Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: bsFoMS936bVPI6xHwYieAS54Y//AZWH63rb6wktQhZs=
Subject key identifier: 68:33:10:83:58:79:B1:F7:FA:D6:A1:D6:92:A3:E7:43:91:0A:B6:C6
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 0198D66011DD9A136F4A3C678FBDE0B12017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 05A4
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: 6uMb+5ug3VlsGohG6amjxUbb633nasSq64da2HXxlic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:11:dd:9a:13:6f:4a:3c:67:8f:bd:e0:b1:20:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=683310835879b1f7fad6a1d692a3e743910ab6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:31:fe:64:f0:c1:71:19:32:be:0a:74:ac:
aa:37:64:23:37:2b:85:44:fd:6f:7b:ab:19:d9:09:
42:63:40:24:f0:ed:e3:73:17:6a:93:69:c5:19:05:
86:4a:66:e0:fa:1c:e1:fe:14:4b:90:ff:40:2d:22:
30:53:4f:33:b6:0f:90:1b:e7:d1:e0:56:c8:46:55:
1f:b3:38:3e:e5:3e:2a:77:96:99:32:3b:83:48:8b:
6a:65:67:1b:d1:57:de:50:e6:6f:d7:d3:aa:cf:4f:
1b:cb:52:1a:02:e9:0e:2b:4a:61:a6:d2:b4:fa:53:
7d:6c:f4:8a:d7:30:a9:c6:af:f5:be:7d:dd:10:e2:
8e:35:14:37:07:b3:6e:f5:d6:e8:75:df:18:34:6b:
b2:f5:ad:4d:b7:37:be:df:33:7b:62:99:d8:ef:db:
eb:33:15:6c:69:9a:3a:d1:17:39:f6:f8:51:a0:71:
86:b5:33:b4:8d:f3:16:d8:be:c9:c2:e7:b5:a7:09:
14:0c:84:90:ec:33:40:eb:ae:7a:f3:00:6a:dc:ea:
7a:50:17:e4:8b:bf:75:93:3d:39:f1:be:e8:94:63:
f9:35:81:80:a9:0f:e3:3d:e7:7a:2e:d3:5f:68:41:
d4:e1:d9:8d:f8:50:a0:66:1c:3b:77:96:24:88:6a:
8b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:33:10:83:58:79:B1:F7:FA:D6:A1:D6:92:A3:E7:43:91:0A:B6:C6
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7d:4c:d1:c5:23:22:69:2f:73:1e:f2:79:b3:2f:d8:bd:c1:
10:41:9e:84:99:00:be:24:4a:8b:03:d4:24:ec:fa:c4:60:f3:
55:c7:a1:38:b5:97:3f:e8:0c:44:86:68:91:8b:8a:0f:22:7c:
47:68:9c:c4:89:bf:a8:40:b2:ca:a2:6a:d0:71:39:2a:d5:5e:
da:41:8c:59:48:ab:5b:98:ed:c1:52:81:cb:70:73:a2:26:38:
ab:e2:f0:22:ac:a7:e1:42:ec:b5:6f:93:5a:6a:32:02:d6:9b:
c4:4c:86:ef:b8:7f:4a:06:09:ce:6c:87:98:f9:01:80:1e:0b:
94:18:4d:21:d1:31:72:e9:fa:a3:f4:38:0d:01:38:e4:5e:ab:
e3:26:45:ff:cd:5c:32:0b:86:f5:e8:ac:5e:c6:e2:7c:88:ab:
26:ae:e9:64:e5:0f:33:dd:bd:8e:19:33:17:b6:96:77:ed:62:
5c:21:63:49:9e:51:d3:78:eb:2a:e5:d6:9a:cd:a4:53:ee:7b:
34:81:64:75:ea:94:c7:e0:ec:97:95:3c:87:c7:de:44:99:57:
5e:39:ff:b5:55:3b:90:a9:52:4e:04:80:e5:97:9c:8c:40:05:
b4:d5:54:32:9f:d1:af:06:bc:ed:f0:0e:14:cd:55:aa:91:b5:
4b:73:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:22 2025 by rpki-client