Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: XANmgLWe9Gk4vaRR6oKOi7bYtKsgWKgI/l56wJsMe0A=
Subject key identifier: 87:0F:61:5F:D2:32:81:22:F5:91:7C:1A:86:88:41:05:53:9E:21:1E
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 0197B70EE1CC025F9D9A186524D500E1DED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0D88
Signing time: Sat 28 Jun 2025 15:01:35 +0000
Manifest this update: Sat 28 Jun 2025 15:01:35 +0000
Manifest next update: Sun 29 Jun 2025 15:01:35 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: jwfZG85E4AeKoh+R3zSReLO9Ke62MJvE/vatFA1itgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e1:cc:02:5f:9d:9a:18:65:24:d5:00:e1:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Jun 28 15:01:35 2025 GMT
Not After : Jun 29 15:01:35 2025 GMT
Subject: CN=870f615fd2328122f5917c1a86884105539e211e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:7d:76:c1:da:f5:f3:62:40:b7:3a:31:a1:
6a:93:44:3d:a3:2a:cf:df:c5:c6:61:44:ab:9e:eb:
4a:7b:7f:cb:e9:ed:00:2b:ca:96:77:1c:81:da:4e:
2e:21:c0:02:39:b4:cb:05:56:bb:35:80:25:8f:2d:
c3:48:01:b3:27:4f:12:34:a3:c2:d3:c1:89:b6:15:
69:df:73:6f:c1:97:17:dd:36:d0:f2:5a:29:7a:72:
ae:63:5b:c3:57:c5:1e:d9:c4:f3:a3:da:cf:c4:6d:
8d:ad:2a:97:71:f4:fd:65:93:96:3b:7e:16:65:47:
54:67:0f:72:dc:80:c3:99:18:80:f1:ce:15:df:15:
fa:f2:7e:19:c8:43:38:26:09:f0:4e:e2:aa:f8:97:
fc:58:6e:ad:ed:a6:1a:dd:42:ab:46:d2:6c:b2:71:
e5:29:cc:26:40:f1:60:0e:26:d7:47:2d:68:0f:a7:
76:6b:41:81:24:b6:4f:c5:c7:6a:fe:08:9c:f5:4d:
e3:e7:86:a6:00:93:d9:a8:e2:4a:3e:ce:4b:62:54:
85:55:09:60:12:34:c7:96:5b:3f:8b:1a:fb:38:aa:
b2:92:6d:0b:f6:16:20:53:99:4f:fa:12:ca:4f:ae:
ea:36:a3:46:76:59:be:c2:b5:a8:c8:27:af:41:d5:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0F:61:5F:D2:32:81:22:F5:91:7C:1A:86:88:41:05:53:9E:21:1E
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0d:ad:b2:98:0f:76:eb:ab:a8:1b:4a:dd:38:bd:02:75:28:
ee:12:6a:49:49:53:bf:42:23:7e:23:4d:35:cc:e7:00:36:55:
96:3f:81:36:77:f0:8e:ed:31:db:a0:16:9c:c3:47:6f:ab:10:
01:bb:9e:a3:bb:fd:da:4c:1e:fd:28:72:29:b9:c0:45:2f:48:
bf:d5:b7:10:06:0d:da:ea:11:7e:1e:b8:70:85:d8:ac:85:4e:
79:17:68:27:23:74:c4:4c:4f:6f:8f:0d:3b:11:e5:4c:37:d6:
dc:1b:76:76:53:60:8a:ab:5d:f8:a6:66:7f:16:09:04:49:6f:
1f:ca:05:9f:e1:4d:9f:25:46:ed:52:c4:3a:0e:d8:c0:ea:3b:
96:50:e7:e2:17:d6:c0:76:8e:37:81:64:5d:85:f4:3c:63:c9:
b4:49:8f:3c:ae:83:1f:4a:19:bf:2b:1b:87:97:8f:f9:26:74:
6f:21:a5:e5:5f:57:1d:7f:ec:47:4a:cf:47:19:3c:5a:f0:b4:
a0:17:07:d3:0d:2a:fa:3c:64:1b:af:c8:fc:dc:d2:7d:e3:fa:
57:83:41:0d:d0:60:31:d1:d8:60:1d:ad:14:52:86:39:c9:00:
16:be:f3:e5:07:64:a0:d0:89:d8:ad:fe:ea:08:d0:3f:c8:a6:
98:14:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:23 2025 by rpki-client