Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
File: SZ9dK32_UkSbASU7D4J_QBqKfIE.mft (raw, json)
Hash identifier: brA8k/yv2HcHqdD759jGp8lxIbtNWZCWdKoxZ0zJw5Y=
Subject key identifier: 75:FA:E1:73:A3:97:A2:60:48:BE:25:F6:C0:DA:F3:CF:08:E1:2E:04
Authority key identifier: 49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
Certificate issuer: /CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Certificate serial: 01974E57410F77AE26FAEEB0FEAD18FBB1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
Manifest number: 08BD
Signing time: Sun 08 Jun 2025 07:00:30 +0000
Manifest this update: Sun 08 Jun 2025 07:00:30 +0000
Manifest next update: Mon 09 Jun 2025 07:00:30 +0000
Files and hashes: 1: SZ9dK32_UkSbASU7D4J_QBqKfIE.crl (hash: PmHOA7vtWhkmWg7iawnXUkXUJYr0iCFHRz7dr+rTqYo=)
2: sTQX2j9_L-RKxKJ-gpSAUcHW26c.roa (hash: SMZ74eYXgCBYRpcaMVOmXChoRcbWwRauRrg3+g+Vya0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:41:0f:77:ae:26:fa:ee:b0:fe:ad:18:fb:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f5d2b7dbf52449b01253b0f827f401a8a7c81
Validity
Not Before: Jun 8 07:00:30 2025 GMT
Not After : Jun 9 07:00:30 2025 GMT
Subject: CN=75fae173a397a26048be25f6c0daf3cf08e12e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:2a:8b:58:63:9a:02:db:3f:2f:18:5a:03:
0b:7a:88:12:0d:4d:31:4f:f9:8e:3c:2e:18:e9:93:
55:34:33:2a:7d:4e:c2:6f:05:31:67:30:d6:2b:7b:
c0:33:53:e6:5d:88:b3:22:7b:8d:63:99:2c:38:f6:
cc:2b:ec:da:04:11:e4:64:fd:46:53:da:33:2d:17:
c6:6d:13:0a:d8:27:66:b9:b9:2b:f8:46:e2:de:0a:
f8:7c:b7:16:c9:cb:4d:f5:60:08:b2:9b:4b:be:05:
b7:ac:19:ab:2a:a5:06:1b:ea:ee:72:1c:49:37:6c:
2c:4a:0f:97:86:ad:e1:b5:ff:c4:2b:e0:f3:46:f1:
b4:e6:0d:1b:f0:8c:5d:8a:aa:49:08:70:5d:8e:5b:
09:c7:55:61:df:87:40:88:09:c1:f1:88:9d:8e:50:
f7:8b:77:38:57:3f:15:bf:f5:ec:8b:f3:10:a7:05:
f0:1e:e5:78:b3:33:c8:66:70:8b:98:2b:7a:32:fa:
e6:83:a8:7c:25:17:1e:3e:a2:58:ff:ae:cb:c9:33:
52:a7:59:f0:4a:9f:46:21:a7:ac:6f:cb:30:30:72:
54:a8:21:07:c2:59:75:2b:9c:43:3c:8d:59:90:c8:
fc:8e:7c:24:a4:0d:f5:e2:75:9c:d5:ae:d0:61:2b:
13:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:E1:73:A3:97:A2:60:48:BE:25:F6:C0:DA:F3:CF:08:E1:2E:04
X509v3 Authority Key Identifier:
keyid:49:9F:5D:2B:7D:BF:52:44:9B:01:25:3B:0F:82:7F:40:1A:8A:7C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ9dK32_UkSbASU7D4J_QBqKfIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/SZ9dK32_UkSbASU7D4J_QBqKfIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:90:41:bc:b7:65:3a:f7:d0:44:70:41:41:e2:5d:fd:e1:91:
2d:ad:99:82:9f:ae:47:85:a6:83:59:93:97:e2:50:ab:14:cc:
bd:9d:53:b0:3f:1c:8f:71:76:cb:79:34:18:b3:68:73:a3:d3:
35:80:5f:9d:9c:f7:b7:7c:3c:42:a1:0e:fa:25:e8:f8:a5:aa:
14:05:8c:8b:83:3b:e5:92:ce:22:04:df:b8:99:cc:b1:4b:5c:
a0:d4:87:c1:8f:89:26:1b:e0:96:26:d6:c0:31:ff:cc:3b:dd:
4a:86:48:d7:75:79:0d:14:d2:37:f2:31:42:d7:1a:10:3d:71:
d8:c6:db:13:07:3f:b4:13:ad:2d:eb:1e:27:38:08:b3:7a:42:
39:9d:fb:96:e0:e2:67:b9:22:8c:df:1e:5c:82:6b:be:8e:70:
20:f7:29:b1:02:70:8f:33:34:3e:f7:b5:56:4b:ba:44:73:a3:
90:48:ba:f0:dc:44:dc:64:95:97:20:b1:04:b9:76:0c:f8:66:
04:be:2a:37:45:5e:10:3d:c8:83:a9:b0:ae:0f:f5:e2:f9:5e:
ca:28:b0:a2:2a:2c:56:5b:c0:d5:40:ec:9c:3d:37:70:f6:95:
f9:cc:23:a5:9e:01:be:3c:8c:9f:52:5d:73:fd:ef:b1:17:cd:
87:1e:b8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:03:17 2025 by rpki-client