Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File: szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier: eeTDpsVrhAEXRZ9gzT9PsfObUp9FXkF86VarK+J0uKY=
Subject key identifier: 96:1A:07:F6:B3:42:B8:72:A1:23:AC:13:C2:5A:92:DF:C6:EF:A3:23
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 019826D9B22431C2D00146DFA1E14B58E2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number: 15EE
Signing time: Sun 20 Jul 2025 08:00:57 +0000
Manifest this update: Sun 20 Jul 2025 08:00:57 +0000
Manifest next update: Mon 21 Jul 2025 08:00:57 +0000
Files and hashes: 1: LYWNFEM4isLrMZkcPOtofB7wrtQ.roa (hash: 3L7ng+8G15KKO1VpRMLBS9WLq4qDKG/BjuMPbzD+J28=)
2: gPGcyQrRSC47MoDcNvHUCHgMy9I.roa (hash: MmytL0w6XbyXL7UhT0pH40kUdOSvBJ5woyxf0GcUHwU=)
3: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: joK8KwKVfAxb/94NrmMVa9DBjk6oOx/ym94Hj7KLL+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:d9:b2:24:31:c2:d0:01:46:df:a1:e1:4b:58:e2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jul 20 08:00:57 2025 GMT
Not After : Jul 21 08:00:57 2025 GMT
Subject: CN=961a07f6b342b872a123ac13c25a92dfc6efa323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:14:cd:92:6d:2f:ac:8f:a3:fd:e9:8e:ef:
69:87:7f:b2:aa:09:c8:44:9b:a8:d7:d7:49:2f:b6:
e6:61:b0:4a:71:e0:ce:4c:a1:e7:46:75:67:be:68:
6a:4d:d0:99:73:68:92:b8:34:5d:5e:da:ed:91:a6:
de:5a:cd:82:31:c0:08:4a:eb:a2:f9:ef:6a:7b:4f:
fd:1b:71:d3:11:ce:a4:c4:9d:95:bd:49:4b:26:7d:
24:f9:32:cd:1c:5c:8a:ff:44:96:b9:86:b0:de:f6:
3d:f8:fc:05:44:38:c3:0c:39:c2:bc:38:fd:86:12:
a0:27:1a:e6:5f:d8:7c:ef:75:86:95:57:5d:e1:84:
6d:41:eb:db:37:ff:b3:b1:b8:e1:9a:26:9f:28:43:
dd:d6:cd:e6:09:3d:7c:b7:fc:8b:27:7d:5e:9e:8d:
36:8f:b3:19:c0:c9:48:27:71:13:67:76:a8:6f:96:
4a:13:bb:eb:7c:24:5c:41:6f:91:91:56:f2:8a:5a:
55:cc:d6:2b:fd:93:b6:bc:f8:5c:45:2b:5b:7c:c2:
95:c5:f6:66:2f:66:c8:e6:2f:8e:1b:c8:cc:5f:1a:
fc:36:db:c3:17:eb:20:9e:3c:64:b1:39:c7:19:02:
ae:d4:1d:fc:3d:9a:e3:99:59:e5:9d:15:d7:8b:05:
f3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1A:07:F6:B3:42:B8:72:A1:23:AC:13:C2:5A:92:DF:C6:EF:A3:23
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:46:6f:a8:be:6c:46:dd:72:48:cf:43:e5:b2:c6:83:bc:74:
17:2c:ba:da:de:2a:19:2d:b9:14:71:8c:39:6f:1e:d2:b2:77:
67:ad:0e:57:a9:d8:a7:46:a4:dc:59:c2:22:a3:06:3b:a5:db:
15:72:da:f3:86:90:0f:d8:72:36:f8:72:96:83:63:70:8b:0a:
b1:21:a6:88:cb:45:be:f4:f3:0f:a6:27:4e:ef:a0:b4:38:58:
5d:01:3f:5f:45:4f:ee:2f:2f:d3:4a:20:ca:c1:82:07:1a:e3:
c5:5c:be:5f:f9:f5:6c:a0:91:fc:48:26:08:a8:d6:59:c6:a2:
7a:a5:b4:f3:77:ab:a0:ea:c4:b7:ef:be:b2:52:7f:88:84:e4:
c3:d4:31:94:79:71:79:86:27:54:11:87:d7:af:2e:5f:d9:43:
24:d0:08:1a:7c:40:a1:11:ea:51:5d:e9:f4:4d:f5:ce:c2:cf:
29:75:46:1e:8d:14:0e:45:4d:86:86:f6:f3:d2:04:13:54:79:
d4:4a:01:bb:1e:bb:20:16:fe:50:b1:d4:6f:8f:4a:61:9c:2a:
56:b6:d4:fa:f0:8e:79:75:05:df:d2:97:bc:a7:a7:e8:1c:4c:
80:3a:35:35:cf:b2:0e:56:fc:ab:62:56:24:a6:7b:aa:ea:d7:
c7:75:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:27 2025 by rpki-client