Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json)
Hash identifier: YUZHRUjSiotkewJg5d+jS/qVJ8hJE+1TAjcyjJyWVBI=
Subject key identifier: 54:52:B5:48:57:A6:51:11:76:4B:F5:E5:30:CE:DA:58:E7:86:8D:3B
Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Certificate serial: 0198530DB65391DAA338AC3AD918136449AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
Manifest number: 03C4
Signing time: Mon 28 Jul 2025 22:01:04 +0000
Manifest this update: Mon 28 Jul 2025 22:01:04 +0000
Manifest next update: Tue 29 Jul 2025 22:01:04 +0000
Files and hashes: 1: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: Aw03BsZAoFk3KV2x1D4sQDvqjL6eOMj/IheGNJlt+NE=)
2: _Bq_ahlry5PbsLgSqWTDBgCzrGg.roa (hash: ALTa8b/7lEoVgTQ9zQyYwW//fRwrl5PxAgGHVIW0QVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:b6:53:91:da:a3:38:ac:3a:d9:18:13:64:49:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae
Validity
Not Before: Jul 28 22:01:04 2025 GMT
Not After : Jul 29 22:01:04 2025 GMT
Subject: CN=5452b54857a65111764bf5e530ceda58e7868d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:42:ff:bf:9d:88:dc:d8:aa:f5:9a:d4:de:
9f:be:1a:d1:6b:5e:df:79:c3:8c:ae:cb:08:4c:4d:
4a:01:d9:1e:de:15:32:23:8e:20:47:25:67:79:63:
ee:bf:8d:e8:dd:e3:1e:67:fc:57:e6:16:a2:35:ca:
11:1c:f1:24:cc:a2:78:c7:a5:ec:02:45:db:de:ca:
71:7b:bf:7b:12:b3:f2:5d:a8:50:55:ff:eb:f7:51:
8d:7a:c5:d8:72:09:0c:db:b9:80:6b:bd:67:6e:84:
bd:71:73:bd:2f:99:3a:52:3e:37:46:8a:38:4d:80:
34:e1:d1:6f:dd:a1:73:10:ab:11:4c:fa:46:94:ef:
04:ec:b3:51:d5:91:13:7b:23:67:78:5f:7a:0e:c9:
62:08:ed:dc:4e:98:ac:74:d7:04:7c:70:8d:36:11:
a1:11:b0:7a:48:00:02:a4:d0:b5:af:c6:24:a5:53:
e5:0c:74:cc:ce:d7:c4:1a:ed:0d:2c:fd:aa:6e:4c:
ee:84:8b:de:86:9d:17:e1:86:87:35:1c:12:bc:8a:
14:a3:60:ec:e8:c0:7f:3c:4b:4e:74:67:5a:90:fd:
14:89:01:28:7d:62:51:49:5b:0a:c7:f2:4f:e2:2c:
9b:a3:b3:5a:3e:53:13:1f:8c:2f:33:ef:a3:c1:f7:
68:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:52:B5:48:57:A6:51:11:76:4B:F5:E5:30:CE:DA:58:E7:86:8D:3B
X509v3 Authority Key Identifier:
keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:62:3f:aa:0f:71:fb:80:43:ca:4d:3c:51:63:32:90:df:10:
2b:4a:a5:80:7a:db:62:b6:ce:95:ed:c5:22:d2:d6:de:df:da:
3d:43:08:3a:43:de:69:80:58:06:bf:6c:ba:b7:81:b6:b2:03:
6a:8c:42:4e:ad:ce:40:3a:80:ef:64:f4:dd:52:4b:ea:ed:e5:
49:e4:d7:dd:a9:73:b6:d8:4d:69:d4:01:b6:9c:60:63:36:c7:
9d:19:a3:79:22:0b:8d:7c:7c:1d:00:76:79:16:59:48:a2:6e:
6e:4d:8f:0f:b9:09:67:74:fa:47:d9:d2:16:90:98:5a:41:f9:
d8:79:a0:a4:54:43:4f:65:6f:85:e4:52:f1:73:5b:56:ab:88:
b5:59:4c:a5:23:5b:38:1e:44:45:08:0c:50:e5:8c:44:5f:9e:
02:a1:9c:45:d4:a0:81:ee:74:21:5b:8c:3f:cd:28:44:e9:1d:
27:4c:25:81:93:29:d5:f9:31:f2:4b:1f:8d:8a:6e:37:cb:4c:
69:0d:47:81:67:18:18:df:b8:b4:d9:ec:6c:36:94:70:ed:91:
08:b8:48:a9:1c:b8:89:29:c2:78:af:62:48:9f:0d:40:c7:e4:
57:2c:cb:ef:e1:47:76:43:c0:a2:6a:b8:65:3c:30:6d:fb:fb:
54:9e:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:06 2025 by rpki-client