Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
File: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft (raw, json)
Hash identifier: lb8cmUjOKftDK4Lf1bs+JvSVH710jnAoN6asIXB2E+0=
Subject key identifier: 9A:50:D7:34:03:7D:EC:08:B9:22:A9:9B:7E:5D:48:82:CF:62:83:62
Authority key identifier: 49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
Certificate issuer: /CN=492999fd50a69fd0412065490f5acc75a159deb7
Certificate serial: 019768BBE9B36B72F3A047F824A53EC85B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
Manifest number: 14E7
Signing time: Fri 13 Jun 2025 10:00:34 +0000
Manifest this update: Fri 13 Jun 2025 10:00:34 +0000
Manifest next update: Sat 14 Jun 2025 10:00:34 +0000
Files and hashes: 1: SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl (hash: dM4mx3+1sC/THwEstBR1x1xF/9lBf0zM2gv60FYzA/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:e9:b3:6b:72:f3:a0:47:f8:24:a5:3e:c8:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=492999fd50a69fd0412065490f5acc75a159deb7
Validity
Not Before: Jun 13 10:00:34 2025 GMT
Not After : Jun 14 10:00:34 2025 GMT
Subject: CN=9a50d734037dec08b922a99b7e5d4882cf628362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:25:e8:ef:f4:c8:a7:1a:e1:b8:8d:5e:17:
00:b6:48:19:b9:0b:f8:fa:eb:7f:65:94:63:a0:b9:
ca:bc:87:57:e4:0b:ae:59:6c:6d:50:40:72:c5:c3:
1e:13:fa:fb:f7:c3:6e:c3:42:d0:84:9b:c2:dd:71:
53:c6:42:c5:26:a2:d4:65:e2:40:fe:ca:6f:6d:94:
5c:09:e4:da:10:db:14:57:86:37:34:93:0b:9b:92:
21:da:be:3b:05:0c:55:7d:5e:46:0c:74:7e:03:21:
c9:b6:7f:4c:17:6c:5e:33:26:8a:05:11:83:66:37:
e1:4a:ed:25:c3:27:1b:71:01:e9:71:f3:7f:29:e8:
c9:bf:03:73:48:ee:ec:84:a6:18:54:0b:59:3e:d0:
4b:50:63:f8:20:4f:03:f0:19:3f:a9:cc:52:81:6d:
76:87:3f:7e:bf:28:92:33:66:89:39:96:b4:86:f8:
c8:1a:2a:5d:22:c7:5a:59:50:ef:f1:6a:18:01:7f:
66:25:70:67:0e:15:a8:8e:3b:07:ab:e4:3a:0a:9d:
e8:85:0c:24:b3:05:5b:a2:dd:4b:c7:9f:84:f3:d8:
0a:39:c5:9f:c4:60:56:df:22:d9:33:ab:64:82:cf:
06:fc:8b:02:1d:cb:d6:ec:8c:29:cc:c0:18:84:3f:
04:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:D7:34:03:7D:EC:08:B9:22:A9:9B:7E:5D:48:82:CF:62:83:62
X509v3 Authority Key Identifier:
keyid:49:29:99:FD:50:A6:9F:D0:41:20:65:49:0F:5A:CC:75:A1:59:DE:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9b19be-4b6c-4dd8-9b68-48f677fe255d/1/SSmZ_VCmn9BBIGVJD1rMdaFZ3rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4f:1f:ee:cf:68:97:09:ab:1f:b0:86:55:e2:73:1e:9b:e9:
0b:8c:d3:a8:90:0d:33:b6:42:5c:c0:0a:d9:fc:02:13:f2:ec:
d3:d4:7d:dd:51:5f:0e:20:e3:c8:3f:94:c5:63:67:ee:29:c7:
59:5c:51:2b:6b:76:2e:25:be:95:5e:01:0d:77:7b:b3:fd:97:
55:c0:16:59:33:3a:5d:a8:3e:9b:27:8b:d2:2b:cb:b7:4d:5d:
59:20:1d:5a:8e:6d:81:53:20:c9:23:3a:00:8d:60:12:e2:e4:
fb:b6:44:44:14:6d:e3:45:17:06:84:4e:87:22:95:7f:a6:4e:
26:cb:c6:20:29:49:7d:6c:54:12:1b:b7:11:4e:e5:12:ce:94:
f1:18:1c:20:8c:49:2a:99:a6:e8:14:b1:59:17:ea:af:20:44:
52:df:bb:b0:10:91:a4:23:5d:a0:b0:e8:6f:fe:7c:92:72:0f:
da:44:88:7c:30:b2:1f:59:be:03:9d:b3:bb:20:c2:d1:de:91:
ae:e0:59:46:85:5d:e9:c1:7a:f5:32:24:8b:7e:d4:5a:7b:e8:
c1:2c:90:e2:fe:f4:e3:a1:16:94:8f:b2:5d:5e:83:0d:da:c3:
c2:f0:0e:42:f5:42:fb:cb:ea:ce:b7:84:52:ed:c0:fa:9b:08:
0e:59:4b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou+mza3LzoEf4JKU+yFtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5Mjk5OWZkNTBhNjlmZDA0MTIwNjU0OTBmNWFjYzc1YTE1
OWRlYjcwHhcNMjUwNjEzMTAwMDM0WhcNMjUwNjE0MTAwMDM0WjAzMTEwLwYDVQQD
Eyg5YTUwZDczNDAzN2RlYzA4YjkyMmE5OWI3ZTVkNDg4MmNmNjI4MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5sl6O/0yKca4biNXhcAtkgZuQv4
+ut/ZZRjoLnKvIdX5AuuWWxtUEByxcMeE/r798Nuw0LQhJvC3XFTxkLFJqLUZeJA
/spvbZRcCeTaENsUV4Y3NJMLm5Ih2r47BQxVfV5GDHR+AyHJtn9MF2xeMyaKBRGD
ZjfhSu0lwycbcQHpcfN/KejJvwNzSO7shKYYVAtZPtBLUGP4IE8D8Bk/qcxSgW12
hz9+vyiSM2aJOZa0hvjIGipdIsdaWVDv8WoYAX9mJXBnDhWojjsHq+Q6Cp3ohQwk
swVbot1Lx5+E89gKOcWfxGBW3yLZM6tkgs8G/IsCHcvW7IwpzMAYhD8EowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpQ1zQDfewIuSKpm35dSILPYoNiMB8GA1UdIwQY
MBaAFEkpmf1Qpp/QQSBlSQ9azHWhWd63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgt
NDhmNjc3ZmUyNTVkLzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85YjE5YmUtNGI2Yy00ZGQ4LTliNjgtNDhmNjc3ZmUyNTVk
LzEvU1NtWl9WQ21uOUJCSUdWSkQxck1kYUZaM3JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFU8f7s9o
lwmrH7CGVeJzHpvpC4zTqJANM7ZCXMAK2fwCE/Ls09R93VFfDiDjyD+UxWNn7inH
WVxRK2t2LiW+lV4BDXd7s/2XVcAWWTM6Xag+myeL0ivLt01dWSAdWo5tgVMgySM6
AI1gEuLk+7ZERBRt40UXBoROhyKVf6ZOJsvGIClJfWxUEhu3EU7lEs6U8RgcIIxJ
Kpmm6BSxWRfqryBEUt+7sBCRpCNdoLDob/58knIP2kSIfDCyH1m+A52zuyDC0d6R
ruBZRoVd6cF69TIki37UWnvowSyQ4v7046EWlI+yXV6DDdrDwvAOQvVC+8vqzreE
Uu3A+psIDllLHA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:58 2025 by rpki-client