Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: E6C61gOHWfa7J50NjIFizbwSbwVosRuYrS9sDIypGBk=
Subject key identifier: 67:FE:D8:95:9B:22:3D:6A:74:E6:68:1C:28:43:AB:E1:85:76:81:FF
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 0198873258BCA2438715F542549C959F750F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 095F
Signing time: Fri 08 Aug 2025 01:01:20 +0000
Manifest this update: Fri 08 Aug 2025 01:01:20 +0000
Manifest next update: Sat 09 Aug 2025 01:01:20 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: dSf4O3FBc9T8xR4VcxksAXXj1n7k2UA07ECFBCsdhH0=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:58:bc:a2:43:87:15:f5:42:54:9c:95:9f:75:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Aug 8 01:01:20 2025 GMT
Not After : Aug 9 01:01:20 2025 GMT
Subject: CN=67fed8959b223d6a74e6681c2843abe1857681ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:5d:12:0b:a3:3b:51:ca:d5:55:2f:6c:f0:
3d:dc:be:cb:a7:d4:78:7c:d5:7d:b6:e2:e0:d0:36:
bd:83:77:1a:0c:16:82:37:75:ff:d9:ba:4c:5a:f3:
53:61:35:e1:8a:a5:9d:d5:28:be:9b:1c:27:c9:f7:
24:84:bc:80:7a:75:fb:c7:11:18:bc:25:81:a9:59:
e0:c6:01:ed:6a:5f:1f:5f:2d:fc:32:1a:c7:f2:1a:
92:c3:0f:d9:95:70:d9:3d:cb:a1:0d:dd:4e:b0:a8:
08:67:92:e3:65:f9:19:c0:31:9b:e5:1d:cc:fd:7e:
4c:7a:95:c3:c8:65:ba:2d:6d:27:c5:e1:a4:51:d5:
14:67:b7:59:d2:38:cd:cc:92:41:9b:dd:57:7f:0d:
99:5c:13:b7:68:36:1a:ea:f1:7b:9d:ce:cc:d3:45:
a3:d1:52:15:ac:e2:a7:93:ff:f7:e4:22:a8:1e:f3:
47:c7:b7:f4:4d:08:c6:2b:66:97:ab:bf:51:5e:10:
46:f0:c4:d8:6f:67:d6:83:3d:de:c2:ee:e0:40:f4:
77:6a:40:5b:75:05:9e:4c:4c:f0:0c:5d:a9:40:a7:
32:ee:d1:82:ba:1e:49:da:31:80:86:3e:99:0a:85:
07:4e:39:52:ce:ca:2d:9d:f5:df:79:fb:81:61:41:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:D8:95:9B:22:3D:6A:74:E6:68:1C:28:43:AB:E1:85:76:81:FF
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:36:46:e4:ac:23:90:d7:7b:60:ef:f3:53:37:9a:c5:54:
eb:bf:96:4b:ae:e2:59:1e:38:f6:66:a5:82:5c:a8:f0:83:6f:
6d:99:a4:0c:07:95:48:7b:7f:74:1a:01:b6:77:73:48:18:3e:
a6:d5:b4:a2:3e:84:0a:bb:e0:ba:18:98:0d:3d:4e:68:29:17:
da:80:bc:50:41:38:2d:04:ec:d4:a9:8a:d8:ee:b2:af:ee:01:
d7:bc:a5:72:a3:8b:cc:af:b8:6f:7b:7d:d9:03:6e:bf:21:76:
69:85:26:5a:97:32:52:21:21:c0:65:d8:f8:c3:b7:7b:c1:7b:
ed:7c:de:5f:c9:b1:60:eb:e4:d1:73:58:4f:c3:43:12:32:90:
ff:60:c5:73:fa:e6:1f:64:cd:32:73:0d:89:b0:cd:5b:8e:91:
ed:3c:d0:67:25:01:18:0b:a8:e0:a1:a0:a9:ea:4e:59:1f:b2:
44:e6:1f:f5:2f:7b:2d:06:1f:05:f3:b6:af:ae:9d:e7:cb:14:
7b:03:e9:a1:78:db:0b:7e:28:d3:cf:51:85:3c:26:76:c8:01:
35:dd:9b:a5:95:b2:8e:aa:f4:d0:bf:74:1e:df:ec:12:b6:0d:
d3:e1:8e:70:8b:77:2f:86:7a:52:c9:a1:a8:2b:e4:42:1a:cd:
77:bc:96:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:26:55 2025 by rpki-client