Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier: gVUbbEjZU3uVmf9FIb/ac8nwWiD1bHPSGFIuovPVurs=
Subject key identifier: 97:2A:87:D1:25:53:60:09:04:E6:F0:49:27:20:61:F0:B1:A4:BB:D6
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial: 0198D7E1A92AD75BB70F632F6524B328EA5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number: 04E6
Signing time: Sat 23 Aug 2025 17:02:26 +0000
Manifest this update: Sat 23 Aug 2025 17:02:26 +0000
Manifest next update: Sun 24 Aug 2025 17:02:26 +0000
Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: w1lUSsZXt4Ix+X0y0h919K4AMpIwQKbMtLxzClgM8r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:a9:2a:d7:5b:b7:0f:63:2f:65:24:b3:28:ea:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
Validity
Not Before: Aug 23 17:02:26 2025 GMT
Not After : Aug 24 17:02:26 2025 GMT
Subject: CN=972a87d12553600904e6f049272061f0b1a4bbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4e:b4:98:a6:7d:05:b3:d8:23:2e:11:08:17:
a9:ff:99:a8:98:79:d7:f9:9a:83:28:0c:9c:28:8c:
ee:36:f2:d6:2f:a4:7c:6b:c4:a8:3f:ca:8f:e5:86:
81:d1:9d:2b:89:8a:e4:bf:21:72:23:eb:97:27:00:
af:0c:1b:3b:96:b3:da:13:27:10:84:33:d1:e0:87:
e4:df:36:6c:db:4a:65:20:cd:32:b7:1e:20:bb:88:
0e:bb:f3:d7:66:df:a3:ee:d0:11:34:fc:f2:1b:3b:
80:46:2d:91:78:33:6e:93:d2:51:bd:f9:b4:27:96:
c7:f6:76:9d:f2:cf:6f:f2:af:c5:ed:52:9b:47:8c:
2a:09:12:7e:cc:ff:7e:66:e9:c5:87:8c:4e:75:86:
2a:d8:b9:74:8a:9d:78:70:bd:1b:c8:40:34:12:bb:
d9:5d:29:30:36:e1:30:fe:35:a6:28:9c:8e:5f:e2:
64:38:a1:f9:c3:ee:52:ab:5c:b3:bb:b7:40:52:7e:
f4:64:41:fb:0f:10:9b:87:45:30:f5:62:ea:d9:37:
b8:45:49:81:e3:3a:00:61:1e:76:68:ba:55:ae:32:
53:ae:24:e1:79:00:4c:40:fc:ed:2e:4f:05:9e:20:
4e:66:95:d2:2e:e7:eb:3a:d9:e4:75:6e:e8:32:37:
4b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2A:87:D1:25:53:60:09:04:E6:F0:49:27:20:61:F0:B1:A4:BB:D6
X509v3 Authority Key Identifier:
keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:37:4e:c5:d3:ba:bd:c1:46:02:b3:72:f3:9a:87:d9:51:09:
de:a9:dd:a7:7e:1a:67:ff:30:31:7e:80:a4:5c:49:50:12:ae:
4d:a6:a1:d9:ec:28:42:2d:06:1a:d5:c6:fc:a4:a4:10:08:8f:
94:ff:53:f2:12:c5:54:88:b0:d8:2b:8e:0a:ed:75:8f:f6:07:
45:e0:83:e0:2f:9d:cd:8a:07:4c:4d:b7:ad:0a:15:09:20:e8:
05:50:68:f5:ee:97:e4:8f:84:e9:95:26:7c:5b:93:17:a9:5c:
59:07:72:8c:fe:2b:3c:df:7c:c3:6d:27:04:3d:3b:8b:13:18:
14:42:40:a9:17:8b:7a:1e:9a:af:2d:8b:ee:c9:9f:43:fe:b6:
12:6d:96:43:69:01:b5:2a:2b:f2:2d:1c:ee:39:de:ff:a2:56:
15:a9:fd:94:ab:99:ef:83:67:b2:42:42:87:1e:b5:39:5c:f3:
87:ce:d8:44:65:f7:4a:7f:10:2d:b5:83:59:44:0b:6a:ef:f7:
9c:d0:7f:5e:8a:45:08:c5:99:26:a5:f5:7f:fc:97:77:d2:a6:
fc:cd:07:9d:fd:db:e8:77:71:53:b9:e2:de:8c:c4:92:19:bd:
de:bf:39:a4:dd:15:ee:16:11:38:c5:f8:aa:7f:c7:ee:62:36:
bf:39:2f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:39:15 2025 by rpki-client