Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: CvhDkQwf2JZS+p9mTeLpOH1C93Rqf8K8Qpq3IUo6OG8=
Subject key identifier: ED:29:18:1F:86:FF:2C:38:59:9E:5E:73:20:80:40:F5:8A:B3:86:29
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 0198D6604BF0AD63082800A03C73547074A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 04FB
Signing time: Sat 23 Aug 2025 10:01:31 +0000
Manifest this update: Sat 23 Aug 2025 10:01:31 +0000
Manifest next update: Sun 24 Aug 2025 10:01:31 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: qpKp7gXcbXRW1cTOyo5B8iA/LItMeWs9XPzAXW2knf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:4b:f0:ad:63:08:28:00:a0:3c:73:54:70:74:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: Aug 23 10:01:31 2025 GMT
Not After : Aug 24 10:01:31 2025 GMT
Subject: CN=ed29181f86ff2c38599e5e73208040f58ab38629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:4a:4e:a2:74:79:59:49:72:6d:94:75:b1:
b4:37:7f:44:8d:99:23:58:05:37:17:54:6d:5f:3a:
e3:41:4f:72:0b:00:b6:28:a1:43:b1:b5:6b:e0:d3:
c9:1f:63:a7:e6:e6:6c:86:2b:4f:04:fc:5d:e4:24:
ec:51:1b:bf:81:1a:c8:7e:e2:0d:59:fa:df:56:4c:
5b:9b:16:36:47:c1:72:eb:79:21:13:b3:d4:33:73:
0d:f8:e0:a8:ac:8d:40:a4:b7:fe:ce:45:0e:8c:54:
a9:47:ce:43:a2:62:78:bc:2d:26:09:70:0e:5c:57:
48:1a:9f:13:2b:94:9f:87:97:06:54:e6:14:7c:92:
cb:ec:1e:19:2e:cd:5d:fb:9b:af:44:1c:a4:12:e7:
c4:4d:fb:ac:c9:48:62:e1:ee:fa:37:26:fa:ba:1d:
14:1e:e8:01:45:f7:fc:5d:87:94:e1:d0:9b:35:5c:
2d:1f:a8:65:ad:13:08:ba:39:e7:a8:1d:8a:70:4c:
94:0f:ed:24:e7:fd:7e:de:4a:83:0d:4c:3f:3e:ba:
78:e8:84:39:9f:1d:2c:e5:98:ce:24:56:25:30:dd:
5a:f2:bc:4b:6d:05:3b:b7:f4:0b:71:bc:78:be:b5:
97:88:47:ce:d5:99:9c:41:7a:28:0a:be:bc:6e:a9:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:29:18:1F:86:FF:2C:38:59:9E:5E:73:20:80:40:F5:8A:B3:86:29
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:5e:bb:45:55:01:11:7b:1a:2a:46:2a:d9:1e:f4:76:aa:46:
91:de:e7:ea:8d:dc:cd:22:11:f1:6a:6b:5b:44:8f:79:19:dd:
ab:e2:65:8b:b4:c2:40:47:49:78:44:be:a4:76:ee:6a:81:25:
41:43:03:98:ea:eb:0d:44:17:ff:9d:1f:68:a5:36:c7:9f:54:
4c:4f:3b:31:d7:d8:ec:9c:03:1b:f0:dd:12:15:c5:db:5b:f2:
d3:10:32:9a:02:dc:25:77:b3:2e:b0:83:56:4f:45:25:11:94:
0e:22:5e:75:83:0a:0d:83:c9:7a:da:e5:3b:08:27:58:b2:3f:
14:0e:75:d9:9c:60:57:41:50:17:d4:6c:b6:42:f3:bd:9c:a0:
09:e7:27:3c:79:f3:91:2e:b0:10:39:99:4d:32:1f:ec:c5:f1:
db:8d:f1:8f:6a:5d:91:91:47:aa:f9:32:55:17:4b:27:9f:59:
e9:68:f1:20:d8:0f:6e:76:68:aa:68:4d:9a:1a:5e:bc:d5:1a:
33:49:15:d9:d6:dc:61:c4:16:3b:0b:b2:4f:b3:2a:68:ac:4c:
12:85:a8:0c:c1:9c:2e:25:78:7a:29:c6:23:48:1a:8d:29:f4:
9d:95:7d:05:4b:4d:46:74:d4:a4:1b:76:8c:56:8a:1f:c8:b8:
0d:3b:3e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:05:19 2025 by rpki-client