Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: ed6lxba4dNPDptIZaQuY1WSCdiVygqSCFjkb59pp8+M=
Subject key identifier: A7:21:FF:28:D3:B8:BC:DF:A1:3B:7D:6B:7A:D5:62:AE:F5:0E:76:F3
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 019873E3629EEB2724807EAC1F116DD2E459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:18 +0000
Manifest this update: Mon 04 Aug 2025 07:02:18 +0000
Manifest next update: Tue 05 Aug 2025 07:02:18 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: 0jBQzoqybfbWZIoqmS1a3mrLaQX7/0GV5Xpxv7LhArg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:62:9e:eb:27:24:80:7e:ac:1f:11:6d:d2:e4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Aug 4 07:02:18 2025 GMT
Not After : Aug 5 07:02:18 2025 GMT
Subject: CN=a721ff28d3b8bcdfa13b7d6b7ad562aef50e76f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:7f:99:4a:09:54:84:ff:74:c7:f9:f0:77:
2d:4a:1d:2b:b2:3d:08:61:f9:eb:aa:96:27:26:88:
52:02:1f:7a:2c:e2:f4:93:29:e9:9b:98:f8:d6:a9:
e8:be:b8:67:9c:62:8a:ce:68:15:68:c8:d8:fa:b4:
72:6e:ab:b3:99:21:d4:a5:ae:09:43:d9:14:0c:86:
da:81:2e:bb:93:c1:62:86:92:4e:df:47:a2:4e:16:
51:07:34:50:72:39:89:39:21:aa:db:ad:8e:ea:f5:
0b:7e:98:2c:7f:86:53:91:d5:f0:80:cb:ae:8c:ae:
ec:2f:81:90:b0:87:80:21:d3:f8:a2:0c:cb:ce:5d:
4a:1d:4b:a5:ce:2a:3c:43:c9:08:7a:01:5f:b6:24:
20:77:bb:28:18:49:44:cf:51:cd:4b:50:ba:a6:53:
7c:66:37:9b:73:57:f7:75:34:05:3c:7a:22:75:5d:
69:41:1c:b6:2c:1f:9f:c8:5e:65:c4:09:f0:e7:4a:
5b:2c:76:23:03:c5:1e:2d:29:b8:69:6b:4f:7a:ce:
bd:fe:48:ca:e6:4a:b3:92:cf:50:df:d2:c3:7a:04:
ac:01:a7:b7:9f:9b:8a:8d:b4:e6:47:72:a4:1b:cb:
31:36:76:1f:3e:a9:2f:d3:b8:c3:05:93:89:a9:9f:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:21:FF:28:D3:B8:BC:DF:A1:3B:7D:6B:7A:D5:62:AE:F5:0E:76:F3
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:0e:b9:cb:9b:4f:5d:e5:29:cf:4a:af:33:49:61:44:09:
81:76:b4:43:bf:ee:ec:88:b8:64:42:83:5a:f6:d3:64:2b:1b:
30:08:71:db:c0:23:57:27:d7:80:ff:00:44:ab:f3:e7:1e:b4:
fd:23:a2:ed:6c:46:99:ac:6d:bd:44:12:24:14:97:d6:c2:dc:
b9:9a:72:6b:3b:ed:6e:5b:65:a3:0d:77:f5:ce:c9:56:2e:0e:
43:a5:d1:cf:1a:33:12:55:e4:f8:cf:90:18:25:23:d1:98:61:
41:54:57:c7:94:9e:12:59:e5:39:fa:b2:58:85:87:61:6f:5c:
87:f4:0c:e5:6f:77:ad:64:c7:5c:ac:cc:1a:20:a2:36:41:67:
c8:ee:7a:fc:3a:98:41:fb:5a:8b:ef:c4:3a:56:70:03:c0:ef:
f0:a3:9f:73:37:be:27:1d:8f:c9:7a:d6:a1:f8:54:5d:e7:93:
d7:02:ae:00:a5:d1:b4:cc:d2:45:c2:0d:c6:ee:dc:5c:99:53:
9e:8c:59:a4:7e:1f:af:86:c5:54:46:e2:ac:96:6a:34:fd:08:
b7:a6:58:06:6e:e9:79:76:54:21:c0:37:38:12:be:e5:b6:f4:
9d:b4:b8:80:20:49:59:22:6c:2b:3b:b4:8d:9c:a7:4f:d9:68:
95:0f:56:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz42Ke6yckgH6sHxFt0uRZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiM2Q0NjYxM2QyMDI5NjI5Njc5YjJiMDRhMmY5Yzg2Y2Fi
Yzc0ZDUwHhcNMjUwODA0MDcwMjE4WhcNMjUwODA1MDcwMjE4WjAzMTEwLwYDVQQD
EyhhNzIxZmYyOGQzYjhiY2RmYTEzYjdkNmI3YWQ1NjJhZWY1MGU3NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP5/mUoJVIT/dMf58HctSh0rsj0I
YfnrqpYnJohSAh96LOL0kynpm5j41qnovrhnnGKKzmgVaMjY+rRybquzmSHUpa4J
Q9kUDIbagS67k8FihpJO30eiThZRBzRQcjmJOSGq262O6vULfpgsf4ZTkdXwgMuu
jK7sL4GQsIeAIdP4ogzLzl1KHUulzio8Q8kIegFftiQgd7soGElEz1HNS1C6plN8
Zjebc1f3dTQFPHoidV1pQRy2LB+fyF5lxAnw50pbLHYjA8UeLSm4aWtPes69/kjK
5kqzks9Q39LDegSsAae3n5uKjbTmR3KkG8sxNnYfPqkv07jDBZOJqZ9TQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKch/yjTuLzfoTt9a3rVYq71DnbzMB8GA1UdIwQY
MBaAFEs9RmE9IClilnmysEovnIbKvHTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAt
Yjk3OWU2NWJjMGQ2LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZDc4MmUtMDFlMi00YjczLWJmODAtYjk3OWU2NWJjMGQ2
LzEvU3oxR1lUMGdLV0tXZWJLd1NpLWNoc3E4ZE5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2AOucub
T13lKc9KrzNJYUQJgXa0Q7/u7Ii4ZEKDWvbTZCsbMAhx28AjVyfXgP8ARKvz5x60
/SOi7WxGmaxtvUQSJBSX1sLcuZpyazvtbltlow139c7JVi4OQ6XRzxozElXk+M+Q
GCUj0ZhhQVRXx5SeElnlOfqyWIWHYW9ch/QM5W93rWTHXKzMGiCiNkFnyO56/DqY
Qftai+/EOlZwA8Dv8KOfcze+Jx2PyXrWofhUXeeT1wKuAKXRtMzSRcINxu7cXJlT
noxZpH4fr4bFVEbirJZqNP0It6ZYBm7peXZUIcA3OBK+5bb0nbS4gCBJWSJsKzu0
jZynT9lolQ9WDA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:47 2025 by rpki-client