Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: x4eAvbgn+plm/9WB13zEH7yz9ZopB9Q4oLLwnkYaW5s=
Subject key identifier: 46:E5:41:2D:0F:1E:EA:9C:10:DE:09:D7:6B:6A:5E:C5:35:82:36:A5
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 0198D4E05AA0B5843E6CF40C34EB71EA4A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 0ED1
Signing time: Sat 23 Aug 2025 03:02:09 +0000
Manifest this update: Sat 23 Aug 2025 03:02:09 +0000
Manifest next update: Sun 24 Aug 2025 03:02:09 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: edxf0RUGg/DFBL8NOoZ+q1azUq+CziDlke3T4kheLrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:5a:a0:b5:84:3e:6c:f4:0c:34:eb:71:ea:4a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Aug 23 03:02:09 2025 GMT
Not After : Aug 24 03:02:09 2025 GMT
Subject: CN=46e5412d0f1eea9c10de09d76b6a5ec5358236a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:34:a1:19:4d:82:73:2b:3f:6a:c3:c8:86:
fb:0d:91:84:09:6f:dc:3e:ff:c6:3e:ef:ec:e2:5b:
de:c5:61:3f:81:5c:f7:ec:63:ef:a8:8a:7d:92:7c:
23:ed:d7:f1:6a:63:8b:f4:34:7c:79:50:4d:a1:12:
53:40:33:13:62:d4:40:53:b3:c3:36:60:31:de:e6:
be:2e:94:1b:a7:59:cb:54:14:0a:b9:eb:bd:08:4f:
2b:07:b3:5c:bb:87:81:c5:96:2c:f9:78:5a:5a:9b:
8b:03:c2:35:9f:17:c8:6f:f8:c4:5b:55:97:b7:de:
bc:0b:0c:2c:f5:fc:b7:6c:b3:61:f4:e9:47:85:7a:
a7:62:03:b2:0b:92:dc:e0:50:6d:11:03:e4:10:44:
7c:9b:e6:45:1d:c4:87:b0:e5:6d:3d:a7:6a:42:2e:
09:b6:c1:30:ca:cc:49:3c:f2:d7:ac:bf:c3:4d:97:
6a:47:5c:3d:9d:02:55:4c:29:73:7a:87:c5:23:9c:
06:03:54:55:97:ee:98:f1:4a:fb:63:26:c1:f1:09:
b0:fc:61:62:3b:b4:83:38:13:85:0c:7c:8c:88:83:
94:8d:88:d2:52:eb:df:d3:67:e3:14:7c:54:98:62:
7d:47:3e:a1:cf:97:b6:fa:3a:1e:9f:05:40:a9:00:
00:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E5:41:2D:0F:1E:EA:9C:10:DE:09:D7:6B:6A:5E:C5:35:82:36:A5
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e4:dc:f4:0a:ab:ee:80:8b:3f:53:5d:dc:62:cd:56:7f:59:
d8:cb:71:9b:36:d5:90:1e:40:8f:1f:ee:39:56:df:c0:a1:50:
0a:ab:d5:bd:5f:73:08:ad:68:a6:ba:f7:41:1d:a5:47:c9:22:
2c:5c:83:b4:21:0b:28:f0:52:23:3e:e4:99:e9:ec:00:dc:11:
02:7e:a7:d1:43:80:eb:29:8e:a4:85:ee:be:e1:f0:6c:26:09:
42:5f:59:43:b7:f3:96:83:f5:f3:6f:3f:95:37:77:51:f1:b1:
93:b8:d7:88:c5:dc:e7:e2:62:70:09:53:e0:01:4d:1b:10:e9:
dd:0e:e2:b4:47:35:d0:29:c3:37:f4:7c:6c:08:54:79:7e:98:
9e:29:d2:22:ad:54:08:7c:8d:e1:e0:e9:94:ab:41:51:82:bd:
86:f4:04:f3:20:7c:be:ca:27:08:41:24:30:37:e5:d9:93:38:
10:ac:07:c8:e0:70:4d:90:b0:58:ee:30:95:67:78:f5:b5:e4:
bb:c2:95:b5:69:8b:24:b9:53:8a:85:f8:7b:90:72:b7:59:c0:
b1:e3:23:fa:a0:b9:2e:02:e1:fb:64:db:7c:ff:53:36:00:00:
75:30:15:fe:34:87:35:7f:ac:83:4a:6b:6f:dd:ee:aa:c9:34:
4c:89:d7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:26 2025 by rpki-client