Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: 5AQXAniUChaf1iomyLAtj3jhYMU/CoUUFyVgxBD5EpE=
Subject key identifier: E4:57:20:CA:64:B4:9F:E1:58:D3:C1:8A:49:F3:7C:79:E4:13:0B:A9
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 0197B70E6AA0C8FD0C8BBA623D7B3E4E2108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=)
2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: igg6OuqQKb0queSnDbH+Qp4h/7Xm9K4lzt4+EB7ecN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:6a:a0:c8:fd:0c:8b:ba:62:3d:7b:3e:4e:21:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=e45720ca64b49fe158d3c18a49f37c79e4130ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:99:c1:32:98:1a:57:66:48:f7:99:37:c1:
5a:85:2f:57:97:e3:29:0a:c2:ee:97:2e:0c:5c:1c:
42:a9:29:39:2a:87:57:c6:1f:69:aa:7c:4e:5b:52:
cd:a3:d6:6f:f6:8f:03:a8:83:22:d9:5b:e0:ef:02:
4d:88:3a:f9:ea:f7:89:07:0f:b5:b1:73:41:96:3b:
0d:55:80:0c:1d:c6:6a:0e:87:ae:d8:50:14:3c:ed:
03:7c:7f:1d:d3:cc:85:7e:11:26:35:77:f7:45:cc:
f7:f1:18:8f:12:9d:fb:2a:80:1f:93:73:16:66:e1:
24:1c:3c:05:5a:7d:cc:2d:12:40:5a:f1:21:e4:e8:
d4:99:d6:07:0b:c9:27:30:76:62:47:5c:9e:68:7c:
20:06:34:5c:72:2e:f6:d8:19:19:e7:e1:4d:e1:ca:
f2:ff:a1:14:2c:3e:ec:ae:d1:50:1b:d5:c7:48:cf:
64:79:9b:2c:59:17:e2:d1:b2:c4:89:de:b5:f3:c2:
56:88:0f:ff:26:35:ec:53:95:af:9f:ea:c3:73:eb:
97:96:64:d5:7f:be:07:93:db:fc:57:dd:a5:2a:00:
dc:75:d0:50:3b:97:11:65:10:c3:a3:2d:5e:9e:61:
32:7c:2b:aa:0c:a2:c9:a6:12:24:3c:b2:00:1a:83:
da:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:20:CA:64:B4:9F:E1:58:D3:C1:8A:49:F3:7C:79:E4:13:0B:A9
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:cf:9f:ca:68:5a:5c:cf:74:6f:67:0d:6f:33:05:61:51:
cb:6a:18:0a:51:88:28:e9:d4:ee:90:7d:8b:b1:42:aa:94:d7:
b9:ca:8d:a0:09:74:25:50:28:59:5e:f3:10:ed:73:d0:0c:da:
30:26:7f:80:7a:da:ad:db:7b:96:c8:2b:85:d1:36:94:dd:00:
01:86:d5:de:cc:aa:ff:bb:41:a5:0a:b3:b5:c3:7c:95:29:fc:
d8:a4:29:54:7e:fb:98:c9:a7:97:1c:69:73:52:9a:d6:a4:0b:
01:4b:b4:e9:90:02:7f:20:b3:17:3e:4f:43:26:5d:e7:17:c0:
e2:50:db:56:29:56:a4:82:9f:9c:6e:47:d6:7e:90:73:61:95:
94:60:a7:e2:04:2e:14:e7:dd:44:bf:5a:22:b6:f3:e4:c9:25:
43:39:89:23:ae:15:76:ba:c0:35:52:7a:6d:72:6b:3c:9e:a5:
cb:14:71:25:63:90:bc:34:da:cd:90:24:d1:cd:cb:1c:83:0c:
99:bc:7b:66:06:7b:4f:3e:66:8d:18:82:32:68:76:a8:db:01:
12:6d:1b:9e:a5:d9:bd:3c:39:bf:0b:b4:a1:8c:e6:e6:a7:66:
5d:e2:8b:a8:44:43:5e:73:be:13:e4:12:72:54:d3:66:6a:bf:
8c:a4:30:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:32 2025 by rpki-client