Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: PUtimxKXN9eCBLmXYxCuEGjpKc01a+QUDzUXPrK/tCQ=
Subject key identifier: 63:DF:E8:53:ED:8C:93:29:8B:85:DF:D2:5C:78:BE:EC:D0:5A:1B:61
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019A4F62968286793EB154847E6B3255FF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0DF2
Signing time: Tue 04 Nov 2025 15:00:52 +0000
Manifest this update: Tue 04 Nov 2025 15:00:52 +0000
Manifest next update: Wed 05 Nov 2025 15:00:52 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: ZpK/CoIoloqN28i2SJ28wH5ODF6QHMB5eZc+v90mT0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:96:82:86:79:3e:b1:54:84:7e:6b:32:55:ff:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Nov 4 15:00:52 2025 GMT
Not After : Nov 5 15:00:52 2025 GMT
Subject: CN=63dfe853ed8c93298b85dfd25c78beecd05a1b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8c:02:83:f9:ff:4e:87:44:aa:b6:d6:3a:9b:
3c:ad:df:d6:23:81:69:3b:88:b0:77:7d:c3:9c:29:
4e:1d:ad:4b:21:ed:39:35:8a:80:99:bb:f1:a8:0b:
16:98:54:b3:fb:30:dd:69:d6:d4:e0:36:8d:df:7c:
92:b7:54:57:4d:14:6a:69:b2:1a:ed:3e:3f:8b:a9:
5d:ec:a9:20:f9:79:61:62:24:e1:f0:ee:a9:a5:07:
f8:24:17:0a:b2:fc:cf:7d:d8:33:ed:a4:0b:d7:80:
eb:ac:01:f6:df:77:92:1c:e1:5c:6a:fe:af:46:97:
b2:7d:b4:59:6e:b3:39:19:bd:2b:18:7c:83:7b:03:
c4:67:ce:39:a7:c0:60:37:3f:e7:9a:41:9a:77:df:
42:a9:a0:01:e4:b4:d7:9b:7c:ec:ce:39:09:cf:42:
17:19:ce:1d:6b:1c:43:9c:74:65:0d:56:bb:59:16:
a1:c5:82:5a:46:1e:0e:95:7e:25:11:e7:3b:9c:8f:
55:22:cb:4f:07:81:1c:b0:71:63:1c:26:3e:88:96:
23:46:02:4c:8d:b5:43:d1:4c:10:0a:5b:07:56:bf:
cf:87:c2:9a:b6:51:a7:27:44:f1:cd:51:9b:5d:9e:
b6:71:99:13:f5:8b:ee:33:63:c3:e8:d4:49:cc:fb:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:E8:53:ED:8C:93:29:8B:85:DF:D2:5C:78:BE:EC:D0:5A:1B:61
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:85:4b:03:85:b7:41:35:ca:f4:69:9e:ee:36:eb:69:e1:86:
f5:92:1b:ce:24:69:7f:f3:66:4a:f4:90:91:6b:29:50:66:10:
29:1e:d6:3f:9d:f5:85:1f:75:59:2d:a3:09:23:7a:bd:b8:cb:
9f:a3:95:d3:1f:20:e2:58:1a:63:99:b0:f1:e9:87:6a:24:3e:
23:37:0d:70:a2:b8:d5:f7:85:27:59:84:e9:27:dc:c5:aa:52:
77:53:ab:bc:fe:ea:a3:b2:fd:9e:25:c6:1a:3d:db:ae:76:ef:
4c:5a:9f:a3:9e:c3:91:33:e6:ee:d8:b5:99:cf:b8:9a:9f:68:
cb:5e:12:b6:ba:a3:f2:68:2e:7b:75:56:48:9f:90:42:bf:61:
91:26:b5:62:9a:58:61:29:c4:a3:87:e8:4e:c8:41:04:13:17:
cd:3b:a7:a1:50:84:8b:ef:2c:49:00:66:a2:a1:53:e4:47:6c:
b0:e8:6a:60:bb:60:ee:3a:17:69:4f:14:c9:f3:32:41:e1:ec:
a1:6b:38:55:0b:10:3d:0b:f3:5a:fd:72:ba:3a:73:84:0a:25:
33:ae:29:6d:9a:fa:99:6c:f3:0c:d8:f7:cf:f7:1e:a3:a5:ae:
02:fd:4f:19:37:c7:c2:74:30:29:61:4c:d0:ac:c5:77:34:e3:
1c:46:b3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:44 2025 by rpki-client