Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: vJeXlHFviqgndpo4J+t6fGlc8b2YDU+did0y730VtTM=
Subject key identifier: D6:57:22:2F:9D:63:E0:BF:35:14:65:5B:DD:89:DC:43:63:C0:A2:DE
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0198D473E6BC2DFFDB7E6ED2DF30C90575AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 0987
Signing time: Sat 23 Aug 2025 01:03:42 +0000
Manifest this update: Sat 23 Aug 2025 01:03:42 +0000
Manifest next update: Sun 24 Aug 2025 01:03:42 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: UZii2P4VH3jBUtToVvym2E0Zdch36ngqafiTfZx2xBw=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:e6:bc:2d:ff:db:7e:6e:d2:df:30:c9:05:75:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Aug 23 01:03:42 2025 GMT
Not After : Aug 24 01:03:42 2025 GMT
Subject: CN=d657222f9d63e0bf3514655bdd89dc4363c0a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:cd:1e:98:b8:c8:28:56:cc:4f:36:26:6e:
13:ce:c4:8e:51:f3:5a:6c:c9:bf:71:a3:45:c5:cf:
b1:86:ba:fb:6a:d0:24:ee:4e:46:81:36:a6:3c:4b:
16:7b:c1:02:61:58:42:b5:ba:89:b1:35:2d:44:88:
6b:b0:09:ea:a4:c5:be:6a:78:3d:de:f0:d6:ab:7c:
e4:a4:12:4a:53:33:7d:92:46:35:65:d6:1c:0e:71:
0f:8f:91:a6:a3:74:80:22:ed:2c:fb:7b:de:1d:cf:
ea:b7:bb:ce:86:bd:24:9c:0d:20:d6:71:48:1e:e5:
fb:cc:c4:43:90:74:ba:f1:85:60:fe:13:5b:02:28:
a3:ff:8c:bf:01:e3:6a:29:64:ad:32:dd:08:a8:69:
57:5a:07:74:85:ad:aa:4d:ee:ab:ec:f1:b4:c5:e8:
c4:2d:17:d5:15:cc:b2:18:42:b8:e2:e9:56:41:8a:
a6:df:7b:89:1d:2f:2c:7c:91:f3:98:2a:89:bf:e6:
cc:60:80:25:c0:a8:2e:a9:b5:68:7c:b7:14:c8:fc:
71:63:b5:39:13:6d:e2:b1:30:5a:0c:8f:86:af:91:
38:5d:28:b8:83:4b:72:3c:35:6b:ad:2f:05:37:f3:
ea:76:3b:bd:f7:2f:c9:4c:d3:22:93:fb:01:47:1a:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:22:2F:9D:63:E0:BF:35:14:65:5B:DD:89:DC:43:63:C0:A2:DE
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2c:70:c7:d3:88:66:8b:76:b4:b8:a1:c1:c6:ea:49:b9:ef:
6f:f9:f5:da:91:2e:ff:74:81:68:11:6e:1e:43:d9:75:5a:5a:
7c:99:58:e5:11:fc:49:5d:94:f9:5b:10:ea:f9:2f:9c:87:9c:
ba:9e:ca:6b:61:a6:1f:fa:5c:17:42:e2:c6:b4:ef:82:c0:65:
ce:9d:d1:6e:cb:5f:e3:c2:08:f0:95:74:38:3f:91:ac:c7:8e:
4a:50:00:c0:bf:c1:27:56:29:94:8a:8c:11:7e:72:ef:5d:37:
33:a4:b4:39:1b:da:c0:cf:b3:97:09:8d:ec:f5:14:db:40:af:
e3:23:bc:9c:38:62:b3:ea:0b:6c:2d:65:0f:ee:e6:c2:e7:23:
db:10:ff:e6:33:3d:bc:00:9e:de:f9:e6:68:cd:d1:18:a0:28:
7a:2e:23:5f:c6:a0:4e:28:21:2c:0f:e7:f2:17:02:52:70:95:
8f:d5:63:9d:35:8e:60:64:f9:da:0a:17:17:0d:00:b6:9f:d4:
99:c0:48:b7:95:e1:f0:e7:f4:a7:9b:6c:32:4e:9b:a1:58:01:
43:cb:ac:35:7f:cf:0f:44:f7:be:d4:7d:7a:30:d2:69:3c:ae:
b7:44:1d:69:67:cd:94:fb:42:7d:b3:52:58:c7:d0:d5:7f:d2:
70:25:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:36 2025 by rpki-client