov 2025 01:01:23 +0000
Files and hashes: 1: 507THO5dSIj7LdWG8g8XVK755Y0.roa (hash: k708wccd30u6jz4kYVPuam78Zj3k5ZZTQId0uERtVOk=)
2: 7QVUBJnH8byE-Jg05fyEzfqRiCA.roa (hash: aQaoN+Lrx+ZD/V+55LTcCmW9vizCL4wQOGOO6cgtzbA=)
3: SY_UU_XjX5x30dcG5WUTit-CJWo.crl (hash: X6bs/qrb5It77qsW9OkOHXAQPtKWyFYNHxu0gn11dpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:88:a1:8c:50:bf:7e:ee:35:68:c3:7b:89:03:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Nov 11 01:01:23 2025 GMT
Not After : Nov 12 01:01:23 2025 GMT
Subject: CN=289892e3a194678e6a8fe792268eae9b713c27cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:fc:3a:2c:c9:b1:cb:c3:cf:31:6c:c6:22:
ec:72:68:d1:0b:fc:02:b8:d0:22:d3:b8:1e:ac:ec:
8c:61:72:00:4c:1c:62:83:16:ee:43:b8:df:f4:7b:
72:72:48:cc:05:37:53:a9:88:99:6c:c9:97:45:73:
5a:d7:9e:fb:25:77:d2:c2:9b:e9:16:79:99:38:bf:
e9:00:81:53:12:28:45:2a:a6:62:07:a9:4e:3d:52:
e1:2d:eb:dc:85:c9:20:58:c0:43:b6:14:91:dc:dd:
1c:ac:e8:32:80:74:dc:9c:9f:bb:33:d6:15:1e:d4:
79:e2:4a:02:ac:e1:44:2e:62:1a:8c:c3:ae:54:69:
6f:ff:a8:a2:d9:4a:97:b6:57:56:fe:af:49:23:01:
e9:c7:91:0f:db:09:ff:09:51:21:99:0b:aa:96:a3:
63:3e:55:6a:ad:ee:6e:9a:1a:f4:51:eb:a6:1c:0c:
94:1b:2a:93:fe:16:51:8c:8d:a6:38:59:02:73:4d:
a1:a2:b6:f9:6f:7e:4b:37:97:38:c5:22:e7:b8:ab:
5f:87:a6:b6:a7:06:1c:66:79:23:48:63:1e:2d:45:
85:2b:05:50:2f:86:7d:15:a1:d2:44:05:4e:92:4e:
44:1e:d1:f3:6b:fa:a9:e4:dc:6f:e4:82:76:b9:25:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:92:E3:A1:94:67:8E:6A:8F:E7:92:26:8E:AE:9B:71:3C:27:CF
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:32:d1:74:99:29:78:0b:29:99:c9:28:49:3b:79:c2:c2:
d1:06:2b:a9:6b:d9:da:74:36:68:d6:ff:18:74:e0:7a:f6:25:
b7:0d:e3:b0:43:65:73:29:65:43:27:67:33:b0:dd:27:68:8a:
a5:1a:ae:5c:1d:20:26:4c:5d:e3:5b:4a:be:ac:bd:03:65:86:
d8:ce:da:6d:e5:89:57:21:f4:48:88:f7:fe:15:76:19:40:8a:
69:d4:7b:02:bb:3e:12:b6:c8:52:b0:70:c0:b5:52:fa:dd:6a:
e3:2d:d7:4b:ed:9c:5d:3f:28:71:ab:0e:dd:79:82:a0:4a:05:
37:74:6e:43:7e:46:d7:d0:5e:dd:01:1a:51:3c:53:75:50:8c:
b5:12:68:38:cb:9a:2e:c3:d7:17:17:81:1d:8e:fc:48:50:cb:
0e:7e:06:8e:02:c7:ec:ac:1d:10:d9:09:8f:51:23:da:8c:de:
cb:c5:74:99:83:ae:a9:94:9c:82:02:63:13:d1:c6:4d:75:33:
46:52:e9:20:f2:5e:fc:e9:f2:f3:ab:64:1c:20:c7:f3:27:c2:
a3:90:e2:57:ce:0d:da:4a:64:7f:82:5c:22:2c:01:6a:18:9b:
15:89:64:00:26:03:8d:61:42:58:8b:12:48:ac:ed:20:3a:c4:
e2:6e:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:30 2025 by rpki-client