Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
File: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft (raw, json)
Hash identifier: plSr0/PPgapO88PaD5PSaVxqfNAlej5WUftO4JDiKvc=
Subject key identifier: 36:73:8C:B5:93:E4:DD:7F:28:18:5A:C4:7B:DD:D8:F9:F2:07:E2:83
Authority key identifier: 4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
Certificate issuer: /CN=4b27f327e528689d450c1d4a6346f540e7754093
Certificate serial: 019A515051556EF3918FA769D2239FF894CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
Manifest number: 1060
Signing time: Wed 05 Nov 2025 00:00:09 +0000
Manifest this update: Wed 05 Nov 2025 00:00:09 +0000
Manifest next update: Thu 06 Nov 2025 00:00:09 +0000
Files and hashes: 1: SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl (hash: jinnTgWJCCFX4sF9iYMd5MaAzlBl7WdPEGtxKyQ0e70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:51:55:6e:f3:91:8f:a7:69:d2:23:9f:f8:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b27f327e528689d450c1d4a6346f540e7754093
Validity
Not Before: Nov 5 00:00:09 2025 GMT
Not After : Nov 6 00:00:09 2025 GMT
Subject: CN=36738cb593e4dd7f28185ac47bddd8f9f207e283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:41:97:02:75:78:a4:f1:17:fd:68:d2:98:
14:b2:33:72:5b:8b:07:15:bd:91:00:28:89:9a:00:
e7:a1:f4:4d:a2:26:e8:e8:4c:75:ba:71:f0:cd:a3:
f1:51:10:11:58:65:31:89:6c:71:30:55:7b:6c:ba:
77:d8:d8:d2:4d:3b:7f:b8:2f:9f:f9:7e:79:e5:cc:
e3:ab:b8:a5:93:b3:e0:02:d1:cc:33:7b:6a:cc:c5:
34:85:a4:b8:65:ae:f9:6e:69:3f:49:89:c1:38:55:
cf:28:68:0b:c2:f1:ae:b4:45:86:96:b2:b4:be:95:
4d:43:56:28:ae:d6:c8:41:5f:bd:01:be:84:f0:f0:
0f:52:86:bf:be:ff:c8:b1:82:ea:a8:d5:45:37:d2:
eb:cc:02:df:c0:66:47:f0:4e:42:f3:c2:0d:86:e7:
2c:05:25:ca:e5:72:e8:16:97:19:e3:c4:ed:82:4d:
b0:6a:0a:24:5d:89:a5:49:bf:fb:12:ec:f3:ca:89:
c6:90:14:d0:bd:a5:7a:96:b0:58:d5:22:76:b0:c6:
30:39:ac:37:15:36:7f:c0:84:fe:42:13:7a:7f:a6:
f2:75:1f:d5:d9:8a:e4:22:e2:13:03:e0:1d:f9:1c:
6e:aa:b0:29:4a:96:bc:8a:ef:a9:3c:72:9b:4c:6f:
d1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:73:8C:B5:93:E4:DD:7F:28:18:5A:C4:7B:DD:D8:F9:F2:07:E2:83
X509v3 Authority Key Identifier:
keyid:4B:27:F3:27:E5:28:68:9D:45:0C:1D:4A:63:46:F5:40:E7:75:40:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ea02b9-d2f0-4b23-8270-9de1cd1af356/1/SyfzJ-UoaJ1FDB1KY0b1QOd1QJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0f:2a:52:48:d5:4f:8d:36:87:5e:8c:1c:c0:d2:59:fd:85:
8c:32:29:47:47:6d:ff:10:ff:68:b1:ee:cf:76:d3:6d:1a:4f:
75:c2:e0:bf:b0:ea:b1:3e:5b:a3:43:ea:71:41:15:03:34:5b:
97:6d:8c:79:7d:32:04:3d:41:c7:d2:e7:de:14:d0:db:18:75:
81:4a:ed:72:5b:78:d9:31:56:99:ff:77:aa:46:85:4f:30:cd:
17:f6:1a:bc:e2:b6:20:f6:56:24:b7:0c:59:e2:a6:35:2c:f6:
02:f8:a6:30:bb:92:09:8a:3f:68:1b:3e:35:42:fd:de:ed:66:
e7:78:63:72:f3:92:e2:e0:84:e4:72:06:f6:74:a6:5e:c4:19:
31:0b:c6:f5:d0:00:32:08:5e:bb:dd:3b:6a:b2:74:7d:16:29:
1f:02:da:4d:71:6f:cb:f5:1e:f3:ce:50:e0:c2:47:39:18:12:
47:c6:ea:ee:0a:cc:71:87:6b:28:5b:67:bf:88:d9:a2:96:98:
ea:54:d7:f3:e8:1d:9a:6a:3d:1c:56:a4:88:b9:18:28:8f:48:
fb:4b:3a:9d:50:51:08:7b:24:7d:dc:96:80:b1:52:79:c9:1b:
ff:31:25:cf:31:11:46:93:34:ee:42:a3:19:be:6f:da:c1:90:
f8:c6:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:47 2025 by rpki-client