Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
File: SYN20qIgPYbnmm1ESVq_xIkDFGU.mft (raw, json)
Hash identifier: cy1dw+EsuR34irDqpPFkJckMnrN5tqxcD9fJzdj2Iew=
Subject key identifier: 0A:32:89:2D:DE:C6:2E:2E:2F:7E:65:27:D3:28:32:58:C0:5C:C4:69
Authority key identifier: 49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
Certificate issuer: /CN=498376d2a2203d86e79a6d44495abfc489031465
Certificate serial: 019883C38799112D5BDA92986D5A845EEBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
Manifest number: 0D04
Signing time: Thu 07 Aug 2025 09:01:26 +0000
Manifest this update: Thu 07 Aug 2025 09:01:26 +0000
Manifest next update: Fri 08 Aug 2025 09:01:26 +0000
Files and hashes: 1: SYN20qIgPYbnmm1ESVq_xIkDFGU.crl (hash: FrguBmKG7FJOd77y3ids1/bJPaxkVq33BXNT5XhmjQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:c3:87:99:11:2d:5b:da:92:98:6d:5a:84:5e:eb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498376d2a2203d86e79a6d44495abfc489031465
Validity
Not Before: Aug 7 09:01:26 2025 GMT
Not After : Aug 8 09:01:26 2025 GMT
Subject: CN=0a32892ddec62e2e2f7e6527d3283258c05cc469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:72:c7:71:aa:ef:a6:02:45:bb:aa:c6:e6:dd:
ff:61:19:5a:15:14:11:fc:08:46:4e:dc:4f:e2:f8:
ca:34:32:d7:a3:47:d3:a9:7c:82:c6:ea:34:1c:89:
31:f3:2b:58:ff:d7:47:57:6f:31:be:44:06:87:15:
7d:9d:dc:f4:0e:43:5d:0e:13:52:cf:b6:8f:48:5b:
51:91:18:e3:3f:c5:06:cc:bb:4d:00:27:06:81:88:
5e:c1:21:ed:bb:ba:e4:96:7c:1a:53:78:47:98:6c:
41:73:f8:54:f0:f5:3b:3a:08:fe:69:9d:18:0d:36:
6b:99:ab:70:43:f0:4a:e5:a8:5e:d0:c3:6d:04:88:
e3:35:9a:16:11:37:f5:ec:0b:f1:e9:c8:3e:9a:2a:
b2:b6:c7:f0:d1:bb:db:2f:df:8f:ad:c5:a0:25:7b:
82:34:e4:2d:2a:50:83:13:47:7a:c3:42:e2:c0:91:
6b:f6:8f:72:80:8a:5a:2e:f8:da:bd:57:03:a4:58:
6a:a4:67:56:36:91:9f:11:98:2d:dc:b1:6e:eb:e6:
2c:b8:9e:ed:6f:cb:ec:27:ee:e6:f8:ee:1e:19:aa:
1a:2c:98:5e:81:56:76:71:13:27:37:a4:75:7e:a1:
f6:f3:27:b6:d7:a4:12:03:32:6e:82:e5:2e:44:c5:
61:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:32:89:2D:DE:C6:2E:2E:2F:7E:65:27:D3:28:32:58:C0:5C:C4:69
X509v3 Authority Key Identifier:
keyid:49:83:76:D2:A2:20:3D:86:E7:9A:6D:44:49:5A:BF:C4:89:03:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYN20qIgPYbnmm1ESVq_xIkDFGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9255bd-8b7f-46d2-9773-f50a2a006414/1/SYN20qIgPYbnmm1ESVq_xIkDFGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:1a:03:7d:6b:dd:14:aa:1c:96:bc:8a:90:72:7f:9e:2e:fb:
