Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier: xNpzJ985tezh9klLdRhhPyaIKunMnhBgEZL3vAjj+4A=
Subject key identifier: AF:3C:9F:F3:19:51:BA:40:14:F1:4F:DC:6E:74:FF:01:7E:4F:9E:1F
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer: /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial: 0197B70EBC1034917031A3121B8D8E07E062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number: 0F07
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: k2JIcqvILlr0Cu3cupxVzRvx43GvHyCD4g/rVKE5IuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bc:10:34:91:70:31:a3:12:1b:8d:8e:07:e0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=af3c9ff31951ba4014f14fdc6e74ff017e4f9e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:aa:50:e5:b0:66:8e:a5:89:1b:88:6d:48:
9f:96:94:cb:43:71:40:95:fc:36:d9:dd:a8:32:ec:
68:a2:46:9a:43:2a:6a:93:da:fc:d8:80:1e:d2:a1:
9a:24:2e:ac:6d:95:33:81:19:49:fc:4e:3c:65:ed:
78:b7:1e:11:7c:fd:b0:89:72:08:92:48:3f:e3:1d:
46:b1:d9:bd:bd:7d:cf:0b:9a:4d:8d:1b:b8:95:b3:
e5:01:d6:fe:d7:ba:f9:34:b9:45:06:bc:6b:f2:b2:
28:ae:d3:1a:e6:34:ee:29:af:53:c5:6a:58:a4:49:
03:9a:8b:4b:8c:7e:4d:dc:5d:87:f6:7f:c0:67:27:
a8:57:15:52:a2:06:48:9c:c2:63:e2:3a:74:19:67:
98:e1:45:a4:50:7b:76:e1:55:9f:55:45:10:a3:5c:
0b:80:f1:53:81:61:fe:7d:da:51:6e:ee:ca:25:88:
73:71:d3:0c:df:ff:05:80:14:af:7b:43:9d:38:8a:
89:e9:8d:24:6d:ce:a2:e5:63:6d:b6:8b:bc:98:78:
8f:f7:b2:68:fa:59:1e:34:6a:3e:57:77:9b:90:56:
53:02:49:cc:43:a6:53:a4:b0:93:44:b0:36:8f:06:
3e:a0:ce:3e:e5:46:26:7a:ed:92:96:b0:c3:98:96:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:9F:F3:19:51:BA:40:14:F1:4F:DC:6E:74:FF:01:7E:4F:9E:1F
X509v3 Authority Key Identifier:
keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:16:b2:02:80:98:be:c5:98:8c:c1:e2:eb:10:b6:06:d5:
17:69:46:77:f2:4c:91:0f:b8:d6:36:f2:dc:8b:73:2c:0f:ec:
35:65:63:48:70:9b:fc:d1:11:c9:89:ac:97:0b:e0:7a:2b:18:
a0:e0:81:a8:e1:e1:01:48:34:de:d3:8f:a5:0a:a9:28:85:80:
1f:a1:1d:64:bb:d2:1c:da:a9:06:87:67:f1:a6:3c:e8:20:cf:
21:2a:94:59:7f:ca:17:ed:e2:ed:3e:04:cf:da:7e:e5:c9:1d:
9e:49:91:9e:5a:e6:eb:f6:2b:66:23:b8:ea:8c:77:ca:6f:9e:
08:d0:b6:36:bc:a8:a4:3b:ba:e4:cd:9f:fa:f2:11:e0:bf:88:
12:43:c9:88:8d:ac:d8:3e:c6:ab:26:2a:cc:80:ac:71:ce:aa:
40:5c:ee:0c:df:ca:b9:e1:4d:11:f0:ee:b8:d6:e3:3a:94:f1:
81:96:eb:07:db:07:df:c5:c2:3a:82:93:9b:e7:d0:cf:69:26:
2a:95:f1:2c:e8:37:d8:36:e9:83:9e:37:aa:00:2c:1f:c8:6f:
d1:01:cb:7e:68:cc:d6:90:58:92:a7:95:83:d4:8f:c9:9b:76:
8f:ed:33:a9:47:06:01:a5:e6:82:a1:84:08:c3:52:e4:96:a2:
d1:95:9f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:18 2025 by rpki-client