
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
File: savnP_2tb4YrC92JTUQyfCyUp9U.mft (raw, json)
Hash identifier: 0EmcgVGI3ykJIZbcRroYExCcdP86VMFQwqF9Cq03rhI=
Subject key identifier: A7:14:3E:FE:B0:00:37:8D:56:1E:97:5E:16:06:BD:3C:A5:A9:AB:70
Authority key identifier: B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
Certificate issuer: /CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Certificate serial: 0198752B522B2804448C693B3DFAC6468C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
Manifest number: 03EE
Signing time: Mon 04 Aug 2025 13:00:29 +0000
Manifest this update: Mon 04 Aug 2025 13:00:29 +0000
Manifest next update: Tue 05 Aug 2025 13:00:29 +0000
Files and hashes: 1: savnP_2tb4YrC92JTUQyfCyUp9U.crl (hash: 7w4yCd4DmKuvNBqumrTgdDe0Pgk/LzGHix5qg+LADtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:52:2b:28:04:44:8c:69:3b:3d:fa:c6:46:8c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1abe73ffdad6f862b0bdd894d44327c2c94a7d5
Validity
Not Before: Aug 4 13:00:29 2025 GMT
Not After : Aug 5 13:00:29 2025 GMT
Subject: CN=a7143efeb000378d561e975e1606bd3ca5a9ab70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:5f:62:ad:c7:5a:3f:1f:30:84:a5:47:64:
05:6e:4f:c0:a9:c9:3c:57:79:82:33:45:38:21:da:
0c:be:00:96:de:1c:03:2b:a4:4a:da:f5:2f:8e:cd:
d9:05:e0:aa:f7:79:41:6a:82:45:fa:00:e8:d4:df:
c3:86:2b:68:1d:c3:e5:07:e1:45:f2:12:9f:da:51:
64:4c:f2:ab:f5:6e:39:68:25:63:40:ad:5e:49:cb:
84:c4:84:01:16:b6:3c:c9:2a:b5:7f:08:bd:bc:a2:
2b:96:94:cb:e6:96:3a:9b:2a:2e:20:c3:7e:1a:a5:
70:ca:3c:d3:67:e9:76:a9:5b:8d:c2:30:1e:16:4d:
b4:bf:07:55:8a:3c:bd:41:2c:f1:e2:50:65:e4:97:
e7:8d:b3:ad:17:95:c1:0e:ab:71:a3:23:4f:70:41:
48:9b:5e:0a:b1:e1:6f:04:1f:ab:19:1e:3b:24:0c:
65:3d:b1:1d:b1:40:45:e7:af:b9:29:fa:fb:85:8d:
e4:3a:46:fb:7b:50:07:0d:b8:9d:93:60:3e:0e:8c:
4b:10:0c:17:ee:b2:72:e7:38:ac:17:e9:74:ef:71:
2c:b3:29:4a:25:fc:2c:69:42:d8:d2:8e:ef:39:4b:
7d:b3:e6:52:a6:0d:97:7e:31:27:78:3d:24:2a:98:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:3E:FE:B0:00:37:8D:56:1E:97:5E:16:06:BD:3C:A5:A9:AB:70
X509v3 Authority Key Identifier:
keyid:B1:AB:E7:3F:FD:AD:6F:86:2B:0B:DD:89:4D:44:32:7C:2C:94:A7:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/savnP_2tb4YrC92JTUQyfCyUp9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/919b01-7a20-4c00-86af-e919c37e4ebc/1/savnP_2tb4YrC92JTUQyfCyUp9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:82:36:b1:f2:d8:5a:a6:c7:ea:c5:92:e2:08:e6:7f:03:ff:
a6:cf:38:8d:6e:68:72:81:6f:04:fb:49:14:7e:09:be:c8:6e:
f8:a8:e0:b5:f5:fc:44:84:c5:cf:e4:87:48:f9:14:ba:54:e2:
98:a1:89:71:ef:7b:56:40:46:90:20:9b:ea:b0:b8:7e:62:e4:
03:28:22:8b:7b:ec:e5:4a:a4:15:58:04:61:5e:f1:01:b5:31:
f8:38:2d:7c:09:d4:41:2d:a9:0c:72:cd:91:d4:dd:88:eb:11:
49:64:61:bf:78:fc:d3:cf:50:91:d3:63:f2:32:3b:de:1e:c4:
b1:c0:b4:53:81:a5:2c:d8:f5:9b:88:b8:06:aa:00:0a:6e:6d:
d3:af:8a:2c:09:67:27:f3:30:36:03:3b:8f:a3:92:2f:24:8b:
64:82:17:3e:63:83:cf:d5:97:13:33:93:ab:22:7c:c9:da:44:
bb:17:62:d0:24:2d:47:e0:fd:48:40:e4:c6:de:2f:02:27:c5:
70:c7:ff:4a:1c:75:b3:0f:0a:0c:47:c6:64:a8:08:ca:92:d7:
92:af:68:b8:22:e9:68:30:68:d6:0c:70:68:db:64:89:24:a6:
63:b6:88:66:6f:76:b0:20:ec:fb:4b:ed:4a:c0:51:8c:6d:d8:
a6:3d:22:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:03:16 2025 by rpki-client