Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: vvaLfRNEWlDZjNJnTTXNSyRYU2zUXlS8hNKV6aSDn9c=
Subject key identifier: 03:98:3F:40:97:0D:3C:81:B6:BF:84:FF:B2:37:5E:91:FD:7A:0E:C5
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 01976D3D707266DB6AD354C41E059332970C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 08CD
Signing time: Sat 14 Jun 2025 07:00:32 +0000
Manifest this update: Sat 14 Jun 2025 07:00:32 +0000
Manifest next update: Sun 15 Jun 2025 07:00:32 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: TmvwoF3dCLn754zOP3sY/TXnU/TPn6VoJn2ajihcUGk=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:70:72:66:db:6a:d3:54:c4:1e:05:93:32:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Jun 14 07:00:32 2025 GMT
Not After : Jun 15 07:00:32 2025 GMT
Subject: CN=03983f40970d3c81b6bf84ffb2375e91fd7a0ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:08:d5:0b:fe:9f:06:a6:3d:dc:2f:39:b5:6d:
72:88:9a:83:a9:eb:0c:e3:24:e6:1c:29:50:5e:8d:
49:5e:e7:a4:26:b0:b6:c4:1c:5c:ac:0f:c2:20:26:
df:1f:80:3c:b3:4c:b8:a9:bd:68:87:73:90:de:ad:
43:5a:39:c9:bc:e4:c3:91:72:a8:33:f7:53:5b:94:
4c:48:c1:0a:4e:3e:a9:1d:74:72:22:5b:f0:5d:1a:
3a:bb:61:6f:31:35:cd:2e:6f:43:46:9d:d8:c8:12:
88:e9:02:c7:c5:6b:18:70:13:d5:84:19:fe:1d:f5:
e6:c0:b9:f9:3d:8b:d7:f1:22:9b:77:78:09:15:4f:
04:ab:2f:26:5e:12:7f:08:91:ea:5a:2d:3c:c7:5c:
b3:e3:9b:94:db:f5:78:dd:f5:ff:0e:39:77:75:c9:
1b:45:70:75:0c:92:bb:19:1f:0f:f0:1c:4b:68:43:
66:19:6a:d8:bf:21:f2:cf:86:08:09:d1:7f:2d:a6:
db:b4:aa:c9:0b:1b:ce:3c:1c:a2:e8:8c:da:14:a8:
d1:b6:d8:4f:e4:d6:fd:5a:a9:33:b1:b3:31:4e:fd:
2c:b1:d6:d9:b5:78:01:fa:70:8f:5c:cf:77:dc:cc:
ae:57:59:d7:86:81:41:aa:f1:07:c2:25:c5:bc:37:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:3F:40:97:0D:3C:81:B6:BF:84:FF:B2:37:5E:91:FD:7A:0E:C5
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:20:8e:39:65:1b:2c:08:1f:ab:05:c1:47:03:5a:91:d3:5e:
9a:80:25:90:3a:78:78:d5:69:31:59:a2:0f:ef:46:62:01:1a:
2e:a0:09:80:88:11:dd:ea:00:df:46:d9:d9:59:dc:35:89:54:
65:cb:3c:8d:a1:d5:6f:ba:b3:9f:f7:e1:45:e4:d7:01:46:97:
aa:27:76:ca:6d:69:c4:b3:ab:58:7f:aa:a0:3b:8d:c0:ad:98:
3b:58:37:b9:61:b4:6e:3a:9a:bf:57:6a:9b:cb:6e:e7:42:9c:
83:37:6b:db:a1:1b:54:89:3d:b6:63:cd:06:2a:27:44:5a:1f:
69:97:21:fb:19:89:41:65:55:80:0b:0c:23:7d:68:61:50:c7:
e7:91:2e:df:02:42:1c:a1:4d:90:f7:44:89:d4:70:65:51:ed:
34:df:ca:9e:0d:23:3c:f2:6d:3a:35:22:f6:0b:4e:98:4c:a3:
46:4b:54:43:ce:49:de:63:98:46:af:6a:38:cd:f8:a3:a8:a9:
fb:26:88:67:62:06:1a:41:90:68:79:f2:df:b3:46:41:d8:ba:
b3:3f:c8:b7:c5:b9:0d:e5:8d:e6:e4:fd:c4:f9:37:ab:10:aa:
81:d8:5c:79:c6:ad:0b:c1:7f:a3:6b:cd:ab:9e:0f:c0:d4:42:
40:ae:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:21:14 2025 by rpki-client