
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: VtU1Ffpps/DGmOtZFqnmtwhqVhlP+9YAAWhph/6TmkA=
Subject key identifier: 30:2C:CF:F4:6A:92:52:C7:C7:4D:0D:A8:D8:60:C7:C1:67:CC:DA:C5
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 019874506ABCB03B1DB24F63B1F8B8BF07DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0DEA
Signing time: Mon 04 Aug 2025 09:01:23 +0000
Manifest this update: Mon 04 Aug 2025 09:01:23 +0000
Manifest next update: Tue 05 Aug 2025 09:01:23 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: HtXQLsPw7HNMNSUKgt7fwdiwlt65kARRO3LZykxmO18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6a:bc:b0:3b:1d:b2:4f:63:b1:f8:b8:bf:07:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Aug 4 09:01:23 2025 GMT
Not After : Aug 5 09:01:23 2025 GMT
Subject: CN=302ccff46a9252c7c74d0da8d860c7c167ccdac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:15:d3:b1:b3:91:14:8e:3a:cf:ec:26:c9:
8e:04:29:2a:15:67:08:d1:ab:e4:a4:70:18:9e:31:
70:7c:8f:9d:87:8c:ec:ef:31:f7:b7:87:56:b5:02:
25:a1:01:9f:cb:02:de:b4:c4:f4:04:cc:03:5b:43:
8e:69:79:3b:fa:da:1b:d9:90:f2:07:52:e7:ee:ad:
46:27:68:9b:db:a5:bb:ba:95:ff:f0:ad:a5:36:ac:
18:5c:4e:19:bc:1e:01:69:15:29:4f:16:6f:7c:3d:
ac:e5:48:53:e5:20:67:d1:20:d0:2c:4c:2b:af:22:
11:c9:c7:d0:a7:59:f5:ae:c5:3c:c2:84:b0:66:35:
d1:6a:9d:07:38:38:c0:b4:30:82:43:93:f3:4b:ed:
98:2e:65:58:ea:49:fb:7a:4d:13:27:6f:0b:51:f1:
66:c3:89:ae:3d:60:f1:fe:e0:1c:4a:21:84:a5:c7:
43:4f:11:83:62:3b:34:b4:8f:34:bc:b4:a4:32:5a:
65:df:0c:18:4f:6d:11:8f:af:1c:0b:69:13:61:1c:
05:6b:6f:1f:3b:9b:cc:21:50:d7:64:0a:4b:59:82:
05:78:a8:bc:ed:63:03:5f:09:9d:d7:09:f8:78:6d:
e9:92:ea:e6:55:7a:1d:23:6c:46:e8:5e:af:60:16:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2C:CF:F4:6A:92:52:C7:C7:4D:0D:A8:D8:60:C7:C1:67:CC:DA:C5
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6d:5d:99:97:2b:ff:80:54:43:26:5e:57:7b:e1:d4:19:4c:
49:e4:de:f6:15:36:00:3e:33:75:48:0f:a6:a5:93:7d:3a:99:
4c:6d:3a:ed:a0:f2:7f:38:e3:1c:c1:f9:1e:4d:a3:ec:73:7c:
cd:fc:9f:90:68:8e:7c:b2:d1:e3:70:c6:77:ef:8a:b2:52:ec:
f6:9c:dd:8b:57:7c:fd:ae:fe:b0:d5:80:d5:09:d1:57:99:83:
a9:19:fe:f9:aa:bc:42:f8:98:88:9a:e2:7c:e2:21:ee:8a:77:
8f:9f:b0:24:12:02:be:37:9f:61:ab:dd:eb:f5:cb:33:3e:3d:
bd:27:44:5f:6a:f5:0d:c9:fa:dd:6b:6f:e9:da:54:8c:ae:fb:
f4:aa:55:b5:64:2d:58:65:9a:2e:d9:5c:32:11:c8:ef:9f:59:
6c:e5:9f:2f:9f:7b:63:23:33:6d:39:06:fa:91:ec:81:05:62:
a4:08:0c:de:ac:5f:2f:bf:83:92:25:ba:cb:07:81:92:58:af:
55:97:ab:20:0b:27:11:4f:80:ec:5c:65:3f:7f:4a:8c:b9:37:
e4:c5:33:1d:53:18:d2:a7:1a:48:eb:3d:88:2f:9e:c2:8e:1b:
d4:51:1a:44:e5:7b:38:aa:79:30:1b:96:68:ce:69:69:52:30:
a1:54:86:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:26 2025 by rpki-client