Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: NGTPxrhrUqGRDnV/9zzbyInJsw+wL7558DdzMms0/FY=
Subject key identifier: DF:AC:83:8A:8B:E3:CB:30:42:EE:08:17:FE:34:B3:90:10:1D:6B:CD
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 0198D5BC63C3D8079F1E1935CCAD196E6368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 0420
Signing time: Sat 23 Aug 2025 07:02:29 +0000
Manifest this update: Sat 23 Aug 2025 07:02:29 +0000
Manifest next update: Sun 24 Aug 2025 07:02:29 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: hTqxfzRQ6nDzRaMGb3b9wkKiY7PFLhuMWhigP1ZXoG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:63:c3:d8:07:9f:1e:19:35:cc:ad:19:6e:63:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Aug 23 07:02:29 2025 GMT
Not After : Aug 24 07:02:29 2025 GMT
Subject: CN=dfac838a8be3cb3042ee0817fe34b390101d6bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:f1:64:69:be:49:74:fa:e9:f0:15:8d:4b:
4a:44:1b:b9:84:7f:e0:10:32:f0:c7:3b:78:83:b7:
82:a4:e5:2d:6f:41:bd:8a:43:1d:7b:b6:62:b4:0b:
02:6b:50:35:6a:64:b7:4d:d1:be:f3:f2:31:81:cd:
c6:85:57:6a:fb:70:6f:69:98:97:34:e2:4d:5f:78:
c0:c8:28:46:11:ed:0a:87:86:df:b7:d5:1e:ec:b6:
ae:fd:1d:65:29:ee:f9:8b:ab:82:20:9a:d9:21:73:
6a:d8:91:8a:93:97:52:a0:07:d6:b7:dd:72:5b:e7:
13:cb:27:09:f5:aa:65:61:76:28:d7:08:f5:ef:72:
4e:87:80:57:42:27:e5:98:07:7e:e6:6f:0e:a8:c2:
8a:06:a1:ed:15:b0:2e:78:cc:2e:b8:a0:70:e1:52:
cf:cb:2e:14:60:0d:7a:e1:0c:fd:07:77:51:b7:54:
46:ef:0e:c2:d5:28:24:4a:2c:13:db:b2:51:ea:41:
35:a3:34:ff:66:80:6e:85:5f:f9:99:42:96:b2:ed:
3b:76:4b:f6:6d:b4:16:70:a3:7e:92:e9:1c:f4:20:
18:9c:94:98:52:8f:dd:cd:87:1a:59:b1:1c:24:c4:
13:f7:a8:8f:a9:a1:43:3b:36:b8:31:e7:21:65:c5:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AC:83:8A:8B:E3:CB:30:42:EE:08:17:FE:34:B3:90:10:1D:6B:CD
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:18:13:49:cd:64:5d:06:fe:8b:66:17:6d:29:b1:29:3a:70:
c4:c7:5e:81:8e:47:3a:2d:d4:0d:e6:87:54:5e:3a:89:77:37:
f6:1b:04:98:90:cc:6d:ee:70:c0:69:7f:62:f1:bb:9c:b5:bb:
78:dd:f4:62:bf:94:a1:4d:72:15:48:ac:59:fa:be:b3:11:50:
eb:7a:61:34:f1:56:85:4c:e0:97:53:93:43:25:0b:48:76:0e:
fc:46:a2:42:8e:cd:b8:63:8c:84:72:4c:b9:e7:c7:2f:53:ea:
06:00:33:3b:b9:90:90:d3:74:28:49:37:8f:20:1f:45:ed:9d:
e3:ee:93:a8:35:1d:cf:19:9b:68:a7:07:99:ac:22:6d:4a:72:
1d:d7:c8:94:6a:22:bf:7f:ef:c3:ba:fc:5b:0c:04:af:af:05:
12:e7:9e:09:5b:39:8a:e3:db:35:44:fc:20:a9:d4:27:54:57:
f3:04:7c:65:38:29:1f:a0:0f:ea:a6:32:fb:95:ae:09:98:b9:
94:56:2d:1f:aa:ae:30:a8:f7:7b:a4:b3:3e:f3:c2:22:e3:2a:
10:06:1f:24:26:1f:2d:2c:7b:48:55:30:3f:d3:c0:ac:ed:c9:
fd:5b:47:a5:04:db:cc:1f:bc:10:db:97:64:1d:68:ca:94:75:
cf:3d:9f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:44 2025 by rpki-client