Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: ewhnXDg3Fd8WYsrecpg87E69PFTgZUNl6Ok15v5UpbI=
Subject key identifier: CC:64:DA:2C:60:14:D0:56:26:CB:D1:70:A8:79:DB:C3:F8:FC:9C:8B
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 0196C2DDC87AA4F08525D1F1D76F0B057A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: EA
Signing time: Mon 12 May 2025 05:00:36 +0000
Manifest this update: Mon 12 May 2025 05:00:36 +0000
Manifest next update: Tue 13 May 2025 05:00:36 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: 8Vy0dhszEt+8GWCKq5VdNXeJ7TDwwkyMtOMnEbH/JoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:c8:7a:a4:f0:85:25:d1:f1:d7:6f:0b:05:7a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: May 12 05:00:36 2025 GMT
Not After : May 13 05:00:36 2025 GMT
Subject: CN=cc64da2c6014d05626cbd170a879dbc3f8fc9c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d4:a0:db:96:d7:27:d5:fb:44:e2:12:e6:f9:
51:7f:b3:fe:19:79:9f:06:4a:37:ad:a4:ed:74:dd:
74:97:b0:e0:3d:9f:fb:1b:be:70:81:5c:75:1f:d7:
d6:b6:5c:16:27:7b:f6:a3:3d:aa:f2:f4:68:51:c1:
f8:16:ca:84:62:8a:5f:d7:7c:69:00:4a:47:f5:b1:
1d:cb:b5:2d:b6:8c:67:5b:56:cf:98:3c:2a:b5:ad:
02:63:b3:ef:d7:95:5e:fa:b2:9b:bd:4f:e3:5f:45:
82:ee:78:25:93:e6:32:07:07:29:28:bb:0c:a5:42:
3e:f7:7f:fc:76:4e:30:78:eb:6a:ba:db:80:f3:9c:
c0:3e:eb:c9:06:73:85:f1:1a:6a:d3:a9:8b:a5:87:
85:79:21:d1:86:9e:07:e4:cd:c9:fa:6c:d0:35:8e:
71:8a:30:06:69:72:b4:78:71:65:53:b7:63:e3:1f:
b5:38:46:df:1c:cf:1d:e1:57:1e:75:2d:87:3b:21:
cb:09:90:02:b2:7d:83:5a:6a:09:27:f5:0d:b8:70:
8e:3f:3f:ad:2f:2d:b3:0b:45:1a:a2:b0:18:06:d3:
65:18:fd:56:5e:e2:49:58:d8:57:99:87:5a:cd:16:
d8:ef:91:0c:c6:a9:93:5e:98:6c:3a:d6:45:44:c4:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:DA:2C:60:14:D0:56:26:CB:D1:70:A8:79:DB:C3:F8:FC:9C:8B
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f7:60:d9:07:df:20:6d:57:be:9b:ee:01:1f:14:92:20:15:
47:74:96:1b:28:4e:66:fd:3e:63:32:32:8d:8d:57:7f:a9:e1:
e5:63:f3:8a:e3:b3:6e:45:d2:bf:b9:ab:e9:bc:66:4d:8c:6a:
29:df:bc:bc:70:4f:eb:d0:e1:fb:50:b4:ac:cc:42:52:12:10:
a5:f9:f6:a6:d5:2b:95:a8:11:6f:b0:00:af:98:f1:60:b0:e7:
bf:d4:54:18:44:44:af:1f:2b:2c:a6:9f:e2:29:97:eb:64:4c:
2e:4e:ad:ea:82:05:2d:21:41:3c:7b:31:59:e7:90:51:50:3f:
72:e1:19:a6:87:51:32:f0:8f:92:20:5b:95:f0:46:1a:70:e9:
57:da:c5:73:7a:a2:63:d9:0c:ec:a7:3b:f5:a1:a9:b9:38:ce:
01:74:9b:f9:86:6c:3a:eb:93:4d:7b:00:c2:24:62:19:e5:58:
ee:42:bb:16:7b:80:84:48:39:03:fa:e8:da:74:83:30:d5:ed:
7b:43:4b:af:f9:e9:f0:7c:16:b8:39:7d:64:76:82:9f:25:f7:
94:ff:78:db:1e:93:95:71:28:4c:39:ce:34:d9:6a:99:fd:0d:
61:54:6a:d3:92:54:15:8c:0a:ca:92:ed:09:84:8c:1e:da:b9:
1a:3d:1a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:57:36 2025 by rpki-client