Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: xA/583uF3HaW5YOQeAlEDquIapbsKmU0YPta5bQTtSE=
Subject key identifier: 18:84:42:AC:83:98:2A:FE:3C:BD:BC:24:50:37:2A:D3:D1:96:B8:F6
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 0198D583861D6DA88C55E1A0D3C44108A100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 0228
Signing time: Sat 23 Aug 2025 06:00:23 +0000
Manifest this update: Sat 23 Aug 2025 06:00:23 +0000
Manifest next update: Sun 24 Aug 2025 06:00:23 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: 0NYTBr5q77T1xvAncjEU2+hUAo7qTGlzix2BVx7Ij5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:86:1d:6d:a8:8c:55:e1:a0:d3:c4:41:08:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Aug 23 06:00:23 2025 GMT
Not After : Aug 24 06:00:23 2025 GMT
Subject: CN=188442ac83982afe3cbdbc2450372ad3d196b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2f:33:23:1b:28:05:a4:1d:9f:2c:15:1c:30:
00:99:d2:25:94:ab:0b:be:a5:49:72:b1:38:6f:44:
8d:8d:80:a4:9f:81:3e:2b:80:60:8c:9c:56:a5:d3:
c8:90:b3:ea:0b:06:8c:95:d3:c5:bd:95:04:ab:c8:
b1:a8:57:e4:0f:6a:d1:ad:07:ca:2c:f1:42:85:00:
b4:1e:a3:54:c3:80:77:be:8f:c9:4f:a8:26:32:d6:
e4:58:79:95:27:d3:8a:2c:b4:da:0e:7e:84:35:c8:
d9:3a:12:93:fa:31:b9:4f:94:db:34:d0:b1:0c:a4:
48:47:af:29:c4:a1:c4:f6:63:3b:47:20:ac:e2:de:
8b:e7:42:8b:b6:d8:f6:30:d6:c7:62:87:ee:7d:f5:
44:4e:37:4c:8c:b5:60:b1:7b:85:a8:a7:22:a2:98:
ec:dd:92:03:f7:a5:37:54:2f:93:6a:02:21:46:22:
05:97:93:b4:1b:e8:e0:47:57:25:ae:7b:25:41:7d:
a3:39:31:b5:9d:93:b9:15:05:bb:66:39:ff:d2:e7:
e5:ff:14:7c:f6:45:4e:b7:9e:93:44:d0:62:82:a0:
08:e5:a5:68:66:fe:a8:d6:1b:2c:4c:27:4d:96:52:
d9:78:58:d4:e3:7c:71:b2:e1:6a:41:9a:0d:4c:11:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:84:42:AC:83:98:2A:FE:3C:BD:BC:24:50:37:2A:D3:D1:96:B8:F6
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:87:5f:df:50:35:3f:4b:b6:f7:12:a5:a4:e2:17:b2:46:75:
bb:8f:54:b0:93:25:a3:37:b0:1a:d3:f3:e2:57:ff:fe:cb:6d:
c4:06:4b:b3:8f:9b:9d:af:18:0d:d5:58:c3:34:0e:6b:bb:2d:
f1:10:a2:b3:bd:51:e6:02:83:78:fa:7a:44:2e:e6:4f:5e:55:
ed:7a:69:0f:4c:49:9e:5a:13:77:02:68:19:9e:9b:b4:da:b8:
a4:c8:18:d4:2f:c1:cc:1b:d3:05:77:9e:e5:78:70:d9:09:6b:
a4:25:05:55:1b:21:62:bf:c1:41:5d:bd:10:6f:2c:a5:73:c2:
af:22:57:70:1c:84:88:65:49:54:db:60:cf:75:4c:de:67:8d:
aa:b5:6a:87:97:7c:e6:f9:73:f7:4a:d5:cc:1c:c1:0a:d6:2d:
07:30:35:66:8c:d9:b4:31:be:f5:c9:3d:0a:fb:2a:39:da:40:
c0:aa:10:78:91:22:ac:7c:c7:1c:2f:e4:a5:8e:3b:a2:53:f4:
97:f2:0e:cd:7b:6b:60:10:fb:9f:cf:92:69:26:f3:b1:f6:68:
1e:94:b4:9c:12:d1:3c:ed:5e:ec:f3:6d:fd:9f:2f:97:3f:65:
e3:19:12:46:be:1e:66:10:21:5f:e7:38:00:d5:61:e3:fc:94:
0e:52:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:05 2025 by rpki-client