Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: 9Eoc36EdFGR/sg720T2jxvs9zUGMMWPZV3yUwZPtE3g=
Subject key identifier: D6:59:86:86:3D:73:B2:29:F1:68:D4:B5:D3:D1:F8:C4:28:2B:4D:E2
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 0197789CEC74898C7F0F051E054C26125557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 12:00:39 +0000
Manifest this update: Mon 16 Jun 2025 12:00:39 +0000
Manifest next update: Tue 17 Jun 2025 12:00:39 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: RIbYjEtsv1BnGMHz0tA3X/fg0e5u5V7TDp+fLHEep6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:ec:74:89:8c:7f:0f:05:1e:05:4c:26:12:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Jun 16 12:00:39 2025 GMT
Not After : Jun 17 12:00:39 2025 GMT
Subject: CN=d65986863d73b229f168d4b5d3d1f8c4282b4de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:85:54:7f:a3:7b:e6:f1:f1:6f:c5:41:33:f2:
4c:9d:7f:aa:9c:78:c8:0f:83:64:54:d5:8a:f5:d3:
31:c9:4d:00:29:7e:17:2a:69:a9:33:bb:68:02:a4:
82:57:90:0d:54:74:4a:4a:16:7e:84:4a:7a:a6:f7:
d4:f9:d1:ec:a1:9b:20:a5:e3:e2:15:92:b0:c9:04:
35:24:d4:f0:38:94:e3:ca:a8:0f:10:fa:27:3d:cd:
15:84:fc:aa:0a:ca:a2:ea:91:61:5a:8c:8c:2e:a1:
b0:c4:82:b7:3d:5b:cd:43:0b:ba:9d:b2:96:75:b6:
84:38:64:38:7b:08:1e:52:56:9a:18:f4:79:4e:1f:
a9:93:14:8b:ff:e2:69:39:2d:b0:10:c6:88:47:c5:
95:8c:c5:9f:bc:ab:18:88:12:62:f2:0b:e6:d2:2f:
9a:b6:f7:27:25:91:b7:28:da:52:33:75:e1:d1:46:
20:68:90:13:a7:7e:56:81:a8:83:48:82:b6:d7:fc:
9c:24:0f:82:bf:e2:4a:7d:a7:9f:24:6e:20:33:d9:
fa:6a:28:41:81:5f:2c:5c:e4:2a:af:f4:75:6e:be:
77:9d:1f:e8:9a:38:32:bc:55:8e:84:b5:96:c4:46:
fa:15:2c:0c:a1:ba:a8:62:b2:02:52:97:0c:e2:89:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:59:86:86:3D:73:B2:29:F1:68:D4:B5:D3:D1:F8:C4:28:2B:4D:E2
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fd:4e:dd:eb:8b:76:f3:9d:e7:41:66:c5:8d:4e:b5:b9:82:
fe:4a:49:ec:8a:79:f2:4d:11:fa:a0:b4:4f:82:a6:8d:e3:8e:
a4:37:b2:97:69:a9:b2:f2:ac:71:79:c2:87:e0:d9:b3:81:0a:
29:98:6f:84:e5:eb:e6:5b:00:9c:a3:12:c7:ab:7d:50:1b:05:
da:d3:6a:c5:e1:9c:24:e8:98:42:59:69:27:dd:48:78:33:f9:
47:32:2d:f2:6e:18:e9:a4:1e:d5:a6:cb:d8:36:5e:21:a3:7b:
fb:06:f6:5c:52:3a:09:bc:22:f0:22:0b:79:e6:77:c2:6f:99:
80:e3:06:35:a1:88:dd:3c:62:06:e4:e8:d1:20:01:b1:b7:f6:
b5:ed:90:9c:9b:54:51:23:0c:74:82:2e:06:6e:94:09:08:62:
4b:95:1c:cc:87:ee:9c:c0:6b:38:8d:a0:ed:6f:cd:86:0f:3b:
58:f6:a4:c5:77:fb:8c:68:49:6a:3f:da:a4:6d:fc:65:49:d1:
4b:3d:7b:b2:f1:94:f3:53:79:ec:e4:36:41:2f:3c:bf:c9:8c:
47:74:76:24:aa:b6:45:53:07:d7:aa:8b:f1:fe:69:3a:56:d7:
dd:e7:61:00:70:de:80:a5:60:e1:cf:e3:aa:17:a4:1f:f6:fc:
29:31:47:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:35:14 2025 by rpki-client