Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: 6DTqCJAa70xMWNVxMHpxlxRVhF3romUro5w0EexPnQs=
Subject key identifier: FC:5F:7E:72:8C:CF:6C:FD:D2:0C:D7:31:D8:32:39:1C:D0:4F:5A:D4
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019653B70F528A51BAAC866088F6A578AE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0BE2
Signing time: Sun 20 Apr 2025 15:00:27 +0000
Manifest this update: Sun 20 Apr 2025 15:00:27 +0000
Manifest next update: Mon 21 Apr 2025 15:00:27 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: PED/drcNzH/qKacpefU+M4BWzgtz0VnzC5XtuQ2pgRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0f:52:8a:51:ba:ac:86:60:88:f6:a5:78:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Apr 20 15:00:27 2025 GMT
Not After : Apr 21 15:00:27 2025 GMT
Subject: CN=fc5f7e728ccf6cfdd20cd731d832391cd04f5ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:0c:12:44:73:be:c3:cb:d2:e1:c7:c5:5d:
3e:7c:9a:70:cb:32:81:ae:49:5a:69:c3:76:67:20:
2b:13:af:32:72:62:04:80:ad:96:62:6c:48:ce:67:
68:d7:8e:59:ac:0f:95:72:9b:06:84:58:ef:a7:2b:
58:f0:45:9d:a2:6b:83:e3:6a:39:1c:26:3e:72:8c:
fc:d1:ba:2d:13:cd:d1:38:c3:06:ee:d5:76:0f:90:
47:50:40:60:0d:81:47:e2:19:88:40:e1:9f:ee:ac:
d1:36:3a:f6:07:41:72:21:b0:85:f3:2d:5d:c3:ca:
03:1a:cb:ce:11:f4:3b:5c:cd:5d:72:59:65:cb:62:
75:ec:6d:74:5d:9c:5a:de:08:13:95:2d:23:16:60:
8e:22:7f:80:a3:6c:11:9c:39:b5:2e:fa:82:c6:4f:
ec:8a:21:24:dd:0e:e4:f2:21:6f:10:aa:d2:57:f5:
de:9f:2f:32:85:90:15:9b:a5:e7:e1:f8:9b:8a:3f:
f9:cf:cd:c5:f0:d1:0e:02:f0:9f:87:f8:74:da:37:
82:b8:8c:ee:22:39:7d:f2:d5:f6:f2:68:1c:37:90:
88:dc:58:b1:6f:fb:8c:75:1f:f0:ca:3c:90:8f:f4:
3d:b2:b0:8b:08:6a:0c:de:79:5c:fe:ec:4f:46:e7:
6c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:7E:72:8C:CF:6C:FD:D2:0C:D7:31:D8:32:39:1C:D0:4F:5A:D4
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:0b:da:90:1f:98:41:ba:e3:58:71:7f:c9:f3:a1:73:f9:db:
39:ed:15:0d:86:8d:4b:c2:58:b6:fe:73:13:5b:ce:c6:ee:5b:
0e:8b:3e:6b:8e:9b:db:03:be:89:00:5c:6d:14:95:9d:57:e8:
77:99:9e:b6:49:a1:33:77:08:37:9a:d6:42:4c:f2:57:4a:e0:
92:bc:84:5c:11:57:46:df:b1:19:de:01:1c:a5:a0:f8:c4:3a:
26:b0:d6:40:83:74:d1:b3:91:54:5c:39:f8:40:0b:71:f7:68:
c7:30:dd:95:2d:4a:16:81:b9:d6:c4:35:70:f9:d2:42:3c:05:
f3:6c:e9:2c:ff:ae:11:01:fd:3f:21:58:fd:29:88:0f:0b:da:
4c:36:8b:2b:03:41:4a:d2:62:33:e6:b7:b9:23:5a:e6:1b:83:
2d:e9:d3:01:3c:68:60:55:f2:8f:d4:db:9a:0d:29:fd:3e:17:
1f:25:fb:d3:02:95:b2:09:b0:6f:cc:99:61:98:1f:d6:8e:5f:
47:4e:3e:40:4c:4c:e7:0e:9c:be:3b:25:c0:d8:d6:ac:f5:fe:
fc:4f:9f:a9:db:11:d1:8b:62:6f:0c:69:d2:75:05:f5:c9:96:
67:36:6a:94:b8:bc:18:82:4b:65:77:25:e3:74:76:67:74:40:
c4:1a:c5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZTtw9SilG6rIZgiPaleK42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODM3NmQyYTIyMDNkODZlNzlhNmQ0NDQ5NWFiZmM0ODkw
MzE0NjUwHhcNMjUwNDIwMTUwMDI3WhcNMjUwNDIxMTUwMDI3WjAzMTEwLwYDVQQD
EyhmYzVmN2U3MjhjY2Y2Y2ZkZDIwY2Q3MzFkODMyMzkxY2QwNGY1YWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw4MEkRzvsPL0uHHxV0+fJpwyzKB
rklaacN2ZyArE68ycmIEgK2WYmxIzmdo145ZrA+VcpsGhFjvpytY8EWdomuD42o5
HCY+coz80botE83ROMMG7tV2D5BHUEBgDYFH4hmIQOGf7qzRNjr2B0FyIbCF8y1d
w8oDGsvOEfQ7XM1dcllly2J17G10XZxa3ggTlS0jFmCOIn+Ao2wRnDm1LvqCxk/s
iiEk3Q7k8iFvEKrSV/Xeny8yhZAVm6Xn4fibij/5z83F8NEOAvCfh/h02jeCuIzu
Ijl98tX28mgcN5CI3Fixb/uMdR/wyjyQj/Q9srCLCGoM3nlc/uxPRudsMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxffnKMz2z90gzXMdgyORzQT1rUMB8GA1UdIwQY
MBaAFEmDdtKiID2G55ptRElav8SJAxRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMt
ZjUwYTJhMDA2NDE0LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMtZjUwYTJhMDA2NDE0
LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigvakB+Y
QbrjWHF/yfOhc/nbOe0VDYaNS8JYtv5zE1vOxu5bDos+a46b2wO+iQBcbRSVnVfo
d5metkmhM3cIN5rWQkzyV0rgkryEXBFXRt+xGd4BHKWg+MQ6JrDWQIN00bORVFw5
+EALcfdoxzDdlS1KFoG51sQ1cPnSQjwF82zpLP+uEQH9PyFY/SmIDwvaTDaLKwNB
StJiM+a3uSNa5huDLenTATxoYFXyj9Tbmg0p/T4XHyX70wKVsgmwb8yZYZgf1o5f
R04+QExM5w6cvjslwNjWrPX+/E+fqdsR0Ytibwxp0nUF9cmWZzZqlLi8GIJLZXcl
43R2Z3RAxBrF+w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:42:58 2025 by rpki-client