Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier: f9r8Gr7BMTiH3cDrkWjc5KPHK53IPzILvvlC4Sj3Oqc=
Subject key identifier: D2:40:1A:A3:1C:10:02:FD:C8:16:3B:36:E8:8A:53:2A:59:EE:C9:53
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer: /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial: 019A7225EAEEDAE2617D215589A302B773C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number: 1071
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: rSOz5QaJhVfhl2QcCgE9X8V0dfhQPS+QLNrn5BpSxaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:ee:da:e2:61:7d:21:55:89:a3:02:b7:73:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=d2401aa31c1002fdc8163b36e88a532a59eec953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:0e:6f:ed:fd:12:73:cb:71:ca:fb:20:ba:
71:dc:2c:9d:ce:ca:b0:0a:88:1a:98:15:ed:75:30:
d0:3b:c5:4c:c1:40:5b:c2:9d:83:b3:94:46:e8:70:
3d:43:ed:da:01:0c:91:77:fd:3e:76:80:a5:cd:78:
4b:60:1d:cb:ae:21:08:5d:e6:ab:8d:0d:fa:d4:93:
4b:1a:07:ab:b1:ed:a0:1b:a9:92:7b:47:de:b4:51:
a0:eb:07:9d:02:f7:d6:32:2e:af:18:85:3e:0d:47:
20:1e:ee:c0:95:fa:a9:b5:1c:43:f7:46:dc:3d:43:
3e:b2:12:ab:e3:74:6b:3c:12:6b:c2:60:71:1a:eb:
0f:66:cc:ff:92:d2:d2:99:2e:19:56:71:82:3c:19:
04:07:d8:d2:52:fd:38:3a:83:4c:bb:08:21:52:fa:
59:61:24:ae:30:d4:f5:23:e1:34:bd:b7:b4:44:8e:
d6:c3:1d:f9:08:d6:18:62:67:2c:70:58:a1:fe:b6:
f8:6f:2d:16:27:58:9d:f7:95:c6:1c:0d:4d:7d:5d:
57:12:14:d9:4b:b8:a0:2e:32:a2:f4:f8:2c:13:a6:
4d:28:ee:db:e4:1b:6d:e8:f9:4f:91:d0:60:b3:56:
0f:11:8d:b2:42:b9:e7:52:30:1d:b5:aa:9c:9c:8d:
d4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:40:1A:A3:1C:10:02:FD:C8:16:3B:36:E8:8A:53:2A:59:EE:C9:53
X509v3 Authority Key Identifier:
keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:35:38:c3:df:21:6f:3e:cd:1f:88:67:b7:84:c9:15:63:5a:
b4:14:ec:08:93:e7:56:81:1c:11:3b:a1:9f:95:0b:87:c2:3f:
3c:47:15:b2:9a:d3:4b:23:0c:3f:0d:86:7f:7e:27:17:4c:03:
8b:29:22:52:65:57:fc:39:f0:c3:cd:b7:0a:8e:3c:9d:1d:47:
57:99:cb:c8:d1:bb:18:98:2f:0e:e7:9d:6c:37:5f:0f:b2:96:
5f:fd:b9:9f:9a:80:7a:20:6b:02:29:78:75:d6:4b:8d:ec:8f:
33:a6:3a:13:e0:b5:05:e6:3d:9a:6c:d1:d1:1f:61:78:ce:d1:
89:42:de:83:cd:76:af:20:08:b8:19:c3:3b:e8:19:ce:fd:75:
48:a3:2e:ad:d2:39:b3:51:75:ac:f0:06:01:97:d2:46:20:42:
ca:e0:64:8e:45:20:5e:ce:bb:97:dc:7d:67:ed:7a:65:47:68:
2c:a3:cb:4e:2b:f7:0b:27:46:f9:f2:4c:c6:16:f9:01:da:e0:
ab:13:e1:c8:21:26:7f:0a:6d:83:da:4d:80:73:d0:9b:b5:c1:
cf:e7:e5:8b:2b:ce:f7:91:c0:f7:92:47:56:0e:21:45:e4:62:
3d:37:69:45:b3:3a:62:26:01:8e:d5:8a:bd:8d:33:89:ab:85:
cb:9b:d8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJeru2uJhfSFViaMCt3PBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMjdmMzI3ZTUyODY4OWQ0NTBjMWQ0YTYzNDZmNTQwZTc3
NTQwOTMwHhcNMjUxMTExMDkwMTE4WhcNMjUxMTEyMDkwMTE4WjAzMTEwLwYDVQQD
EyhkMjQwMWFhMzFjMTAwMmZkYzgxNjNiMzZlODhhNTMyYTU5ZWVjOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHwOb+39EnPLccr7ILpx3Cydzsqw
CogamBXtdTDQO8VMwUBbwp2Ds5RG6HA9Q+3aAQyRd/0+doClzXhLYB3LriEIXear
jQ361JNLGgerse2gG6mSe0fetFGg6wedAvfWMi6vGIU+DUcgHu7AlfqptRxD90bc
PUM+shKr43RrPBJrwmBxGusPZsz/ktLSmS4ZVnGCPBkEB9jSUv04OoNMuwghUvpZ
YSSuMNT1I+E0vbe0RI7Wwx35CNYYYmcscFih/rb4by0WJ1id95XGHA1NfV1XEhTZ
S7igLjKi9PgsE6ZNKO7b5Btt6PlPkdBgs1YPEY2yQrnnUjAdtaqcnI3UfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJAGqMcEAL9yBY7NuiKUypZ7slTMB8GA1UdIwQY
MBaAFEsn8yflKGidRQwdSmNG9UDndUCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAt
OWRlMWNkMWFmMzU2LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lYTAyYjktZDJmMC00YjIzLTgyNzAtOWRlMWNkMWFmMzU2
LzEvU3lmekotVW9hSjFGREIxS1kwYjFRT2QxUUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjU4w98h
bz7NH4hnt4TJFWNatBTsCJPnVoEcETuhn5ULh8I/PEcVsprTSyMMPw2Gf34nF0wD
iykiUmVX/Dnww823Co48nR1HV5nLyNG7GJgvDuedbDdfD7KWX/25n5qAeiBrAil4
ddZLjeyPM6Y6E+C1BeY9mmzR0R9heM7RiULeg812ryAIuBnDO+gZzv11SKMurdI5
s1F1rPAGAZfSRiBCyuBkjkUgXs67l9x9Z+16ZUdoLKPLTiv3CydG+fJMxhb5Adrg
qxPhyCEmfwptg9pNgHPQm7XBz+fliyvO95HA95JHVg4hReRiPTdpRbM6YiYBjtWK
vY0ziauFy5vYTg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client