Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: b/kQm2f4XzLo7guWPTTt2jkEjti63Lhfybb5daL4z8U=
Subject key identifier: 2B:A5:B2:8D:13:BB:67:E6:73:C4:F4:AB:FC:92:8E:81:4C:12:6D:F0
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 019921B1A0321CBCF3104506A9F65F20C1D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 037A
Signing time: Sun 07 Sep 2025 01:01:52 +0000
Manifest this update: Sun 07 Sep 2025 01:01:52 +0000
Manifest next update: Mon 08 Sep 2025 01:01:52 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: L4hGfn5F3yk/ducFVZDu4kZRkAAOC64V2nVT5OMkXM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:a0:32:1c:bc:f3:10:45:06:a9:f6:5f:20:c1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: Sep 7 01:01:52 2025 GMT
Not After : Sep 8 01:01:52 2025 GMT
Subject: CN=2ba5b28d13bb67e673c4f4abfc928e814c126df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:02:99:f1:0d:ec:37:e1:a6:26:4a:e6:65:c5:
99:a8:c0:64:22:06:a3:aa:7b:cc:26:67:26:39:0f:
d6:47:96:ad:8d:25:7d:a0:71:d5:ef:ef:e4:db:9c:
66:8d:dc:73:75:8c:8d:54:61:d0:39:d8:fb:6c:dc:
3b:56:f1:50:00:01:17:76:45:df:2f:9a:87:f7:8d:
84:7f:3e:18:a8:c7:72:2f:d0:6e:54:97:99:c8:d1:
c4:70:09:0b:3d:5a:3a:c7:47:f0:9a:9e:31:42:5a:
b2:db:5b:cf:ff:15:ab:72:1c:00:c2:99:dc:3b:a0:
bb:94:f7:0e:4a:9e:f5:4d:ee:e0:15:2f:06:e2:57:
d2:be:dd:fe:e6:68:2c:b2:72:0c:2f:43:32:1b:20:
6c:8b:93:9a:63:46:d7:18:6a:2e:12:a5:aa:c8:7c:
c6:1d:63:25:0d:cc:92:9c:d8:8e:16:04:a4:5c:79:
71:8f:f9:8d:fe:9a:25:83:e6:71:79:2b:eb:1a:48:
1c:e6:47:13:41:1b:ec:a7:58:1b:b2:a5:b8:f6:f8:
c9:3b:c0:96:b3:4b:d3:27:04:fd:ce:a8:e1:86:9f:
2a:5e:31:c6:9b:28:19:4a:8b:89:21:14:6d:c0:91:
c5:94:3c:3e:41:08:a8:44:1e:11:17:23:a6:b6:60:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A5:B2:8D:13:BB:67:E6:73:C4:F4:AB:FC:92:8E:81:4C:12:6D:F0
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fd:8a:bb:30:18:a3:20:6a:d5:89:5d:80:56:70:96:27:ba:
db:31:a8:94:06:7f:88:36:8e:fe:60:f3:d4:15:04:bf:6d:3e:
e5:50:38:ff:9b:4c:fe:9d:1c:95:a8:d8:02:6f:cf:03:59:96:
f9:bc:2c:25:87:62:2d:9e:5c:0a:db:30:8c:dd:60:21:44:6e:
f6:a4:93:85:69:bf:ce:9e:85:78:26:8a:8e:f6:f6:4f:ea:1d:
cf:90:7c:04:ac:0f:00:0d:d8:91:01:d0:70:c2:80:02:da:66:
c8:bb:b7:99:00:9f:e6:ea:13:49:9c:55:41:ab:f3:d7:cc:5e:
77:77:4f:75:48:90:21:1f:61:c2:4e:f2:f3:97:d6:69:fd:fd:
0d:c6:0c:e8:03:60:d4:3b:9c:fa:f4:91:49:ac:48:e7:cb:7c:
15:3c:4b:69:f8:54:5f:66:06:d8:9e:dc:69:71:81:59:98:8c:
e8:92:96:fb:b1:6a:80:ad:b5:9b:cb:1f:03:21:95:54:8f:49:
df:09:bd:6f:47:a1:b2:7c:e8:ac:09:9d:cd:0a:c3:a6:7f:19:
8e:99:8a:3b:4a:9c:4e:80:34:44:81:9c:de:56:d8:9c:20:38:
25:48:62:fc:94:46:2c:41:02:c2:47:b3:c4:a4:8d:51:91:e4:
19:7f:3f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client