Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: zWzTQ7uXhyC25R/Gu5rPa56w4/92TLg2KPYK6xKKH9Y=
Subject key identifier: 22:E6:F7:5D:E8:5F:6E:59:B6:F0:6E:2A:32:BA:7D:BF:93:AC:5E:E8
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 019A71B874E3B69C803B58F3C793E49CB027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 0428
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: FeeOB3EQdtoGqMVkChywOR8aPxDG1uRE7Joy+jOp520=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:74:e3:b6:9c:80:3b:58:f3:c7:93:e4:9c:b0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=22e6f75de85f6e59b6f06e2a32ba7dbf93ac5ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:42:ee:e0:ff:b1:6c:19:6b:bf:60:ab:39:fc:
77:2e:63:1b:ac:00:32:cf:7f:55:af:98:9c:8d:73:
c6:53:67:07:c8:0b:7a:b3:73:66:ca:1c:c8:a1:28:
1d:84:d5:62:76:70:03:7f:32:cb:94:57:4c:6c:08:
27:37:d2:4b:c5:cc:83:2b:48:63:67:72:4c:52:b3:
0b:f9:07:13:b1:16:f3:5e:2a:d7:c3:e1:79:f4:51:
f5:79:b1:a1:b9:22:99:29:1b:1a:65:df:bc:f1:0f:
30:48:f3:c1:a5:bc:64:ec:e5:a1:d4:a1:a6:04:78:
01:9e:c4:9b:dd:45:94:0e:b3:f2:ef:d1:3d:57:fd:
cc:a1:37:a1:04:ac:fa:62:e3:9d:39:a5:b4:5b:e8:
88:71:e0:78:e7:9e:f7:2f:c2:ee:ed:89:84:12:8c:
64:5e:48:13:b4:d2:f3:47:61:f6:7c:4d:2e:a3:c8:
58:bc:65:e7:92:b7:fb:84:13:c3:77:e0:73:bd:d4:
dc:a7:4f:0a:07:c0:f6:94:a4:cb:73:e9:63:6f:01:
35:c1:25:a2:90:c5:51:a4:bf:17:d1:7b:de:34:64:
49:b6:d5:b0:59:35:01:3b:f0:22:a6:c1:1b:54:c4:
82:28:83:fd:85:89:14:21:cb:bd:3d:35:df:e8:b1:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E6:F7:5D:E8:5F:6E:59:B6:F0:6E:2A:32:BA:7D:BF:93:AC:5E:E8
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:47:86:d8:75:cb:7e:8b:5a:7a:c9:48:12:d5:ee:4f:0c:
08:b6:21:c3:53:bf:35:e7:67:60:86:44:2f:12:58:f8:b8:b6:
b9:01:4c:b7:a6:b3:54:ff:c6:5e:54:ef:e7:66:b6:49:c7:2c:
05:c7:71:5f:5b:ee:d4:c5:33:b6:9e:d7:6e:cf:7d:47:8f:f8:
8c:cf:70:d9:0a:33:f9:9a:c9:06:e0:20:b1:24:f2:6d:f7:4c:
a3:f8:9e:c0:59:22:5f:fb:da:99:d1:f1:55:63:6f:27:3b:f0:
24:8b:7c:ad:55:fc:0b:20:6b:92:f0:5b:4e:66:02:d6:13:64:
b6:d3:ed:d4:02:71:cb:a5:18:48:ac:bc:10:eb:26:6b:fa:45:
88:51:2c:2a:df:93:98:28:9d:3f:76:b8:d6:b6:b8:73:90:55:
98:93:bc:4e:ca:ba:73:ce:5f:7a:31:c0:29:98:ab:d9:11:4e:
3f:c0:c6:a2:eb:df:0f:c2:df:68:6b:5e:30:b2:d0:ec:66:a3:
6a:9b:ee:57:9f:25:95:1c:60:db:81:fa:cf:22:b9:56:f1:58:
6d:fe:76:ea:f5:4b:8b:27:c2:ed:2f:ce:41:a5:04:f1:a7:8a:
0b:d8:ab:d8:b9:c7:3a:08:92:c9:84:63:e9:71:52:55:e5:26:
73:cd:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:22 2025 by rpki-client