Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: k5Br2yv5xb+O77DOjjdQTtT8v/M3FmFcjjSvYzXyA7U=
Subject key identifier: F0:35:FE:7E:16:1D:05:4D:BD:4F:55:B2:25:15:AD:E0:BA:36:1E:43
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 0198D6CDA68CF3BA14715E5B285BB6616E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0E1D
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: Gcg2lOYETZOivoYrtqGEMC+2ZM8aH2AWdFZuNMTwacc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a6:8c:f3:ba:14:71:5e:5b:28:5b:b6:61:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=f035fe7e161d054dbd4f55b22515ade0ba361e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:8a:09:f6:6a:8c:7d:a0:af:89:53:ca:41:
ee:fa:ff:c0:01:1a:23:bf:b2:b1:4a:55:d4:65:26:
79:d4:f3:4d:3e:be:45:cd:32:34:b1:39:5e:53:1d:
5b:8f:49:7d:53:31:74:66:32:c2:d4:5d:22:67:26:
ff:f7:77:f9:e5:f2:d3:11:1f:f6:5a:26:b6:04:28:
c7:f5:09:94:6f:93:db:23:dc:ba:c5:58:05:b1:11:
40:79:04:c3:e6:16:da:64:81:2d:4b:6d:fd:9d:8d:
4a:17:85:54:69:83:6c:f2:7e:c1:c2:b7:eb:c7:d7:
81:78:1c:34:71:b2:8f:85:2a:ec:18:ee:21:5a:e3:
ba:f0:86:6e:34:a4:ef:19:76:45:7e:0f:47:09:b8:
f4:4e:f1:fa:d4:d2:c4:db:17:42:eb:d6:ab:a9:ee:
53:d6:00:bb:2a:fc:d5:49:aa:57:24:09:c1:72:80:
f4:67:24:41:64:c6:a7:64:ec:e9:82:99:08:f4:cc:
b3:2e:b7:41:12:4d:7a:63:95:c5:bc:78:23:5b:aa:
b0:67:67:bd:56:6d:01:30:f7:16:0c:c5:2b:a2:d2:
c0:f9:60:06:71:99:7e:f0:19:8d:ae:96:77:bd:80:
46:43:83:98:62:4c:e8:61:86:f2:70:05:f5:39:db:
7e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:35:FE:7E:16:1D:05:4D:BD:4F:55:B2:25:15:AD:E0:BA:36:1E:43
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:95:0d:78:4e:e1:ae:67:f6:30:3e:cc:c4:46:7f:83:89:c0:
74:f9:ae:a6:5b:e0:8f:7b:6f:5f:4a:76:75:46:70:e1:3e:b1:
13:b9:cd:f7:36:0c:27:8b:46:50:a0:6a:21:8b:f5:b8:2e:d2:
34:d4:db:f1:0c:51:c0:bc:f1:e3:9a:68:b5:ad:47:42:97:35:
e7:19:c5:3d:1d:6d:ce:13:9d:a7:c5:e4:90:9b:35:b7:d9:d7:
b2:7d:5a:3d:89:1f:62:e9:66:32:bf:12:82:94:7a:fa:a6:20:
4b:53:b4:a8:92:84:65:7f:0f:3e:df:d6:52:7c:29:39:e1:74:
ca:7f:e1:ae:9a:61:dc:31:1a:68:b4:07:35:37:3f:9a:90:05:
7e:b9:16:f3:19:a6:65:1a:21:ca:b7:0b:79:3f:77:2f:b3:e8:
c8:d9:fa:0d:d6:cf:d0:77:f5:fd:b4:5a:00:31:27:48:f1:d7:
8f:1c:c0:3b:db:69:a2:a2:f6:d7:bc:0a:bb:ea:bd:84:1e:81:
22:28:9b:8f:47:dd:f5:a6:cb:bc:48:30:b2:53:09:c8:c1:86:
4a:ed:7b:d9:4c:e9:e3:f8:29:da:9f:14:c9:b0:73:4e:00:58:
74:f5:54:b7:02:b6:b0:4f:78:79:d2:41:e3:36:56:b2:85:74:
35:3e:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:19 2025 by rpki-client