Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: vgfRAvVvqvA39eXP+IibXRiPVcomb2gD2oQElDVrta4=
Subject key identifier: AE:4D:D2:1E:0A:94:92:FB:3C:C2:CF:9C:07:8B:D7:A4:62:77:0E:45
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 0196AE0E141D2BA6E7D4912A6D03ADBBCECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 03DD
Signing time: Thu 08 May 2025 04:01:20 +0000
Manifest this update: Thu 08 May 2025 04:01:20 +0000
Manifest next update: Fri 09 May 2025 04:01:20 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: IsiysedRSZUmPaF88XLBraUOsOBZLNafgz/EVv1GSLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:0e:14:1d:2b:a6:e7:d4:91:2a:6d:03:ad:bb:ce:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: May 8 04:01:20 2025 GMT
Not After : May 9 04:01:20 2025 GMT
Subject: CN=ae4dd21e0a9492fb3cc2cf9c078bd7a462770e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:42:2f:30:97:a8:8a:b0:d8:82:16:91:06:51:
2e:ab:0a:40:2a:f6:f0:35:e8:8b:0f:84:bd:35:41:
3f:db:4a:7e:90:9f:44:2f:17:01:ec:21:f9:ef:52:
15:1c:72:02:30:6d:dc:44:47:4c:d4:cc:b8:a9:b7:
f7:58:83:33:f4:3f:a8:4d:e7:0e:65:a7:24:55:f8:
70:06:32:f0:f7:e8:f0:8a:14:61:0e:d2:d1:d8:ef:
4c:11:eb:cc:5e:d9:74:f3:ad:0e:ff:3f:88:20:95:
e4:b9:7e:30:a2:5d:b5:23:c1:e0:df:ea:ce:7d:7d:
a8:59:07:23:2e:8a:85:07:bd:76:18:45:65:a7:23:
4b:7d:60:02:34:63:5e:05:24:1e:01:d8:3d:b3:bd:
f6:d8:4b:c4:5c:d9:a3:d5:3d:1a:30:4b:76:d0:8a:
b2:ec:02:a8:1b:91:a7:ea:32:5d:f2:d4:77:68:bc:
bf:1b:2c:58:a4:bd:96:29:6e:ab:e1:06:4f:c1:82:
26:35:0b:1f:19:10:e3:ca:00:f9:91:23:71:29:d3:
f9:3f:67:2d:f5:24:f9:f4:f3:0e:32:c5:1c:e8:39:
43:b2:8b:da:16:db:43:41:1b:d5:26:f0:3f:f5:8b:
26:f5:4e:ca:29:05:f3:ab:82:49:e1:bc:b0:ea:f8:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4D:D2:1E:0A:94:92:FB:3C:C2:CF:9C:07:8B:D7:A4:62:77:0E:45
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:24:10:50:17:92:83:aa:2c:2b:a8:bb:aa:59:e4:d6:9d:13:
27:8b:8f:f6:23:b7:5b:ae:51:03:f4:b3:29:f1:a3:72:54:d8:
8d:ac:7d:60:14:45:cd:98:6a:c9:2c:d3:b0:1f:6f:76:1b:c1:
3e:9b:74:28:cf:40:dd:fe:51:ad:3d:64:d7:0b:73:95:e3:e8:
47:8c:e7:f9:b3:b2:83:57:4d:2c:70:da:a3:3b:6e:d1:64:92:
40:63:d6:b5:0d:51:25:65:59:00:8f:1d:f9:eb:33:1c:5b:93:
29:ac:fb:37:0b:70:2e:0b:1d:a8:22:21:13:25:10:ad:f7:0a:
bf:8e:e4:fb:04:ea:3d:5e:44:63:da:63:2e:b9:db:81:de:2a:
5b:fe:40:7a:b4:d0:f9:20:43:02:f9:5e:e4:09:36:47:00:2b:
84:87:4e:0b:69:71:34:3d:ea:22:cc:aa:ec:e7:e8:0f:71:1d:
05:8a:33:95:54:e5:fb:e3:5e:fd:7e:8a:9f:eb:91:5f:6a:f2:
16:7d:15:9d:80:6a:37:35:6f:ef:c7:e6:a0:e5:00:80:a8:4a:
9d:89:2b:0b:a0:f3:e5:d7:7b:79:7c:b2:50:3e:4c:29:c1:f1:
f6:8c:ce:7d:9d:f2:f3:ef:bc:38:b0:5d:6c:19:ea:b1:86:72:
49:62:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:10:48 2025 by rpki-client