Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
File: EzSVRauL_SZSc-jUhDuYvwtBSPI.mft (raw, json)
Hash identifier: QQMoHMYolDIXUchV2PYorzdbxmz7UQUWXf1E109ffsY=
Subject key identifier: CA:29:85:55:4F:CD:DF:FD:C0:19:F3:56:A1:E5:6A:7E:50:AA:70:DA
Authority key identifier: 13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
Certificate issuer: /CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Certificate serial: 01992F6C3F7CC4AFE59B64E39A4E50A6DF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
Manifest number: 1679
Signing time: Tue 09 Sep 2025 17:00:47 +0000
Manifest this update: Tue 09 Sep 2025 17:00:47 +0000
Manifest next update: Wed 10 Sep 2025 17:00:47 +0000
Files and hashes: 1: EzSVRauL_SZSc-jUhDuYvwtBSPI.crl (hash: fc3KB7HLwoOO5Nku0Ltyu/pPPfqwK5Xh03T34ck8l0Y=)
2: z4wrQiroOiNSFdcGbPHcbs9V-dU.roa (hash: yP/GR3Nqgj7O85i1wNDr+BiQRFYWk5p1kifG1naqNAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:3f:7c:c4:af:e5:9b:64:e3:9a:4e:50:a6:df:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13349545ab8bfd265273e8d4843b98bf0b4148f2
Validity
Not Before: Sep 9 17:00:47 2025 GMT
Not After : Sep 10 17:00:47 2025 GMT
Subject: CN=ca2985554fcddffdc019f356a1e56a7e50aa70da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:45:7a:9c:c5:9d:c8:68:d3:88:39:51:62:
c5:c2:ec:3a:1b:e3:8f:73:9a:9e:74:7a:bc:67:7f:
97:12:4c:c7:ff:3e:00:97:77:74:97:59:6b:75:df:
06:2c:94:9e:dc:e5:de:5d:0b:aa:3a:df:7d:21:7d:
f2:d6:21:8a:9c:8f:00:f5:71:f3:42:1d:fa:0b:38:
ca:d9:b6:53:38:c3:63:84:d4:4b:f6:2c:9d:07:3d:
85:43:a5:74:92:b7:6f:42:ba:38:3a:75:97:6a:b8:
fc:2b:5e:dd:d4:26:83:0a:03:e7:f9:29:ae:be:f0:
13:11:fb:5f:5b:04:27:21:e5:7c:aa:52:ae:2e:4d:
8f:03:78:f8:9c:52:c4:5a:88:55:70:c8:63:60:2c:
3d:e6:18:80:12:e1:4b:dd:88:5c:d3:c5:0f:64:a4:
95:03:ee:48:c7:6b:44:a4:1a:b5:08:5e:d6:23:80:
f0:cb:22:9f:25:b0:89:f3:61:27:41:e8:ba:fa:62:
ae:26:7c:a1:99:a6:4a:77:b1:d3:d6:a9:2b:2e:03:
d5:4c:78:52:24:19:82:c3:b9:90:e4:5f:9a:06:3c:
3e:51:9b:de:31:67:71:cb:77:39:ed:d2:cb:38:2f:
99:52:b1:0f:8e:b6:e6:6e:ae:cd:1b:ec:1a:23:31:
da:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:85:55:4F:CD:DF:FD:C0:19:F3:56:A1:E5:6A:7E:50:AA:70:DA
X509v3 Authority Key Identifier:
keyid:13:34:95:45:AB:8B:FD:26:52:73:E8:D4:84:3B:98:BF:0B:41:48:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzSVRauL_SZSc-jUhDuYvwtBSPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/175260-8f9a-4b7f-b011-4c2647a58967/1/EzSVRauL_SZSc-jUhDuYvwtBSPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ff:65:b0:be:2a:b4:63:79:6c:8e:c9:26:bc:ae:74:cb:00:
1c:1b:01:c8:40:3d:5f:ec:58:2b:43:ff:ca:1c:5f:e4:3b:c5:
92:b2:49:93:99:79:72:83:cc:92:d0:4b:aa:6a:8a:8d:ee:a3:
80:e5:90:e7:f3:aa:8e:8e:b8:f0:6f:6d:25:8d:bf:01:0e:99:
de:b1:e9:ef:6a:d9:eb:81:56:a0:bb:12:0f:fe:4d:a6:01:75:
b4:b0:ed:08:84:aa:d1:80:af:96:9d:a9:d4:d7:4c:99:32:b6:
1d:ff:b9:85:9c:42:af:55:1a:9e:8c:c1:3d:a5:a6:bd:e3:03:
0e:cf:54:5e:dc:af:9f:b4:fc:d9:0c:bb:d5:0b:fd:d6:4b:07:
c2:29:0c:c5:e1:87:d1:36:4f:dd:c5:a1:c7:20:29:58:d2:44:
a7:a9:33:89:72:3a:53:d8:83:c0:0b:23:db:a3:88:a2:ca:09:
55:d4:b2:a9:0a:82:7d:e1:12:21:c5:77:55:57:c7:ca:d2:8f:
f4:64:0d:35:2d:bb:fd:24:27:2d:59:93:34:f5:cb:7c:05:78:
c9:ac:24:69:3e:4c:4e:16:fc:a2:15:54:46:4e:d9:ba:f7:dd:
df:53:c4:f6:77:65:3a:8f:6e:75:55:fc:6b:d5:e2:f0:82:bc:
70:e6:2a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 00:18:00 2025 by rpki-client