Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
File: SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft (raw, json)
Hash identifier: T+FQ4g5Ghkx90fFuDoRBoKrwM+vJ9MtmaL9+SYpjw2M=
Subject key identifier: 74:36:BF:6A:ED:6C:09:84:6B:68:84:A6:CE:89:82:14:0E:C6:B4:BF
Authority key identifier: 4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
Certificate issuer: /CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Certificate serial: 0199221EE101CEE2D1501687E1710D196F97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
Manifest number: 0EF9
Signing time: Sun 07 Sep 2025 03:01:12 +0000
Manifest this update: Sun 07 Sep 2025 03:01:12 +0000
Manifest next update: Mon 08 Sep 2025 03:01:12 +0000
Files and hashes: 1: SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl (hash: pjGXRINuphLxF2kseLW/VJwYfG4Go18PYQgfl7+qYMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:e1:01:ce:e2:d1:50:16:87:e1:71:0d:19:6f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b381baa0a0add32a9f9414f9b2c9a5a3225342e
Validity
Not Before: Sep 7 03:01:12 2025 GMT
Not After : Sep 8 03:01:12 2025 GMT
Subject: CN=7436bf6aed6c09846b6884a6ce8982140ec6b4bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:79:2a:c6:f6:54:95:e1:8a:26:f6:87:88:
d9:7c:49:54:3b:2a:ca:ef:97:2e:f6:5b:ca:73:7a:
2a:77:57:21:4c:3e:cf:d2:ac:41:68:55:7c:a9:66:
5d:3a:00:4e:95:a9:a4:d2:7d:13:07:3d:74:50:0d:
86:35:4b:64:44:3e:f6:44:31:ee:06:5c:bd:a5:12:
00:49:9d:7e:01:5b:6d:22:66:2a:68:f6:3a:f5:16:
3a:2d:2f:be:38:e0:38:68:45:6a:57:b9:af:7f:2c:
18:a1:12:a6:1d:4f:42:1c:a6:87:04:81:58:2e:b6:
c2:68:f0:bd:03:24:23:46:86:21:15:ea:f5:e4:d6:
b4:86:15:80:3d:52:7f:8f:81:ec:43:8c:90:5b:b9:
0e:d4:37:1c:53:1e:4a:b1:90:21:28:7e:00:ce:d2:
84:05:04:b3:49:6f:67:ef:42:27:20:cc:49:bf:67:
26:65:0e:95:fe:ec:c6:85:28:2c:3f:7e:47:e9:18:
c7:af:de:ab:f5:58:52:86:db:a2:d7:41:6f:0b:66:
f6:ca:c0:ec:ce:5d:dd:28:a7:1b:14:46:be:54:96:
6e:11:39:da:79:3d:73:1d:7a:19:e6:2a:4a:f7:ac:
cc:56:9b:35:37:29:b5:fa:33:52:e6:55:b4:7b:94:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:36:BF:6A:ED:6C:09:84:6B:68:84:A6:CE:89:82:14:0E:C6:B4:BF
X509v3 Authority Key Identifier:
keyid:4B:38:1B:AA:0A:0A:DD:32:A9:F9:41:4F:9B:2C:9A:5A:32:25:34:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzgbqgoK3TKp-UFPmyyaWjIlNC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f16c15-de76-433d-b97f-62f9f446ad01/1/SzgbqgoK3TKp-UFPmyyaWjIlNC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:86:4c:6c:74:b7:03:df:9d:57:fc:9a:c8:b2:c0:f7:d7:
f8:df:f2:08:e8:c9:4b:cc:29:bf:b5:0b:d5:70:35:41:00:8f:
3d:41:fe:3a:f6:d8:45:1a:d2:77:e7:1d:87:7a:c9:e9:3e:02:
cb:ca:ac:fd:d1:74:54:3a:10:ac:d8:a0:3a:39:28:0e:b6:2d:
2e:c9:6c:29:d2:45:7e:60:ba:27:12:0d:50:0d:b1:10:46:bb:
8b:8a:6a:31:b4:05:05:78:c1:c7:d1:96:c9:cd:f1:eb:b9:4b:
58:20:6a:3c:f0:58:ac:57:b8:e7:0e:02:4d:d8:2b:7c:54:06:
d6:94:8a:31:ea:c7:5e:52:f6:c8:1d:ba:1f:20:b9:75:62:46:
f3:73:e6:2b:f4:4e:20:3d:aa:1f:c5:21:1c:d7:d8:7b:55:d7:
b3:4c:a1:df:ce:45:1c:0c:a0:18:09:61:62:2c:9e:5c:c1:93:
e9:ea:e3:88:bb:8e:00:34:43:15:4b:2d:ab:3a:8c:30:9d:92:
d6:c1:f2:70:d4:6d:53:a1:dd:04:e0:89:a6:20:9b:1c:51:b2:
ba:d0:f6:ad:21:fa:59:ab:77:60:59:2f:9b:4a:bd:9c:41:0d:
18:ec:5a:26:52:84:5b:ce:b0:df:f4:be:da:7a:0f:71:85:8a:
53:05:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:07:31 2025 by rpki-client