Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json)
Hash identifier: IVHMuQ+I/mdn8ZxCwFtZ2nPM6vZKLWbXPu2rgRy+1Jk=
Subject key identifier: 19:FA:98:DB:12:C8:36:AD:E8:CA:C6:39:79:2E:6E:DE:91:1D:7F:90
Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Certificate serial: 0198D583C7C1BC43B6B9FBB7F7324C3F92DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
Manifest number: 05D0
Signing time: Sat 23 Aug 2025 06:00:40 +0000
Manifest this update: Sat 23 Aug 2025 06:00:40 +0000
Manifest next update: Sun 24 Aug 2025 06:00:40 +0000
Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: 6dYs6bXdIcymRPE7BsaWqtuhn+6SfDEIb5jLRFw87WI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:c7:c1:bc:43:b6:b9:fb:b7:f7:32:4c:3f:92:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c
Validity
Not Before: Aug 23 06:00:40 2025 GMT
Not After : Aug 24 06:00:40 2025 GMT
Subject: CN=19fa98db12c836ade8cac639792e6ede911d7f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1c:bd:ed:95:02:66:0e:67:be:49:2e:9d:55:
e7:d6:20:7c:b8:00:df:f7:74:b2:38:0d:40:ab:e1:
bf:17:5b:f9:45:3a:3b:46:56:4f:19:f9:b0:1d:16:
1f:86:8c:3f:4b:1a:c9:c4:52:a8:c1:8d:b7:4b:fb:
fb:a0:b5:ad:fc:c9:73:ad:2d:98:f2:fb:00:d1:55:
94:3a:82:e5:47:e0:06:86:2c:f2:77:0b:a9:b4:11:
11:8c:19:57:c1:7f:a5:6a:6e:aa:cc:43:ab:12:31:
c2:47:05:74:ef:46:48:8b:83:86:a0:ab:60:d6:a2:
26:b0:60:b0:c5:16:cf:36:22:6f:ad:0c:b0:14:fd:
d4:eb:1c:04:ce:00:56:db:70:43:c5:56:32:c5:a8:
e2:b1:cd:06:ca:26:cd:f6:66:1f:d9:d1:8a:90:91:
13:5a:00:96:7e:0a:6e:c5:06:8d:3e:e0:fd:25:ab:
fe:5a:cf:1a:39:f7:e0:db:88:58:fe:2a:7f:80:ff:
c5:63:34:21:24:65:96:f0:c4:80:0d:63:76:58:aa:
a2:4f:36:20:ff:ad:f5:9b:9f:5b:c6:12:a5:f8:8a:
da:5c:bc:25:9e:aa:0f:ed:18:23:31:e6:67:c3:7f:
09:90:39:c8:45:b1:d8:6d:d1:5e:dc:cc:be:a8:b4:
fb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:98:DB:12:C8:36:AD:E8:CA:C6:39:79:2E:6E:DE:91:1D:7F:90
X509v3 Authority Key Identifier:
keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e5:02:78:98:4d:98:34:1d:2e:fd:e9:fd:bc:62:bf:5e:e3:
f2:fa:b5:dd:99:f5:c5:f6:f5:2a:fc:8b:0e:53:80:69:c7:93:
64:d4:26:47:e7:16:bb:32:33:f4:cb:5b:5c:e1:bd:08:cf:d2:
8b:7e:33:f1:f2:70:fc:2f:3b:5c:25:77:da:44:a6:3d:e4:3a:
ad:1e:cb:3f:07:1e:4f:64:c8:88:cc:e6:1c:3f:94:d8:0c:c9:
9f:2a:92:cd:5f:27:c4:e4:c0:c8:a2:ee:6b:f6:8e:94:b0:d3:
a8:45:ab:ed:20:c3:48:a3:7c:97:95:76:c0:11:2e:ab:9b:c4:
cb:b5:00:da:be:b0:d6:d3:92:34:e8:d2:d3:04:21:7d:1b:c1:
fe:97:d4:73:f2:a7:92:25:a2:fa:1b:43:cc:c0:88:c0:fc:01:
cf:0d:8e:21:ef:a0:fc:03:b9:bc:47:9a:b7:e4:b9:c5:14:bd:
ce:5f:4d:1e:e3:8e:99:f9:03:7c:bd:4a:10:8b:0f:79:97:14:
2d:01:2e:8b:7c:5c:fa:13:09:bc:83:5e:b2:54:a3:22:1d:c0:
b0:d4:42:e9:f6:be:eb:92:e1:69:66:8f:81:4a:e5:f8:c6:35:
ae:7e:ac:91:50:b9:75:f1:1f:81:16:4a:14:5a:d0:dd:28:9e:
b2:b2:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:43 2025 by rpki-client