Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: cKeVOxM0oCp7yHrjk5XVmdZW751K4MZDasQT9s8hRxE=
Subject key identifier: 86:6E:F4:3D:3A:42:A5:F0:73:CC:60:8F:67:AA:A8:C7:4B:B3:18:FD
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 0197B70EA7F07C4B0AAC890F4CAAE64885CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 0E3D
Signing time: Sat 28 Jun 2025 15:01:20 +0000
Manifest this update: Sat 28 Jun 2025 15:01:20 +0000
Manifest next update: Sun 29 Jun 2025 15:01:20 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: kVPF1PAXEvpOpKkjxiTi5X3ZQtB6CjdI2pznCQ4efaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a7:f0:7c:4b:0a:ac:89:0f:4c:aa:e6:48:85:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Jun 28 15:01:20 2025 GMT
Not After : Jun 29 15:01:20 2025 GMT
Subject: CN=866ef43d3a42a5f073cc608f67aaa8c74bb318fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:a0:e8:75:45:c5:a4:ac:2a:51:21:ef:1b:
43:d1:da:5e:cc:d2:37:b7:29:42:e6:83:53:9a:44:
cc:9a:25:2d:e1:25:54:d8:8e:dd:8e:4e:f7:8a:ef:
37:f0:d1:ac:55:08:07:7d:03:89:97:f4:fb:7e:60:
fc:60:0c:11:c4:86:7d:63:25:37:fc:cc:4f:94:23:
bf:11:31:13:bb:5e:38:1e:d3:87:c3:27:3d:f6:d9:
6f:83:d9:4f:8a:8b:70:53:4f:20:e5:4c:27:73:d1:
53:d6:20:e2:d2:4c:0c:04:42:fe:b4:b0:10:5f:2e:
5e:c2:71:f6:fa:12:3a:9f:e0:ac:d7:0f:89:53:8f:
e3:d7:4c:9b:4e:7b:d1:6e:af:66:fe:a8:90:3a:81:
4e:65:5c:90:1b:70:c4:87:36:84:a7:92:fd:59:55:
14:48:06:87:5f:38:bb:e3:31:08:b6:a0:6a:ed:56:
d7:1f:d9:10:f6:7e:c6:d5:cd:01:0d:dc:84:2d:f4:
d8:16:47:69:6c:fa:1c:95:62:6c:26:04:df:1d:1c:
57:a7:67:cb:7f:81:29:67:0e:48:bf:1f:44:8e:de:
3b:5c:a6:50:fb:d8:58:78:d4:9f:86:f6:3a:33:f0:
3f:f4:e8:a9:78:59:5c:ac:52:54:96:34:06:38:54:
3b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:F4:3D:3A:42:A5:F0:73:CC:60:8F:67:AA:A8:C7:4B:B3:18:FD
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a7:ae:e7:50:68:76:d7:c7:4e:c7:25:36:e6:97:77:43:b4:
82:87:e5:f8:41:dd:8a:df:7b:fc:b4:a3:f9:56:2e:85:6b:b5:
04:aa:0a:c1:8e:b0:6c:81:38:79:39:d7:71:86:85:cc:11:3a:
33:b9:8d:7b:17:8e:5d:ab:ca:2a:cf:f9:ef:a1:25:01:4c:37:
25:2e:f0:85:98:88:1f:4c:50:ce:29:26:79:ac:2e:cd:f0:89:
9f:b9:8a:6d:ca:b2:41:ae:90:b2:61:f1:fa:c2:a7:b6:aa:bd:
f0:7f:0a:22:2d:78:d7:64:15:55:24:fc:92:97:33:60:ce:1e:
65:f9:13:9b:ac:d3:cf:1c:97:64:b8:08:72:fa:f4:c4:e2:a4:
1f:5a:52:50:f1:dc:8b:db:ca:cd:de:71:0d:c4:27:ad:33:fb:
2e:e8:5f:8e:86:da:2a:3e:77:a5:1c:0c:02:37:ee:35:bc:17:
af:e0:84:2d:d4:a2:fe:30:90:af:39:c0:fc:d4:19:1e:60:2e:
ca:ec:7a:34:2c:70:3b:4e:f0:64:50:2e:db:16:61:c7:02:69:
ae:79:25:39:47:fb:4d:b3:16:c6:e6:f7:16:68:38:72:6b:90:
c7:dc:f1:6c:c2:43:2b:54:da:8d:fb:e0:96:63:bf:8c:69:a9:
53:db:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:04:00 2025 by rpki-client