Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: 64e/8L+6PoKuIfPD0cKPBJuksqCP9JXZPfavtBm2edQ=
Subject key identifier: E8:10:6C:71:E7:C9:6C:9B:1F:5B:CE:77:1F:8A:1F:82:1A:EE:83:C9
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 0197B7453C59DF56B0203D68AD23C21989D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 1543
Signing time: Sat 28 Jun 2025 16:00:57 +0000
Manifest this update: Sat 28 Jun 2025 16:00:57 +0000
Manifest next update: Sun 29 Jun 2025 16:00:57 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: 8f0r3/QIu7yLK8HOrwXh9r5YyQCEPjAMqg/uWqnBvio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:3c:59:df:56:b0:20:3d:68:ad:23:c2:19:89:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Jun 28 16:00:57 2025 GMT
Not After : Jun 29 16:00:57 2025 GMT
Subject: CN=e8106c71e7c96c9b1f5bce771f8a1f821aee83c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:17:50:e5:8c:b5:9a:7b:f5:dd:12:0a:86:
4d:fb:6e:e3:d7:e2:33:e1:bd:ec:bf:e1:f0:de:d2:
99:47:f7:c8:67:ef:bd:89:2e:6d:c1:4e:91:03:69:
2f:fb:d7:ea:57:2b:b5:d5:9f:28:6f:b7:8d:b7:d6:
bb:21:a3:26:56:d2:03:f7:54:d6:33:20:05:2d:07:
1b:11:bb:ef:70:56:60:23:25:85:eb:3e:8a:cf:41:
3d:a3:d9:ef:9e:76:ae:60:b9:9c:8d:25:89:a8:f3:
7e:f2:83:37:04:23:cf:06:a8:ee:bf:51:41:f3:10:
33:fa:29:d3:bf:64:c0:27:e7:3b:72:9a:d9:a8:8f:
d5:23:e8:15:3b:a3:0c:f0:6e:5c:c7:f6:39:22:9e:
15:82:df:bc:75:61:12:e9:69:01:fa:2c:11:9d:97:
f6:d4:8d:39:ad:34:b0:0b:f9:0d:d1:e4:c3:16:2f:
17:ba:33:a6:e2:4d:cc:e9:98:3a:51:b5:ad:fa:81:
f0:cb:f5:60:d7:4f:ab:e4:ae:36:22:9d:32:f4:5d:
59:cf:1d:56:be:05:99:39:b1:5a:1a:98:24:3f:0f:
7e:18:47:c9:3c:73:f5:e6:86:ae:0b:bb:19:bf:bd:
54:29:f2:99:97:75:74:97:72:5c:88:69:2a:8b:0b:
b9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:6C:71:E7:C9:6C:9B:1F:5B:CE:77:1F:8A:1F:82:1A:EE:83:C9
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a6:a6:1d:d6:c0:17:ec:c1:e3:ff:83:ac:27:1e:e2:aa:06:
08:06:67:36:32:cc:9f:47:4a:74:55:c8:66:75:12:a9:ef:51:
3f:d6:74:55:14:05:e5:6f:e0:6a:ae:44:50:d7:8f:d8:36:0e:
fb:03:96:45:54:74:9e:83:22:ad:97:84:0d:c9:85:4e:06:92:
45:80:f5:d4:eb:96:0d:a2:b2:0d:df:fb:7a:89:4e:6d:15:ab:
c1:88:17:e5:63:b0:7d:14:d7:9c:01:ef:3f:04:74:ce:19:72:
ac:aa:1c:2d:56:12:97:68:4f:8b:27:5d:72:17:1a:04:cd:71:
51:4d:bb:53:4e:df:f2:e5:b0:f1:8d:3b:2a:c0:c5:20:f4:cb:
6a:ab:92:b4:3f:4f:ec:56:66:46:da:a1:17:bb:e5:76:63:7a:
3a:3c:8a:dc:9e:3d:2d:61:c8:4e:25:07:7c:f8:15:cf:5c:bb:
df:12:ed:04:4e:31:2e:1a:0c:7d:5d:83:a6:79:93:b0:ad:d5:
e4:03:e2:64:4c:e7:50:f1:f2:38:85:5a:74:b8:62:23:78:ed:
92:00:0d:6d:76:30:97:7c:6c:ca:92:48:c4:cb:7d:ad:b6:5a:
e8:7b:97:03:64:1b:d0:5a:b0:50:4f:2d:ef:81:ed:e1:e2:fc:
9b:b3:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:28 2025 by rpki-client