22:ca:4e:98:4a:03:09:53:b4:7a:0e:ab:44:f7:0d:3d:5e:10:
a2:cf:d6:a5:ed:a2:d8:02:22:22:6a:15:9e:6c:1b:3b:ab:f3:
0f:41:67:c2:f6:b8:e4:21:30:ea:01:19:d8:dc:db:28:b9:dd:
c3:68:d6:ab:b0:20:13:8b:8d:77:c5:6f:be:ad:73:f1:c2:a3:
00:0c:94:51:af:15:a9:ad:2a:6f:f6:77:c2:d3:ed:20:de:88:
7d:96:fa:9f:f9:38:36:09:d6:d6:17:64:f0:0a:65:e6:59:92:
1d:67:48:ab:fb:88:d3:b8:b6:5f:2f:51:c4:67:84:01:6a:0e:
14:1b:b0:10:c8:90:f5:5a:bf:cb:a9:f6:96:32:2b:12:fc:23:
6f:74:31:c9:b3:f6:76:a0:28:53:ad:53:f4:a0:e6:36:5c:28:
97:f8:31:e7:a7:89:96:71:00:76:fd:f3:b4:93:c1:4a:e1:f4:
48:b2:f6:55:0d:4e:ba:41:10:41:aa:f5:d9:0a:7c:04:b4:a1:
80:95:df:cb:c1:e8:45:07:6b:43:f3:e3:fa:27:89:bf:96:03:
84:23:0a:c2:62:9a:fe:01:f6:63:8d:8f:30:6e:95:58:e4:21:
41:f4:48:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDw4eZES1b2pKYbVqEXuv+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODM3NmQyYTIyMDNkODZlNzlhNmQ0NDQ5NWFiZmM0ODkw
MzE0NjUwHhcNMjUwODA3MDkwMTI2WhcNMjUwODA4MDkwMTI2WjAzMTEwLwYDVQQD
EygwYTMyODkyZGRlYzYyZTJlMmY3ZTY1MjdkMzI4MzI1OGMwNWNjNDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XLHcarvpgJFu6rG5t3/YRlaFRQR
/AhGTtxP4vjKNDLXo0fTqXyCxuo0HIkx8ytY/9dHV28xvkQGhxV9ndz0DkNdDhNS
z7aPSFtRkRjjP8UGzLtNACcGgYhewSHtu7rklnwaU3hHmGxBc/hU8PU7Ogj+aZ0Y
DTZrmatwQ/BK5ahe0MNtBIjjNZoWETf17Avx6cg+miqytsfw0bvbL9+PrcWgJXuC
NOQtKlCDE0d6w0LiwJFr9o9ygIpaLvjavVcDpFhqpGdWNpGfEZgt3LFu6+YsuJ7t
b8vsJ+7m+O4eGaoaLJhegVZ2cRMnN6R1fqH28ye216QSAzJuguUuRMVhXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoyiS3exi4uL35lJ9MoMljAXMRpMB8GA1UdIwQY
MBaAFEmDdtKiID2G55ptRElav8SJAxRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMt
ZjUwYTJhMDA2NDE0LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85MjU1YmQtOGI3Zi00NmQyLTk3NzMtZjUwYTJhMDA2NDE0
LzEvU1lOMjBxSWdQWWJubW0xRVNWcV94SWtERkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBoDfWvd
FKoclryKkHJ/ni77IspOmEoDCVO0eg6rRPcNPV4Qos/Wpe2i2AIiImoVnmwbO6vz
D0Fnwva45CEw6gEZ2NzbKLndw2jWq7AgE4uNd8Vvvq1z8cKjAAyUUa8Vqa0qb/Z3
wtPtIN6IfZb6n/k4NgnW1hdk8Apl5lmSHWdIq/uI07i2Xy9RxGeEAWoOFBuwEMiQ
9Vq/y6n2ljIrEvwjb3QxybP2dqAoU61T9KDmNlwol/gx56eJlnEAdv3ztJPBSuH0
SLL2VQ1OukEQQar12Qp8BLShgJXfy8HoRQdrQ/Pj+ieJv5YDhCMKwmKa/gH2Y42P
MG6VWOQhQfRIdA==
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:04:53 2025 by rpki-client