
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: mc2AOuxP4KdntP0XJpvTI/1QlXKBSJdDbx1M2f0iihA=
Subject key identifier: 01:F4:DD:2D:A8:97:42:F9:DA:9D:C1:8C:AA:86:A9:2B:CA:41:27:B8
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 0199FBEAF2DDDC78AC1D625C389CD6E8669D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 0593
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: c6W5p/b3V+zLpTnNrEOtjmrTiLl9xbV4kjvt0PkmvVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f2:dd:dc:78:ac:1d:62:5c:38:9c:d6:e8:66:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=01f4dd2da89742f9da9dc18caa86a92bca4127b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:fd:df:b0:7f:45:a4:18:6a:0b:48:97:0d:32:
0e:62:26:0f:bc:1a:b3:c2:6a:43:71:dc:ab:e3:0c:
4d:85:5c:1e:2b:05:fe:91:a0:c8:5c:df:bd:c4:20:
48:19:11:29:72:e4:b1:5a:07:7b:37:f5:d8:b9:6d:
99:2e:93:68:ea:ae:93:ba:b6:1c:b3:11:6a:b3:89:
e4:57:ce:ef:db:87:07:6a:c2:62:a6:48:ce:de:46:
12:f5:07:0a:0b:73:92:00:b5:ac:76:fb:93:51:16:
b1:35:d7:04:c9:be:95:6b:63:b4:1e:88:1d:01:fc:
22:a7:82:26:21:05:d2:fa:4a:c1:ae:27:6c:42:36:
49:0b:d0:82:0b:95:c6:37:c4:6d:1d:8a:87:d2:f3:
3e:8b:8d:0e:e6:e1:12:14:c7:b8:af:31:67:7d:24:
75:9f:d7:85:d2:74:2e:cd:ff:90:41:fe:23:4f:48:
b1:02:10:e7:9c:d2:ab:37:56:3f:ba:6d:d2:9f:73:
4d:62:6a:0d:41:12:8b:97:ab:7c:1e:9e:cc:85:0a:
a8:ce:ab:96:90:2f:0e:6a:a0:db:94:41:73:c3:11:
03:07:be:57:00:c2:61:f5:61:70:14:01:8d:0b:74:
b1:c0:18:a7:0d:b6:40:e5:ea:96:71:ba:b1:09:f6:
f5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F4:DD:2D:A8:97:42:F9:DA:9D:C1:8C:AA:86:A9:2B:CA:41:27:B8
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3d:20:50:39:76:9c:88:1a:65:5c:ae:95:69:45:37:ca:4d:
56:68:c7:a7:d5:ae:02:8f:30:db:17:63:63:2c:d9:56:22:94:
97:b4:f3:8c:33:58:c7:b1:38:6d:8c:29:b1:6a:0d:f0:a2:c0:
07:48:32:a1:d4:9f:ea:d9:43:df:96:a0:3f:9e:3d:b7:fa:03:
58:e4:4e:c4:39:30:cc:48:8e:e6:3a:c8:d0:8a:d8:2f:0d:33:
c2:93:9e:82:73:ed:8e:7e:a4:4a:e3:bc:8e:d3:ab:49:4d:3a:
93:00:01:b6:ca:a2:1b:9f:fe:7c:fd:66:59:aa:f3:dc:81:5d:
45:c9:30:9c:fe:bd:43:63:da:f8:38:e5:d1:f0:12:f0:91:e7:
30:60:ff:1d:6b:ad:8c:23:78:3a:cf:5e:84:c2:4a:b2:44:4c:
f1:fa:88:5c:56:38:fc:1b:57:3a:95:78:c9:de:30:41:3b:b7:
cb:0c:7e:47:84:cb:01:27:31:d7:21:9b:40:fb:00:a9:4b:45:
2f:8d:70:51:c7:50:ee:d6:41:65:e9:d2:c7:e6:d1:15:c6:6e:
d4:3d:ee:a6:c2:35:02:f1:87:99:86:be:fb:1f:06:68:d2:77:
ba:b8:b4:c6:c9:d5:96:fe:8d:42:61:7a:49:64:d7:3c:11:f4:
03:7d:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:12 2025 by rpki-client