Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: fqmt6our4BFRc7K+gOy4AqeKhja2OEUeMQ3UcC2onm4=
Subject key identifier: EF:01:D3:DC:7B:4A:B2:1B:7D:BF:91:98:1E:5D:AF:65:01:52:D2:A2
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 0197B6A1FD7CC28A1A9A5C1C702F9814BBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 0466
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: fKn87lyhqoJgv/+Jrv1EaOXEsE5E8Nnw5yxVN1oiFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fd:7c:c2:8a:1a:9a:5c:1c:70:2f:98:14:bb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=ef01d3dc7b4ab21b7dbf91981e5daf650152d2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:cd:e4:8d:76:8d:fc:5a:90:d2:32:ee:c1:18:
ce:e4:65:49:d9:9f:34:cc:c8:f3:f9:93:e9:ee:31:
f0:39:5f:83:31:b2:27:c4:5f:6c:59:53:ee:29:1b:
86:02:ed:d5:14:5b:53:7e:ca:bf:5e:c6:3f:60:88:
5f:b8:f1:b6:27:52:91:d7:99:2b:9d:05:29:f1:58:
78:b6:4b:c9:ab:61:6c:f2:65:6f:86:4f:dc:fb:b4:
94:f9:d4:04:cf:d4:9f:70:a7:70:86:5b:1b:27:e7:
22:66:f0:3c:e1:8b:5c:35:f4:de:ad:aa:cb:46:c1:
ab:ca:09:76:07:a3:79:8c:8c:19:ba:c8:df:48:79:
5a:df:fe:69:e9:9a:29:a8:bb:c6:92:e9:54:f1:29:
2f:e7:58:25:6c:8d:d1:8b:90:ef:61:1d:42:82:5d:
38:a3:14:f1:4e:11:f2:9a:09:51:a5:05:65:f0:38:
94:46:7a:fc:87:16:a7:9d:07:2e:a5:07:71:74:fc:
94:1c:1d:3c:3a:24:62:1e:b3:3c:e2:82:24:01:b5:
48:d0:e7:93:4e:3d:4c:be:3d:9a:7a:11:59:7e:46:
ef:3e:a3:93:4e:4e:0a:f7:ef:45:70:cd:8b:6a:fa:
14:13:3e:a4:36:75:97:eb:74:87:e1:8a:a2:3b:8a:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:D3:DC:7B:4A:B2:1B:7D:BF:91:98:1E:5D:AF:65:01:52:D2:A2
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:12:9c:36:45:ef:e5:53:a3:97:62:8a:0d:51:e0:7a:98:e1:
62:96:b3:64:43:81:1f:fa:6c:50:42:47:f2:46:38:cf:b2:56:
bd:6b:31:93:fa:2a:75:bc:95:98:02:f2:a0:eb:80:b7:59:e1:
8c:94:6c:21:0c:4c:f8:2c:e1:c9:a9:a0:e2:68:de:4a:69:da:
fa:1d:c9:04:09:4d:b3:86:1d:7e:3a:cc:fa:9a:89:f9:01:e5:
c6:da:4b:57:5a:21:56:d6:4f:8d:fe:ec:98:69:1f:09:88:c3:
71:89:ff:b5:3e:5e:6e:80:b3:74:09:e9:05:a0:f7:81:14:ba:
d2:25:3a:fd:cf:20:b9:56:b1:c7:ae:43:89:44:65:19:6d:32:
32:1b:d2:4d:a1:3b:87:72:04:b2:49:d2:1f:b9:9f:3a:51:a8:
ba:5e:1c:24:f6:1f:d7:ca:0b:2b:d0:be:62:c0:a7:8c:a6:e0:
18:61:c0:1e:7f:d2:0f:2c:11:0a:73:2d:94:f5:bf:e9:23:e5:
a4:ff:f7:57:11:75:2e:1e:61:4e:73:6f:fe:9e:a2:bd:8a:5c:
14:0f:83:cb:75:66:d7:d9:b7:fe:c4:9a:f3:c9:10:55:ae:65:
55:cf:df:6c:84:5c:82:db:9e:da:3c:59:40:3e:42:79:f6:48:
cc:53:ae:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:06 2025 by rpki-client