Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
File: SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft (raw, json)
Hash identifier: N/W0Xw7+I2KM5nrcG2skCAQjcSj/UNBcm7OuYrjjKvw=
Subject key identifier: 65:E2:CF:31:95:52:D7:D5:5F:F3:FD:E2:37:1F:AD:55:6E:01:0D:55
Authority key identifier: 4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
Certificate issuer: /CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Certificate serial: 01988CFCEA2DF101BBF0C595405F303FC77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
Manifest number: 0E17
Signing time: Sat 09 Aug 2025 04:00:41 +0000
Manifest this update: Sat 09 Aug 2025 04:00:41 +0000
Manifest next update: Sun 10 Aug 2025 04:00:41 +0000
Files and hashes: 1: SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl (hash: 6l5KuaYTBWDWxweakFTsRlIDJqw0FV2EQItcHw6kMO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fc:ea:2d:f1:01:bb:f0:c5:95:40:5f:30:3f:c7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60f38cf36fcc9bc513293512b46b911edf5ac5
Validity
Not Before: Aug 9 04:00:41 2025 GMT
Not After : Aug 10 04:00:41 2025 GMT
Subject: CN=65e2cf319552d7d55ff3fde2371fad556e010d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:cd:c0:7c:19:57:e9:5a:f3:59:75:3e:2d:
f9:c6:e5:00:ae:6b:9e:f2:aa:d8:9c:84:70:33:f4:
d0:96:78:2a:73:52:f5:c0:22:8f:1e:b3:98:f5:05:
fe:cd:de:cb:11:fa:da:04:c8:b0:64:50:c5:11:e4:
23:1b:3f:ba:f0:14:57:04:2b:41:cf:8e:cb:70:c9:
1a:94:3b:44:89:a1:03:d6:fe:18:31:50:17:9d:96:
91:b2:8d:f2:a1:33:bc:0f:28:97:bf:8b:8c:fa:0a:
6a:30:7d:53:e0:bc:4d:c2:a0:d3:f4:cc:fd:32:df:
98:13:8d:f0:0e:e1:79:3b:bc:31:63:5e:a0:f8:cb:
f8:3e:14:8f:a9:2e:1a:fa:24:10:d5:a1:27:05:82:
de:e9:b9:67:c8:ee:cf:83:c7:24:6a:c8:8d:d2:5a:
1c:ab:ee:3e:f9:cf:44:b3:5f:09:b9:2e:01:df:9b:
f8:eb:d9:7a:f8:5e:8f:8b:18:f6:35:08:80:61:bd:
e8:08:06:5f:ca:a2:f4:7d:47:69:fb:73:89:a7:35:
74:3c:dd:5f:ff:24:d1:6a:1a:4e:00:c2:c6:e2:ec:
71:0a:b1:74:4b:59:f5:ba:c1:5a:b3:b6:7e:a9:b4:
f2:ff:c8:cd:21:0d:e1:c7:30:da:50:6a:ed:ee:40:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:CF:31:95:52:D7:D5:5F:F3:FD:E2:37:1F:AD:55:6E:01:0D:55
X509v3 Authority Key Identifier:
keyid:4A:60:F3:8C:F3:6F:CC:9B:C5:13:29:35:12:B4:6B:91:1E:DF:5A:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmDzjPNvzJvFEyk1ErRrkR7fWsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0ef622-9c27-4673-9b3b-ea29c1a28c5d/1/SmDzjPNvzJvFEyk1ErRrkR7fWsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:20:1d:de:b0:d6:4f:7c:c4:31:88:ec:f6:c3:01:5b:3b:
15:2d:e1:59:e3:6c:4a:a3:c0:07:fc:08:28:d1:e3:9e:d5:59:
cf:26:09:bd:b4:4e:c3:b7:23:92:f6:6a:3c:e6:05:dc:44:bb:
d0:c6:ef:b6:2e:18:6c:61:00:c3:d6:ef:95:e4:4d:6c:f3:06:
be:b5:a3:be:fe:e0:27:a2:97:f1:68:1b:ff:65:59:39:15:10:
a1:a6:fb:56:7d:d0:ff:69:69:71:27:96:71:0a:0e:e6:b7:2c:
2f:5e:cc:0b:0a:0e:88:13:46:b2:d2:2e:f6:e1:9b:44:0c:b7:
9e:66:e8:b9:02:26:7a:5f:7f:b2:af:67:97:10:d3:66:88:8c:
08:95:2e:aa:27:ec:2d:e5:e3:86:b6:17:86:f1:30:15:a8:86:
00:fd:53:b4:33:38:a6:40:cf:03:b8:fb:ef:6e:e5:36:fb:34:
71:83:6f:e1:c1:62:52:e9:c6:26:ab:08:07:5c:4d:c9:ad:d4:
d6:03:31:ac:ca:82:b5:72:fd:21:bb:ad:39:b4:61:64:dc:aa:
9f:27:ac:0d:a2:4b:ca:21:46:f2:e8:1a:0f:20:10:cc:eb:77:
5e:54:41:74:c5:c3:52:00:64:00:25:4f:de:0d:3a:30:77:6a:
69:0b:c1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:31:53 2025 by rpki-client