Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
File: Sz1GYT0gKWKWebKwSi-chsq8dNU.mft (raw, json)
Hash identifier: CyQsr/4Kv3l6QzMiJ1Vq3wof54o1qz8EMi+KXtq5eUI=
Subject key identifier: 42:4F:D3:4A:3B:55:09:CA:9F:E8:1F:E3:05:0A:CF:59:6F:28:06:B8
Authority key identifier: 4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
Certificate issuer: /CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Certificate serial: 019A71B7F5D4D9336022B772F52A298B89F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:12 +0000
Manifest this update: Tue 11 Nov 2025 07:01:12 +0000
Manifest next update: Wed 12 Nov 2025 07:01:12 +0000
Files and hashes: 1: Sz1GYT0gKWKWebKwSi-chsq8dNU.crl (hash: pO3zGy1KZgw9X5CsNTz0et6gxt0dJikNmErGMv8WES0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f5:d4:d9:33:60:22:b7:72:f5:2a:29:8b:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3d46613d2029629679b2b04a2f9c86cabc74d5
Validity
Not Before: Nov 11 07:01:12 2025 GMT
Not After : Nov 12 07:01:12 2025 GMT
Subject: CN=424fd34a3b5509ca9fe81fe3050acf596f2806b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:76:bf:1b:83:a1:a6:c7:c9:6a:17:39:96:
00:a7:20:11:a4:cc:c5:69:e6:6a:bd:6f:52:0b:dc:
5f:eb:4c:47:58:82:83:e2:54:f9:6a:86:46:d8:bc:
29:68:54:89:7a:b3:a1:92:71:60:e1:56:ef:72:e3:
89:39:b3:f3:d5:4c:d3:77:56:fc:f3:0e:ab:09:ed:
bf:8b:d5:13:1b:f9:2b:cd:12:39:0b:76:d5:c6:ee:
76:ba:92:a9:70:8d:71:38:5c:6d:d4:e5:e5:77:4f:
b9:44:78:53:ad:ad:ab:c1:09:35:7d:7c:ba:a1:88:
af:05:b8:43:81:2c:70:5b:72:d3:5e:b4:e0:b2:cf:
8a:a1:90:0b:fe:39:c7:02:a6:52:d1:50:89:83:59:
cd:65:d5:ee:78:d4:94:69:db:dd:14:b6:9f:eb:60:
d0:a9:95:7d:87:f7:fe:b8:01:be:fb:e5:f4:18:76:
2d:d2:f2:fd:b2:92:77:a3:44:5c:e9:1b:80:d3:82:
3a:36:3d:97:7b:3a:db:f0:f3:d3:11:5a:af:87:e5:
b1:94:0f:0b:90:17:d8:91:a8:4f:af:52:f6:f0:92:
fa:63:94:b8:80:58:81:3b:ae:ba:0b:33:5f:8c:6c:
6d:56:12:18:75:94:bb:06:98:50:fc:bf:1b:88:f9:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:D3:4A:3B:55:09:CA:9F:E8:1F:E3:05:0A:CF:59:6F:28:06:B8
X509v3 Authority Key Identifier:
keyid:4B:3D:46:61:3D:20:29:62:96:79:B2:B0:4A:2F:9C:86:CA:BC:74:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sz1GYT0gKWKWebKwSi-chsq8dNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2d782e-01e2-4b73-bf80-b979e65bc0d6/1/Sz1GYT0gKWKWebKwSi-chsq8dNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7a:e8:49:6d:5e:e6:13:58:6d:80:20:d2:7b:4e:79:04:00:
c8:bb:a1:62:77:63:c4:6f:00:18:0b:6b:d7:4b:07:48:fa:31:
91:86:43:c6:73:e9:c6:7f:df:f4:56:b2:4e:0a:2d:a9:de:85:
77:d4:f1:2c:86:ba:b4:8f:8e:b7:15:af:dd:3d:2c:3b:4d:13:
c9:da:f2:53:a7:21:ea:2c:28:18:85:60:4c:8e:96:70:94:bf:
a7:cd:29:76:89:5f:a5:ce:86:4b:56:d0:9a:f4:2f:97:5b:ed:
d7:1d:e1:ee:98:1a:f0:6d:c3:32:5a:8b:7d:e3:27:97:21:ce:
b3:17:56:4f:a0:ea:ef:43:05:0b:a1:9b:5e:7b:52:1b:5b:81:
48:52:ec:24:b5:5d:00:09:13:f0:b0:61:d7:fc:d0:64:9e:13:
69:e7:4a:f1:c3:4f:10:5c:91:5b:69:12:cf:66:bd:7e:ee:b5:
cf:a3:2d:d2:8f:33:2c:9c:a9:98:b8:67:59:f8:74:4f:35:1f:
4f:32:3c:bc:31:69:80:fc:03:1e:36:d7:49:7f:9f:50:1b:25:
8c:e6:99:6e:ea:5e:9d:fb:c6:69:e6:9b:19:71:10:2b:67:57:
d6:e8:37:71:8d:56:9e:95:5a:1a:99:d6:e6:9e:63:16:53:4f:
a2:ce:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client