Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: zHN+RayB8PxgWreSndXroDEK0CprD1yMmqrinyrEy/U=
Subject key identifier: 39:AF:65:09:94:F8:A7:7C:A0:18:B5:AD:6C:70:8C:4B:79:B3:09:D0
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 0197B7453AAAB5E79C917D997744E400647C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 0843
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: mHncaLUQ5mRfYrGKq8aKw4Ew1dtn5wj7d1yUMXS5s/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3a:aa:b5:e7:9c:91:7d:99:77:44:e4:00:64:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=39af650994f8a77ca018b5ad6c708c4b79b309d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:86:4a:f8:fe:45:8e:1f:3d:0c:73:38:4b:fb:
00:1b:0d:8d:15:63:77:52:09:6e:52:1f:d7:31:7e:
0c:24:1d:b1:8f:57:27:9a:8b:91:cb:46:76:6a:0e:
6b:e2:33:88:1d:38:a2:fa:e4:4c:47:c0:3b:73:17:
cd:af:ba:36:82:e1:19:16:e5:c2:af:b9:00:b2:65:
1f:50:c1:a2:d7:4e:74:db:29:bd:59:ff:3c:d0:a7:
43:93:b9:cb:fa:72:d2:fe:a3:0d:c6:44:54:1d:15:
11:f1:94:9e:62:49:74:3d:12:45:f9:a9:27:12:44:
f8:52:13:82:4f:b5:6e:8e:0f:f8:97:51:87:6b:f2:
3d:0f:b2:34:5c:fa:c8:12:6c:e9:14:47:fd:86:ed:
b0:87:38:7f:b3:51:e9:dd:26:7f:5c:c0:82:ea:33:
81:14:c1:01:09:2f:ff:48:7b:ab:df:f2:82:48:08:
83:3c:0e:30:23:31:64:da:53:6e:df:08:d1:b8:7e:
ee:4b:e5:44:66:15:79:fd:b1:59:90:3f:73:a7:57:
e4:32:01:04:ec:b0:fe:17:6d:26:9b:57:c7:b4:ab:
78:ff:e7:52:f2:3c:79:c8:90:10:b7:87:01:00:a2:
a0:e2:b4:c4:89:db:c3:a5:ae:e6:11:17:63:d9:c7:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AF:65:09:94:F8:A7:7C:A0:18:B5:AD:6C:70:8C:4B:79:B3:09:D0
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3e:f3:0f:d2:ee:5c:25:3f:35:17:71:e9:ad:17:57:b5:65:
c9:87:72:d4:0e:90:33:77:21:a8:3e:ef:5f:c9:d2:be:6b:20:
d7:25:99:dc:52:94:5e:7f:7f:eb:d7:23:2b:d1:ce:95:84:b0:
04:99:ae:18:60:ce:2f:e8:14:1c:4d:7b:1f:06:22:fc:3b:23:
25:dd:82:06:1c:66:9b:e2:b5:6f:2a:51:9b:f4:61:b1:7b:f1:
ed:88:ee:c3:b5:3c:39:49:98:de:58:4a:9c:1b:56:ca:94:5a:
b8:29:c1:d9:63:bb:da:85:b2:ed:9c:88:d7:37:77:01:e1:7a:
4c:c9:f3:d9:dc:45:8f:06:c4:b5:e5:ae:66:e4:f5:2e:71:77:
ae:8d:f8:fe:88:5e:ae:ab:89:e0:76:11:e2:b1:c2:69:b1:dd:
76:94:1f:45:40:f7:cf:c5:dd:3b:59:43:89:bb:d4:b0:d5:00:
a3:bc:dc:95:32:1b:9d:7b:3f:7f:af:4c:a9:a9:cf:1a:7f:f1:
6e:a0:6f:6a:f7:3c:94:79:78:af:12:6e:f9:1d:9d:de:8e:3b:
cc:10:9f:fd:3a:58:31:68:01:96:82:63:16:73:8e:e3:3c:14:
ab:80:fe:dc:c0:3e:05:ef:e1:02:6c:67:66:1d:d2:e7:a2:5a:
97:55:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:48 2025 by rpki-client