Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: hrobMAaQk0gc8pluTOCqDyFVkDUZXD3Xq7nMdY9yFiU=
Subject key identifier: 00:1F:4B:15:26:91:BD:EC:97:75:D4:FD:F6:DB:85:AF:40:CE:70:C0
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 0199FCFD346C1327E85F26DD7CC4F11784E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 02C1
Signing time: Sun 19 Oct 2025 15:01:16 +0000
Manifest this update: Sun 19 Oct 2025 15:01:16 +0000
Manifest next update: Mon 20 Oct 2025 15:01:16 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: 9S4FMbWCbqmKjObkqJPc3ohiLuYJb+TWQcvBQnULl14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:34:6c:13:27:e8:5f:26:dd:7c:c4:f1:17:84:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Oct 19 15:01:16 2025 GMT
Not After : Oct 20 15:01:16 2025 GMT
Subject: CN=001f4b152691bdec9775d4fdf6db85af40ce70c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:69:8d:2e:71:b6:f3:66:25:c6:54:e3:69:0f:
ec:d0:d5:b7:42:bd:4e:0d:0a:cf:29:4d:fd:c2:b5:
f0:82:7b:0e:2d:0d:0b:0b:b4:17:cf:ed:6d:f2:5e:
46:27:23:aa:c5:9a:d3:90:c8:32:f2:d7:2d:38:b3:
d4:c8:8c:50:2c:29:8f:41:3c:04:ea:11:34:23:f2:
f5:32:b0:df:8b:e4:2c:5a:d9:e6:36:1b:59:ec:8f:
4d:a5:ea:c5:63:f6:ff:81:f2:eb:a9:37:88:0e:a8:
a2:f3:46:80:a2:2c:62:02:11:55:e4:3e:ca:82:03:
f6:69:08:ae:50:35:27:4e:6f:cf:d6:00:25:bc:ad:
f3:4d:69:72:df:61:87:67:ea:99:a0:48:2c:87:06:
c8:94:15:b2:1a:35:fc:c2:6b:7b:47:40:3f:33:2f:
b1:41:85:ad:7f:88:80:c8:f1:5d:db:d5:96:9a:36:
bf:1c:fc:21:6a:63:03:e4:2d:d5:17:cc:03:c8:01:
7f:13:a3:41:12:8a:31:79:cd:56:dc:bd:54:df:52:
cd:4c:ce:03:da:12:6d:10:6a:87:fb:f3:bb:d8:da:
11:94:ab:bc:99:cb:1c:1e:4e:04:8c:3c:fc:fd:68:
0d:a0:08:f4:37:eb:b5:0c:8f:67:9c:e1:3a:38:c4:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1F:4B:15:26:91:BD:EC:97:75:D4:FD:F6:DB:85:AF:40:CE:70:C0
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:51:01:46:96:b5:95:75:79:8f:d6:68:85:f7:e3:cc:f3:a1:
5b:17:c2:95:7f:6f:ae:ea:e3:09:54:bb:54:8c:98:74:02:24:
a9:65:45:b4:f2:48:b0:2c:f5:97:56:22:d7:08:68:85:5f:bd:
9a:ff:7f:ae:a4:98:d5:bf:2b:d8:a8:af:a6:1f:33:18:e1:50:
c9:59:ac:84:6d:7c:73:14:1c:a4:96:87:af:9e:bc:1f:37:c0:
44:d0:e7:89:ea:8d:c9:c0:bc:18:21:6c:14:ba:b1:56:6f:f4:
17:3f:c3:13:69:0a:32:0a:eb:36:9e:a5:75:7d:9d:85:d0:a6:
85:75:cc:fb:ac:05:5c:22:15:f0:8d:1a:e1:dc:aa:25:86:01:
be:97:77:01:c5:d0:84:71:d8:4d:27:67:64:84:39:1e:cd:25:
e2:ee:53:18:e7:8a:d7:bd:3a:ac:4c:f1:7e:1e:c9:4b:86:99:
72:84:31:de:28:47:20:38:33:b2:b5:69:4c:79:de:24:bb:7a:
e5:81:a7:6e:3f:4a:49:ad:fe:86:fc:72:16:11:9b:f8:19:22:
cc:1a:97:7c:48:5d:23:50:b5:60:7f:f4:bf:a9:44:88:c3:ed:
5f:ee:4e:7f:92:00:68:b5:a1:1c:08:fa:47:89:6b:2d:b4:38:
9c:26:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:52:23 2025 by rpki-client