Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: Y4S24uhIgHvzjydclX32fVnYyvLMRhI94ZiVLkmmX7c=
Subject key identifier: D8:FC:F6:0A:18:B3:68:4E:10:DE:B4:CC:72:BD:0B:08:AC:79:0F:64
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 0197BA7D96F1AAE88E54A380F5DC9F1F251F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 0511
Signing time: Sun 29 Jun 2025 07:01:21 +0000
Manifest this update: Sun 29 Jun 2025 07:01:21 +0000
Manifest next update: Mon 30 Jun 2025 07:01:21 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: BejMCvvhl7TdEK10dyPnf3FpqS7j2N6hjd81iE3djRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:96:f1:aa:e8:8e:54:a3:80:f5:dc:9f:1f:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Jun 29 07:01:21 2025 GMT
Not After : Jun 30 07:01:21 2025 GMT
Subject: CN=d8fcf60a18b3684e10deb4cc72bd0b08ac790f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:33:a8:57:5f:e2:85:ad:9e:68:3e:8c:f2:
f8:06:82:1e:32:df:e1:54:89:f4:d9:66:cc:69:b7:
90:e4:9e:e7:f7:1b:cd:31:e5:29:d8:e4:9b:13:b7:
6e:01:13:4f:17:4a:79:1a:fe:f4:f2:cf:9c:4b:6d:
b8:1a:a0:56:88:72:05:87:45:70:59:f2:4b:a9:2a:
03:fe:2b:b3:32:63:3d:20:13:59:93:f6:bf:10:cc:
b0:1d:98:f8:b2:78:9d:85:28:ae:eb:26:14:bf:5f:
28:fe:21:d1:87:02:59:0b:09:76:a1:2a:e2:7f:15:
20:24:2f:32:66:a8:8e:2a:b3:2b:90:53:32:ba:b3:
ca:d7:9b:81:28:79:22:44:1b:cb:85:c5:9f:ad:3a:
24:fe:2b:f1:68:60:00:e1:2e:0d:d1:36:4c:e1:00:
da:39:57:3f:15:06:bf:e9:72:4d:ab:07:5b:09:44:
b5:ad:16:58:4c:6b:c7:5b:fc:92:1a:e9:d7:0a:29:
2d:d1:40:8f:6f:0b:72:b5:ee:b6:c0:31:bf:1f:26:
88:d5:c9:9c:d3:fc:60:8e:86:e8:55:e5:29:aa:7a:
34:e2:44:5d:71:4a:22:84:55:ac:ee:55:80:e4:9d:
a7:84:19:40:20:cb:11:1a:02:e1:31:c1:4e:fd:3d:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FC:F6:0A:18:B3:68:4E:10:DE:B4:CC:72:BD:0B:08:AC:79:0F:64
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:04:d0:e8:6b:95:c9:9a:16:bf:57:44:45:c5:ed:16:76:e6:
39:fe:65:bf:04:1f:b3:10:2f:cb:13:8c:35:59:3d:9c:ca:44:
39:d0:a3:37:e7:0b:39:49:00:02:f0:66:c5:a2:8e:62:5a:d6:
a1:2c:66:4b:45:c0:9a:76:31:05:81:eb:24:53:2a:fe:47:06:
07:b9:aa:c8:f0:60:b1:b5:6b:fa:11:91:00:0a:e7:3b:51:cc:
ed:81:56:cc:c7:ce:48:25:ca:a3:60:e2:10:7c:66:bd:c9:e7:
cc:30:48:bd:d7:9f:1b:d2:79:03:37:f0:06:6a:73:e4:de:69:
f9:64:74:34:e6:24:b1:eb:af:02:d4:65:34:0c:1c:29:44:7c:
9b:91:76:00:24:a1:cf:44:43:e3:79:62:79:49:e0:8e:5e:8b:
b9:99:56:ba:fd:90:bd:8b:fd:78:43:a4:24:fb:0f:85:de:bf:
5d:1f:97:a2:a5:bc:dd:4b:36:9d:ab:ec:96:20:6a:fb:8f:da:
38:72:c8:a1:b5:a2:7d:5f:5e:74:2c:fa:1d:98:1d:c1:31:f3:
9e:0b:fc:bd:10:d3:71:60:9c:d4:9d:cd:b4:ba:59:8d:b5:26:
11:04:2c:9e:29:fa:01:d2:ec:a8:4b:0c:f9:12:b3:fa:e7:4a:
f3:5c:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:54:39 2025 by rpki-client