Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: DIf3EzTzJTvkIoCjZ6Z8PD2eOYFWNoUk8XqkCjBT00Q=
Subject key identifier: 2B:84:9E:F8:DE:F7:25:CC:07:44:08:5F:DE:C4:09:91:D6:A7:77:5F
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 0198D472B11A5CA771EEE6D352889240C2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:02:22 +0000
Manifest this update: Sat 23 Aug 2025 01:02:22 +0000
Manifest next update: Sun 24 Aug 2025 01:02:22 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: zjtiAgsGoLZ289qc21eLg8UhV5s1gmkVXohRs7nD9Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:b1:1a:5c:a7:71:ee:e6:d3:52:88:92:40:c2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Aug 23 01:02:22 2025 GMT
Not After : Aug 24 01:02:22 2025 GMT
Subject: CN=2b849ef8def725cc0744085fdec40991d6a7775f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:47:13:28:7d:28:6a:d9:22:f2:86:d5:9d:
23:6c:e9:47:6a:7e:60:12:cd:16:d2:a2:15:ce:27:
83:64:50:94:76:4a:7f:2b:ec:0c:6f:4d:0b:0c:8d:
08:f7:ca:26:2a:c4:f1:4e:46:83:52:46:47:bd:2e:
cf:d0:c9:c3:07:2f:90:94:42:0c:94:88:a9:3e:fa:
60:3b:81:38:53:fa:a2:f8:c5:32:f0:73:20:5b:92:
1f:7a:df:0f:4b:a0:82:a3:ca:49:28:aa:9f:01:e4:
39:7c:88:d9:8f:c9:0b:81:db:7a:c6:86:b5:4d:ce:
dd:bb:70:49:75:b7:f6:b9:f2:d2:a9:af:99:0b:1b:
f1:6f:44:5b:c0:8e:49:4b:9d:33:ee:fb:fb:8b:97:
d9:12:c5:c6:ba:8c:d2:0d:f6:d6:74:9e:43:60:20:
62:c0:7f:7b:24:f9:1c:bb:2b:67:28:18:33:e7:90:
19:b1:f5:5c:4d:0f:21:65:cd:8a:9d:45:59:d2:66:
ec:58:15:96:c9:1c:a2:d5:0c:51:cf:71:8e:21:c5:
f7:71:b8:0a:6d:41:74:2e:83:99:70:22:2b:67:a3:
11:13:eb:1c:fe:f6:af:3a:86:74:d8:a8:e4:2b:6c:
f9:66:c9:53:ff:c2:93:e9:07:2b:fa:5b:ce:88:ae:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:84:9E:F8:DE:F7:25:CC:07:44:08:5F:DE:C4:09:91:D6:A7:77:5F
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:93:23:86:f5:ab:92:66:81:c6:79:e4:14:06:c8:31:2a:78:
5a:29:2c:33:f0:d0:f5:85:0a:a8:52:89:c1:c4:49:ab:66:f8:
5e:16:1a:f8:e9:0a:13:2c:4c:23:b7:6a:89:16:ed:fd:7e:0f:
07:5d:21:7f:9f:22:bb:2b:8b:ae:46:29:df:f3:c7:5c:dd:6d:
d9:65:ac:66:7e:35:7d:0a:9e:4c:d8:b6:3a:55:57:11:50:a1:
3c:51:58:d6:9e:82:5b:4c:5b:b1:c7:c0:20:fc:c1:a0:12:5c:
28:c1:71:fd:6e:e2:c7:93:73:2b:a3:8d:b3:89:9b:5f:28:23:
7a:6f:8a:ec:5e:38:f9:21:6c:2e:c2:16:1e:1e:a1:1f:f0:56:
a2:c2:ba:a9:0e:de:a4:f9:1f:ba:54:03:65:ac:82:1b:93:68:
8d:cf:b2:bf:4a:6d:97:99:89:34:16:f0:ca:26:0b:3e:3b:c6:
ab:31:ba:93:88:cd:d6:16:11:cc:bc:33:69:29:6c:68:74:60:
99:49:55:e4:29:d1:c4:e9:f2:34:e7:88:18:12:14:87:83:31:
4d:40:ad:9f:2a:a3:bb:18:12:2b:ee:68:a3:b4:98:ae:67:f6:
19:81:2a:cd:96:3c:13:1f:07:af:69:37:3e:df:08:bb:f6:42:
41:d4:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:25 2025 by rpki-client