Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: 1kAfc7lwrY/9IYRBDLEHQTxiOszH28Xh40WYAzOD1Mo=
Subject key identifier: 72:13:DF:CD:7D:EA:E1:C6:80:4D:41:32:57:DB:B8:97:B1:6D:9F:5F
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 0198D65F5F421CE1DD60CE6B392170CD43B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: z88tu/H8VA4tBQirBc/qEHLzigOCrNBD0uAr1htXy+I=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:5f:42:1c:e1:dd:60:ce:6b:39:21:70:cd:43:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=7213dfcd7deae1c6804d413257dbb897b16d9f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:cb:23:ee:fe:97:a3:8c:4e:4f:f1:e1:96:
fe:e7:1a:31:75:c6:4b:42:2e:20:b3:38:b9:d4:d1:
d1:70:30:61:70:06:15:77:48:3c:30:09:08:ef:7c:
84:b0:d8:5b:ed:cd:c3:9b:04:b5:46:27:bf:75:fd:
9d:be:ca:46:40:03:ad:dd:7e:73:8d:44:a4:b4:31:
e7:1f:12:fb:88:53:8b:46:66:92:58:85:02:0b:5f:
33:11:39:e8:bf:b8:5c:97:4a:6e:ef:45:b7:c8:3a:
93:3f:71:6b:a0:11:8d:bf:80:22:61:56:8f:ed:c7:
5b:1e:38:0a:e0:25:bf:bc:74:09:98:91:96:4e:41:
c0:23:c2:22:7b:58:0c:27:cf:3a:2c:e0:8f:17:55:
09:b9:44:63:2c:76:75:9d:a8:7f:34:87:6f:da:a7:
31:34:a2:d8:a1:d4:bb:63:e6:a8:c3:0c:1b:82:36:
33:ce:89:f5:30:a4:9a:6b:1f:2e:49:fe:12:c1:35:
ca:c9:9e:d3:a9:ff:41:32:2b:c9:50:6b:54:c7:51:
a3:4d:52:fd:99:a5:b4:90:96:f9:37:2a:38:00:69:
d0:30:28:9b:a9:4e:ac:1f:39:0c:79:3a:7f:01:31:
03:d5:6b:a5:f7:67:e6:b1:eb:af:bc:c6:36:8b:34:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:13:DF:CD:7D:EA:E1:C6:80:4D:41:32:57:DB:B8:97:B1:6D:9F:5F
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:49:6e:fb:69:5e:02:b8:65:0a:2c:46:35:d0:1d:a0:40:
23:63:1d:72:df:29:f7:96:5d:64:82:ca:bc:48:ff:c5:9c:c5:
ca:a1:13:51:8c:71:6d:6e:c7:18:df:ad:89:0f:60:bb:36:94:
37:b1:43:d9:54:46:36:91:5f:af:e2:cc:ef:1b:6d:01:f2:48:
70:fb:50:49:57:e2:6b:37:0b:b8:05:f4:15:e9:a6:90:b9:3a:
29:c8:b6:36:f3:91:1a:e8:24:51:06:9e:89:2e:8a:c0:05:55:
33:04:b3:a4:7b:3b:51:3e:2c:68:1e:69:72:2a:b9:c8:9d:6b:
50:bd:49:24:fc:c1:87:eb:90:96:e9:0b:ba:8e:3e:d1:e3:00:
03:5c:30:45:3c:47:6b:e4:3e:5f:53:3f:bc:37:7e:e3:6c:8f:
76:d4:88:3f:09:7d:d7:80:29:8a:b5:c5:94:94:73:dd:76:50:
65:41:ca:9d:ec:82:e7:08:d9:15:07:40:41:39:a0:a5:69:27:
88:97:ab:ee:d3:5f:12:3f:74:9a:f6:bc:47:b2:d2:87:3c:ec:
21:84:a6:a1:27:b6:fd:82:9d:7c:79:3a:d6:29:ee:29:53:88:
a7:b8:c1:9c:82:d6:53:48:c3:5a:ff:19:9c:21:af:1a:49:3d:
a3:47:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:03:31 2025 by rpki-client