Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: Na1kWcBrhlS8xzcvdpuW3pHNKDZBrtvZRcJR7qCgUYk=
Subject key identifier: 96:44:EA:31:A7:60:08:9C:CF:5E:7B:DF:67:53:C7:CE:29:0E:42:09
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 0197B6A06BF13D94EEC5E520374BD6E0AD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:56 +0000
Manifest this update: Sat 28 Jun 2025 13:00:56 +0000
Manifest next update: Sun 29 Jun 2025 13:00:56 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: 5wQIJ9K7KwgsAfxZhXDPXVOnMor3GQZyjld4T0vWngY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:6b:f1:3d:94:ee:c5:e5:20:37:4b:d6:e0:ad:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Jun 28 13:00:56 2025 GMT
Not After : Jun 29 13:00:56 2025 GMT
Subject: CN=9644ea31a760089ccf5e7bdf6753c7ce290e4209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6a:2f:8e:7c:af:8f:68:f7:32:82:3f:b9:d5:
c4:c6:bf:16:12:32:ce:1e:cb:b8:01:20:6f:42:63:
b2:60:1a:95:45:cf:a9:f0:e5:e2:aa:bc:28:85:ea:
0a:56:8f:49:df:d8:0e:c9:56:f5:bb:13:68:e5:76:
69:84:18:01:49:21:b8:93:ad:93:b1:9a:d6:45:76:
81:3a:e1:58:08:5e:20:5f:2e:10:fd:d3:b6:6b:43:
a1:55:2e:14:0b:4e:b2:71:ac:42:46:e2:dc:08:a4:
06:e2:46:6a:06:15:ea:81:22:79:dc:0b:b7:ce:ae:
c8:b8:7d:22:b8:31:68:88:55:50:74:81:c4:6e:82:
a8:92:94:86:b8:e6:b7:b1:0f:26:bf:37:ac:06:1b:
95:05:1f:1a:03:c0:04:97:55:80:92:b5:35:b0:ae:
4b:a2:26:e8:0a:7c:c8:5a:c4:f1:84:53:fb:74:d8:
bb:8d:94:21:5a:b4:7e:bd:4c:3d:92:71:73:ce:96:
db:ee:cf:b1:0a:2f:5f:5d:6e:e9:63:01:19:a8:36:
37:10:1d:b5:b4:f6:77:b1:ea:a7:1c:68:70:94:42:
da:1c:31:4a:c0:b1:cc:5d:67:26:4e:9e:63:7f:68:
00:f0:43:50:7a:82:4c:50:1c:97:65:75:34:ba:a3:
39:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:EA:31:A7:60:08:9C:CF:5E:7B:DF:67:53:C7:CE:29:0E:42:09
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:6b:28:1b:6b:9f:71:b6:1a:fa:94:eb:0a:ac:00:21:ca:a2:
08:94:f6:15:27:a5:72:5d:51:24:d5:8f:6d:c7:16:99:48:53:
07:eb:9f:6c:50:70:fa:2b:82:7b:df:94:67:05:6a:d9:fb:c0:
48:d6:c7:99:99:b8:57:38:7d:b8:62:04:0c:0e:dd:12:36:53:
97:31:5b:96:99:2b:ee:79:9e:96:e6:3d:e0:29:43:50:74:21:
6d:f3:9c:c3:4c:4b:51:1a:bd:a3:8d:3d:f7:c3:ea:d3:06:af:
42:a6:24:26:9d:e7:f1:1c:01:70:87:e1:c2:4b:c2:e8:06:c8:
3e:9e:82:69:44:26:53:bc:aa:eb:7c:51:08:4f:53:f6:0c:04:
b8:0c:87:99:ce:07:c6:c6:b6:1e:a1:20:3d:08:a8:f6:09:f8:
1a:af:67:11:e3:dc:3e:e3:5d:48:59:22:ec:1e:79:eb:0c:a1:
3f:7c:16:83:46:6f:fa:fb:8d:37:c5:70:9a:11:36:6d:0f:7d:
07:bf:f9:64:88:e2:dd:73:70:0f:fa:fe:44:d5:e4:24:b8:05:
ce:f6:49:f3:39:da:a4:06:a3:ab:3b:52:e2:be:41:57:ff:3a:
31:6e:ee:e8:ef:f2:24:5f:32:61:1d:03:dd:05:d4:41:e3:13:
d8:06:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:50 2025 by rpki-client