Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
File: szR4SqShmdfDbHOiZe0JSyGDgcM.mft (raw, json)
Hash identifier: 4XNQfnTWo/DrkPBAyRuFU7GUOeNP21//7Ti0jxFwZPo=
Subject key identifier: B2:ED:3C:4F:0B:85:A8:48:B6:13:3C:38:D1:12:4C:6F:81:E3:4B:52
Authority key identifier: B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
Certificate issuer: /CN=b334784aa4a199d7c36c73a265ed094b218381c3
Certificate serial: 019A4D7377045B08F44735B67C76EBEE0F21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
Manifest number: 0EDF
Signing time: Tue 04 Nov 2025 06:00:03 +0000
Manifest this update: Tue 04 Nov 2025 06:00:03 +0000
Manifest next update: Wed 05 Nov 2025 06:00:03 +0000
Files and hashes: 1: szR4SqShmdfDbHOiZe0JSyGDgcM.crl (hash: Q/GGRfTyEe5prkFYgtOe4rECTY+TbwKc3C8Kzrp/V/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:77:04:5b:08:f4:47:35:b6:7c:76:eb:ee:0f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334784aa4a199d7c36c73a265ed094b218381c3
Validity
Not Before: Nov 4 06:00:03 2025 GMT
Not After : Nov 5 06:00:03 2025 GMT
Subject: CN=b2ed3c4f0b85a848b6133c38d1124c6f81e34b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:ba:ee:17:2c:9b:16:ab:1a:0f:39:8e:54:
22:c0:25:c3:40:0d:95:bb:de:3c:f8:fb:53:05:b8:
13:66:d0:fd:3f:13:01:88:da:31:0c:e5:c9:41:0f:
ed:24:39:4f:04:2c:e6:83:cd:1b:fc:91:06:b2:20:
e4:16:43:71:16:12:d5:8a:f3:34:51:0f:34:89:2c:
b8:a6:23:9a:de:10:94:9c:6e:cf:d2:44:63:a9:8d:
e4:e4:fa:9e:81:ad:35:f2:cc:53:cd:0d:5e:ea:b0:
b1:ac:ff:83:87:74:5f:21:91:8e:cb:3f:75:06:6d:
c3:50:34:a6:dc:4a:22:3a:a5:66:fa:d3:23:c3:5f:
ba:64:52:3e:5c:75:a0:76:42:5c:76:5a:5e:70:ff:
e4:96:6c:27:c7:b8:63:ca:fc:81:26:9f:b6:ab:57:
db:d8:89:56:bd:af:a3:6a:6d:4b:4c:d3:ce:ce:17:
c2:c4:09:b1:2c:96:70:cd:a7:f5:31:6f:44:73:28:
0b:90:80:22:e8:d0:09:a0:ae:a1:a0:37:55:5d:8a:
dc:f6:5f:25:37:8d:ed:ce:d5:eb:96:50:fd:ca:2b:
53:22:5f:21:ee:37:89:27:36:53:6e:9e:70:95:a7:
ea:ff:90:00:4f:82:36:f7:7a:40:41:d9:cf:64:75:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:3C:4F:0B:85:A8:48:B6:13:3C:38:D1:12:4C:6F:81:E3:4B:52
X509v3 Authority Key Identifier:
keyid:B3:34:78:4A:A4:A1:99:D7:C3:6C:73:A2:65:ED:09:4B:21:83:81:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szR4SqShmdfDbHOiZe0JSyGDgcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/484067-5d7b-48a6-a99a-21c5c7963455/1/szR4SqShmdfDbHOiZe0JSyGDgcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:53:1e:a7:d4:c0:2a:68:af:d6:f7:57:04:a9:00:43:13:e8:
e3:4c:7b:66:29:13:dc:5b:0c:98:2b:37:b5:5e:92:f4:7c:7a:
67:59:a0:71:50:71:33:93:1d:36:2c:03:d5:38:89:2c:b0:0d:
74:8f:23:df:e7:9b:c0:cd:d2:1e:0d:6c:96:2e:52:51:70:91:
ef:35:ee:22:72:67:ff:47:4c:97:d0:ae:0a:ac:d7:c8:e1:e2:
be:08:84:04:ea:a3:88:e4:9e:26:d8:5b:0a:d1:b4:ff:95:e3:
6a:68:60:28:21:99:78:f8:4c:1e:a0:77:19:13:57:82:0a:a8:
44:cf:89:a5:1f:0e:29:f0:9f:f7:a1:66:dd:e9:ff:f8:f4:07:
49:24:99:62:4e:5c:93:77:f1:5e:bc:b5:4f:54:45:cd:93:10:
a5:02:dd:08:ec:0a:4f:2d:e6:00:73:2d:d9:c4:d9:3e:1a:a6:
2f:47:f9:6f:8f:dc:70:ea:eb:f4:58:ee:1f:1e:51:ea:d6:75:
58:12:ab:bb:0a:03:12:fb:4c:44:31:8a:b8:70:3e:64:fd:c3:
e5:8e:fd:50:9f:d1:2b:5c:77:1d:06:f5:5a:8b:7c:e5:44:a2:
5a:44:f8:2a:19:51:5c:10:1e:42:88:40:e5:ce:72:89:c6:b5:
21:96:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:02 2025 by rpki-client