Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: PP4EQ+eMZ76qXNIO6khVtMWDrumgWYvmwHo2nAOZqek=
Subject key identifier: DB:6A:CB:20:BD:D3:50:68:93:0A:4D:0D:B8:35:42:A2:4E:9B:08:AD
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 0198D515DC557265A3784387CB6111687B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 04:00:36 +0000
Manifest this update: Sat 23 Aug 2025 04:00:36 +0000
Manifest next update: Sun 24 Aug 2025 04:00:36 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: Ol0LzF56hucp+RqQFXrLsAaOoXxKQwNqGYTDsngoUq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:dc:55:72:65:a3:78:43:87:cb:61:11:68:7b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Aug 23 04:00:36 2025 GMT
Not After : Aug 24 04:00:36 2025 GMT
Subject: CN=db6acb20bdd35068930a4d0db83542a24e9b08ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:da:33:41:a0:4e:5f:eb:29:1b:0f:bb:ae:
ea:19:1d:68:02:29:77:4c:59:e4:6b:e3:7e:4c:de:
0c:05:93:1c:4e:5e:8c:ea:cc:72:dc:16:32:96:ef:
71:e5:2c:d1:e5:18:93:98:23:bd:97:8f:52:8f:67:
26:06:8a:c2:45:0f:4d:ce:a1:7c:2f:4c:39:cc:86:
c2:49:37:a6:d1:1d:e9:67:c8:91:89:14:5a:80:48:
60:24:03:0d:e8:e5:1f:3b:7b:09:69:77:9a:c7:79:
43:c7:d2:55:a2:3d:60:a2:73:98:b2:b5:76:74:c6:
7a:49:af:36:c5:b8:8f:70:85:c0:9d:b5:a7:da:ac:
0f:a8:23:34:20:4c:62:fa:a4:c4:8b:f0:69:51:07:
74:e9:dc:49:15:6f:72:df:3b:93:bf:fb:e5:af:e9:
3c:6f:a4:1a:3c:35:6c:ac:e1:bc:c6:da:18:ea:49:
7e:e2:a0:04:36:c8:8d:e2:4f:f8:2e:e9:a0:4d:ab:
06:52:f3:ba:0a:07:a2:1e:dc:1f:17:78:18:ba:20:
dc:1d:ff:f2:3d:43:bd:1f:e6:3a:2d:2a:90:2b:bd:
5c:cf:8b:f9:d9:9d:fb:64:e1:ad:93:88:e8:fc:aa:
f5:c2:69:3d:06:42:c0:57:36:79:09:4e:f8:68:d8:
3c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:CB:20:BD:D3:50:68:93:0A:4D:0D:B8:35:42:A2:4E:9B:08:AD
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2d:23:ec:93:ba:5a:33:76:d2:28:51:e0:6a:95:27:5d:41:
d7:b0:a0:34:03:6b:52:e9:34:79:f1:53:2e:5a:dd:fb:66:04:
f2:6d:cb:45:8a:bb:f9:ca:4a:46:52:04:fe:24:0c:d6:42:8f:
4d:ae:60:34:df:da:85:8e:b5:93:e2:5e:aa:4b:41:1b:64:23:
62:4f:ba:a4:3d:d9:4f:17:b7:29:f6:7d:10:77:e9:7a:4f:d7:
5a:11:a9:dd:56:44:5d:0e:4b:92:50:5f:8e:2d:f2:d1:85:a9:
a5:ac:2e:a6:14:d4:20:2f:06:76:05:fb:bd:5b:77:8b:8d:f0:
49:b0:67:7f:b7:81:19:bb:a1:98:6e:95:25:09:1a:94:d8:24:
6b:d5:c2:0c:a4:29:fa:7b:ed:22:d6:63:46:0f:fb:31:87:33:
fb:ea:cd:ec:b4:72:2a:fc:af:db:a1:0a:1c:55:03:26:1a:32:
fb:f6:82:9b:1f:dd:53:87:5f:30:15:d3:28:5b:79:02:12:c4:
cf:7b:81:2e:38:aa:49:74:9b:0b:28:7c:e2:c4:64:a9:f3:21:
3c:77:af:89:ec:de:ed:25:ce:50:56:a1:ee:31:14:6f:02:69:
19:31:55:b1:75:09:e5:48:cc:cb:20:80:9b:a7:01:ba:b7:a1:
a1:4e:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:24 2025 by rpki-client