Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: VkI2xwjFYlRmnqRPZLcahInQtP4oy7mcY4NBx9e8dQM=
Subject key identifier: 4C:9F:46:B0:9F:32:6A:66:C9:D9:93:40:3C:2D:92:0F:F5:6B:97:63
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 0199FBEC36C5DDC691ED9654A24D40A86459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: QWe/xFAMDcQEFAVvisflL0jfWJaXC+UKT++SN1w4nV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:36:c5:dd:c6:91:ed:96:54:a2:4d:40:a8:64:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=4c9f46b09f326a66c9d993403c2d920ff56b9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:02:8a:ba:01:39:1f:b7:42:2f:d1:90:aa:b7:
47:05:9d:85:8d:6f:54:23:a6:37:8c:24:56:c4:0e:
cb:94:6b:9f:c1:c6:fa:88:61:c2:ca:b7:45:81:99:
75:5c:a8:e0:17:f6:ba:67:28:45:d7:8b:a1:28:58:
38:c0:9b:6a:8c:9d:50:e0:34:f8:01:c8:90:66:b7:
0f:c3:fc:70:ef:ac:11:c2:08:38:83:08:e3:29:2e:
94:ec:a8:31:c1:69:ea:44:5c:bf:a8:03:11:13:a7:
29:fd:18:d2:22:e1:5b:2b:ea:f6:7c:05:06:c8:bd:
39:4d:be:14:b7:b3:ff:fd:de:63:8f:a8:49:5c:94:
d7:03:42:45:ed:49:c1:3b:97:f1:f7:fe:f8:6c:35:
95:b5:d4:1b:55:d7:15:ea:be:18:f2:2e:b7:aa:9a:
14:c8:00:5a:0a:57:47:ae:e5:c1:ae:08:d1:65:0a:
45:3d:9c:f9:43:8c:26:74:80:7e:e9:65:88:10:7e:
f2:63:c5:f3:da:7b:c8:f1:21:e5:f3:c5:f4:c8:07:
a5:91:d8:e8:db:52:61:0b:19:6b:8a:07:a8:c3:98:
a0:15:7d:c4:29:f8:c9:70:bf:c5:9c:f5:5a:36:6a:
05:92:e8:f3:59:f8:26:65:0d:fe:79:fd:db:79:58:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9F:46:B0:9F:32:6A:66:C9:D9:93:40:3C:2D:92:0F:F5:6B:97:63
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:51:7c:31:73:33:71:57:b6:ad:61:d3:72:0b:a1:d2:dd:d8:
fe:f7:69:11:21:d8:b9:f7:8a:ca:83:7d:6d:7b:fa:a0:f8:0d:
88:ba:c1:02:13:74:9a:9a:ba:5e:81:50:a3:e2:49:34:c2:cd:
69:2e:34:e8:08:23:21:aa:bf:22:94:a2:45:a4:27:32:26:79:
f0:1d:b2:99:25:b0:8c:a0:e3:73:85:eb:07:d2:8b:1b:13:9b:
e1:0f:f3:e1:41:5b:53:f4:dd:49:d2:f2:bd:0f:00:3d:76:0e:
60:bd:e3:57:aa:f8:90:19:a1:1d:48:8b:0c:73:cf:42:6d:f6:
08:8d:05:30:39:f9:74:43:4f:18:b5:be:82:df:bb:41:c1:02:
0e:22:e8:74:c3:19:b3:e6:b8:22:c5:f3:46:0a:d0:db:b7:5c:
ff:5d:53:10:58:58:60:1e:af:96:a5:6e:68:7e:c6:36:b3:f6:
05:8f:6e:a7:a9:31:88:ad:68:f8:85:94:39:2a:35:b6:da:b3:
e4:c4:93:e8:9c:db:a9:5f:01:20:bf:60:1e:4d:e4:10:32:27:
b9:97:5b:f8:cb:a1:37:19:3a:c7:4e:57:51:a8:f0:f4:41:46:
de:5e:8b:e6:fd:22:9f:40:f5:02:52:e7:83:5d:7b:7e:b8:76:
87:2c:2d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:00 2025 by rpki-client