
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
File: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft (raw, json)
Hash identifier: y5872Ejq8b5zs0cMU40PsvNLHZpaL7D1YR1ewj3x3j4=
Subject key identifier: B7:2B:ED:D6:34:71:2D:9B:5D:C6:44:CD:5A:21:A3:2F:6E:7E:BF:A4
Authority key identifier: B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
Certificate issuer: /CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Certificate serial: 0196A9F9CE1FD2C25F8717662433F2043BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
Manifest number: 0233
Signing time: Wed 07 May 2025 09:00:42 +0000
Manifest this update: Wed 07 May 2025 09:00:42 +0000
Manifest next update: Thu 08 May 2025 09:00:42 +0000
Files and hashes: 1: syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl (hash: /O/1GNtnK6UbMDJJoSDLOd063vo/SYwEAf1Ux5FGZqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:f9:ce:1f:d2:c2:5f:87:17:66:24:33:f2:04:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32294a3901becff2afe80eb933e2b91fdd7e8f7
Validity
Not Before: May 7 09:00:42 2025 GMT
Not After : May 8 09:00:42 2025 GMT
Subject: CN=b72bedd634712d9b5dc644cd5a21a32f6e7ebfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:ad:eb:40:20:bb:2e:df:e6:0b:15:f0:4b:
0b:d0:87:77:8d:0b:f0:ae:f3:94:bf:b3:e9:32:70:
d3:15:e6:5b:d6:f5:0e:ee:55:ac:6f:7c:dc:c1:a0:
42:06:9b:d9:cc:a7:6a:70:f5:33:ac:46:69:31:14:
fe:a2:eb:6d:2f:78:22:df:bf:1b:01:bd:e4:18:fe:
d7:e5:5c:51:24:44:5f:67:fc:05:ed:97:61:d7:db:
cd:0d:6b:0b:d4:1c:ef:31:0c:9f:cd:d4:69:b7:ff:
60:f1:df:ef:8a:b5:61:85:b9:d2:80:d2:71:c2:f0:
c3:6a:ec:a7:18:15:71:bb:ef:70:3d:93:74:dd:77:
17:f2:ef:24:49:ed:87:bf:bc:8c:96:7e:b5:0d:5d:
e6:35:44:14:4c:40:43:4b:41:de:85:de:a4:6e:39:
8e:9e:79:8e:db:93:5d:35:d7:88:a3:14:74:8d:72:
af:19:13:b0:16:fc:a1:bf:a1:a9:ec:3c:7a:fd:a5:
1a:e1:d7:2d:b3:01:90:4a:1a:31:bd:52:f0:14:85:
04:ee:17:cc:cb:05:b2:d9:bf:4f:07:40:59:8d:54:
cb:6e:e0:b6:eb:74:04:83:d9:d9:8d:15:41:9a:39:
d5:2f:35:f9:44:5b:fb:43:af:7f:a2:30:14:4c:ca:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2B:ED:D6:34:71:2D:9B:5D:C6:44:CD:5A:21:A3:2F:6E:7E:BF:A4
X509v3 Authority Key Identifier:
keyid:B3:22:94:A3:90:1B:EC:FF:2A:FE:80:EB:93:3E:2B:91:FD:D7:E8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/fce88a-0fa8-42a3-b06a-01948d4ac705/1/syKUo5Ab7P8q_oDrkz4rkf3X6Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:08:cc:bc:9a:46:b3:39:19:ac:af:d7:e6:f6:3d:97:6e:bd:
f8:6a:24:3f:57:d7:cc:7d:9c:c2:8a:52:71:9c:a3:bd:03:1e:
58:46:b2:72:2c:47:6b:2b:0e:0e:c3:c5:36:39:7a:af:72:7e:
7c:51:d9:c0:d3:3c:d1:63:cd:da:c9:b6:57:85:37:a9:24:55:
dd:97:a1:3e:82:ec:8c:8f:32:f5:b0:7b:71:54:0c:6b:f8:ef:
7f:86:d0:8f:40:94:37:6a:36:09:5f:3b:e9:b7:8b:aa:dc:90:
8c:e0:8e:2a:26:a3:47:cb:22:53:71:47:f5:8a:e3:c6:55:54:
41:d2:38:b6:e7:14:2e:b0:33:7b:a6:12:63:13:74:5c:60:f6:
87:69:1d:94:c0:2e:84:c0:9a:21:c2:e0:65:7b:ca:7a:d6:08:
5b:41:7d:5c:4e:42:38:9b:e5:7c:0d:11:b2:8f:58:27:ae:29:
7a:c4:31:37:af:3c:6a:7f:e3:60:ae:3a:d9:85:ca:b8:9c:5a:
d7:c5:10:b4:c1:76:a5:83:32:14:fb:f3:11:52:d6:98:12:0a:
3c:f3:69:66:e0:ad:80:65:0f:e2:d6:db:7c:dc:b2:50:5c:f7:
a6:a5:e8:4a:95:41:61:e1:ef:0d:bd:20:5a:e0:fb:23:ed:62:
df:6e:0d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZap+c4f0sJfhxdmJDPyBDu4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMjI5NGEzOTAxYmVjZmYyYWZlODBlYjkzM2UyYjkxZmRk
N2U4ZjcwHhcNMjUwNTA3MDkwMDQyWhcNMjUwNTA4MDkwMDQyWjAzMTEwLwYDVQQD
EyhiNzJiZWRkNjM0NzEyZDliNWRjNjQ0Y2Q1YTIxYTMyZjZlN2ViZmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv2t60Aguy7f5gsV8EsL0Id3jQvw
rvOUv7PpMnDTFeZb1vUO7lWsb3zcwaBCBpvZzKdqcPUzrEZpMRT+outtL3gi378b
Ab3kGP7X5VxRJERfZ/wF7Zdh19vNDWsL1BzvMQyfzdRpt/9g8d/virVhhbnSgNJx
wvDDauynGBVxu+9wPZN03XcX8u8kSe2Hv7yMln61DV3mNUQUTEBDS0Hehd6kbjmO
nnmO25NdNdeIoxR0jXKvGROwFvyhv6Gp7Dx6/aUa4dctswGQShoxvVLwFIUE7hfM
ywWy2b9PB0BZjVTLbuC263QEg9nZjRVBmjnVLzX5RFv7Q69/ojAUTMqDIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcr7dY0cS2bXcZEzVohoy9ufr+kMB8GA1UdIwQY
MBaAFLMilKOQG+z/Kv6A65M+K5H91+j3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEt
MDE5NDhkNGFjNzA1LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9mY2U4OGEtMGZhOC00MmEzLWIwNmEtMDE5NDhkNGFjNzA1
LzEvc3lLVW81QWI3UDhxX29Ecmt6NHJrZjNYNlBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwjMvJpG
szkZrK/X5vY9l269+GokP1fXzH2cwopScZyjvQMeWEaycixHaysODsPFNjl6r3J+
fFHZwNM80WPN2sm2V4U3qSRV3ZehPoLsjI8y9bB7cVQMa/jvf4bQj0CUN2o2CV87
6beLqtyQjOCOKiajR8siU3FH9YrjxlVUQdI4tucULrAze6YSYxN0XGD2h2kdlMAu
hMCaIcLgZXvKetYIW0F9XE5COJvlfA0Rso9YJ64pesQxN688an/jYK462YXKuJxa
18UQtMF2pYMyFPvzEVLWmBIKPPNpZuCtgGUP4tbbfNyyUFz3pqXoSpVBYeHvDb0g
WuD7I+1i324NWA==
-----END CERTIFICATE-----
Generated at Wed May 7 11:46:29 2025 by rpki-client