Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: UcXdAuTASH9ccDdKEOM1BSfHzhP/VHy8qqK5Bz1Aclc=
Subject key identifier: 7C:80:FB:7D:80:1E:2F:A3:BA:E3:AB:F9:A5:B9:2C:A6:19:96:40:F2
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 0196BB5B00192E54F0DEB881FCAA5DC30CBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 152F
Signing time: Sat 10 May 2025 18:00:25 +0000
Manifest this update: Sat 10 May 2025 18:00:25 +0000
Manifest next update: Sun 11 May 2025 18:00:25 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: 053pvYQ+I31sEzV0hc0NCsGgDQlU92kAkFURRg/gnng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:00:19:2e:54:f0:de:b8:81:fc:aa:5d:c3:0c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: May 10 18:00:25 2025 GMT
Not After : May 11 18:00:25 2025 GMT
Subject: CN=7c80fb7d801e2fa3bae3abf9a5b92ca6199640f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:55:89:5a:c8:3b:09:5b:38:38:93:1b:ab:f4:
a2:d4:b9:d1:40:9c:21:19:da:c8:3e:9c:d7:07:62:
6a:4e:98:9f:5b:48:cf:73:2a:5a:83:3f:9e:8b:bf:
0d:4d:2e:32:df:e3:12:86:49:df:18:00:c2:6b:45:
cc:09:66:4e:fa:9f:08:0e:8c:75:cc:fb:15:d6:f1:
7d:5c:25:a8:6c:d7:35:c0:49:99:1a:40:c1:a6:b3:
4f:31:ef:02:76:47:be:60:62:b9:0e:bc:24:54:de:
d4:e3:08:e5:e9:d6:43:fe:66:5e:3e:23:8e:e2:18:
1e:fe:3e:3c:f4:dd:bd:79:bd:69:01:50:6f:c8:81:
af:de:b4:c1:7a:1a:72:82:8a:74:d3:f2:ca:1e:4d:
15:62:3b:19:66:08:22:a1:41:59:43:57:55:f5:c3:
de:c9:99:83:7a:0d:4a:b3:da:28:2d:98:c1:a5:29:
89:0e:b3:d1:a2:89:40:fc:67:4a:df:ff:a6:54:a0:
20:38:98:a8:86:46:2c:0b:76:1b:47:43:87:a2:d9:
53:db:d0:28:84:67:5a:87:e6:54:c6:80:67:60:3e:
35:a4:c1:c7:30:1d:ca:41:a2:89:38:a3:12:d9:bd:
8e:8f:b1:66:83:6e:89:6d:7b:73:45:85:0e:48:c3:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:80:FB:7D:80:1E:2F:A3:BA:E3:AB:F9:A5:B9:2C:A6:19:96:40:F2
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:25:45:1c:f6:c2:fd:02:68:31:10:6d:cd:76:0f:9b:78:f2:
29:84:a4:0d:6c:5a:52:b8:e0:75:5b:0b:f0:ad:05:03:a8:14:
bb:7c:bb:fb:c6:fd:0c:5f:a7:bc:17:59:86:86:ab:2b:1f:7f:
d0:91:fe:ef:e8:c8:43:96:1c:74:ea:6b:66:36:cd:e3:4a:55:
df:26:d3:4d:ce:c3:6b:02:a0:c3:d5:f0:03:8e:ef:e0:ce:85:
c8:51:6e:71:d4:3b:09:1f:9d:1a:d8:a9:2a:e6:b8:7d:0e:91:
2a:a8:4d:64:c1:0c:05:ab:48:67:db:b3:ef:bd:bf:d0:a8:de:
de:87:d4:53:2a:44:27:d0:a4:70:a5:0e:b6:d9:09:e3:9d:1c:
69:4c:07:c6:21:59:dc:20:c1:c3:a6:25:0d:e4:df:38:76:dc:
f8:8d:59:a1:38:88:56:c8:42:db:6c:cb:38:cc:0c:11:70:c0:
eb:80:68:59:5f:80:7c:d3:84:84:2a:e8:5b:ba:b9:eb:83:c2:
26:82:d5:63:95:db:23:d9:c6:64:75:6e:a6:50:9d:fa:76:7f:
4e:d0:b0:36:84:71:b5:66:b1:37:2e:d0:ea:31:ac:4b:82:34:
55:97:60:a6:7a:75:b4:19:fb:70:73:4d:ab:12:cd:b5:44:19:
03:b2:2a:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WwAZLlTw3riB/Kpdwwy6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2Q0NjYxM2QyMDI5NjI5Njc5YjJiMDRhMmY5Yzg2Y2Fi
Yzc0ZDUwHhcNMjUwNTEwMTgwMDI1WhcNMjUwNTExMTgwMDI1WjAzMTEwLwYDVQQD
Eyg3YzgwZmI3ZDgwMWUyZmEzYmFlM2FiZjlhNWI5MmNhNjE5OTY0MGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFWJWsg7CVs4OJMbq/Si1LnRQJwh
GdrIPpzXB2JqTpifW0jPcypagz+ei78NTS4y3+MShknfGADCa0XMCWZO+p8IDox1
zPsV1vF9XCWobNc1wEmZGkDBprNPMe8Cdke+YGK5DrwkVN7U4wjl6dZD/mZePiOO
4hge/j489N29eb1pAVBvyIGv3rTBehpygop00/LKHk0VYjsZZggioUFZQ1dV9cPe
yZmDeg1Ks9ooLZjBpSmJDrPRoolA/GdK3/+mVKAgOJiohkYsC3YbR0OHotlT29Ao
hGdah+ZUxoBnYD41pMHHMB3KQaKJOKMS2b2Oj7Fmg26JbXtzRYUOSMMMxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyA+32AHi+juuOr+aW5LKYZlkDyMB8GA1UdIwQY
MBaAFEs9RmE9IClilnmysEovnIbKvHTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAt
Yjk3OWU2NWJjMGQ2LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAtYjk3OWU2NWJjMGQ2
LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyVFHPbC
/QJoMRBtzXYPm3jyKYSkDWxaUrjgdVsL8K0FA6gUu3y7+8b9DF+nvBdZhoarKx9/
0JH+7+jIQ5YcdOprZjbN40pV3ybTTc7DawKgw9XwA47v4M6FyFFucdQ7CR+dGtip
Kua4fQ6RKqhNZMEMBatIZ9uz772/0Kje3ofUUypEJ9CkcKUOttkJ450caUwHxiFZ
3CDBw6YlDeTfOHbc+I1ZoTiIVshC22zLOMwMEXDA64BoWV+AfNOEhCroW7q564PC
JoLVY5XbI9nGZHVuplCd+nZ/TtCwNoRxtWaxNy7Q6jGsS4I0VZdgpnp1tBn7cHNN
qxLNtUQZA7Iqug==
-----END CERTIFICATE-----
Generated at Sun May 11 02:25:18 2025 by rpki-client