Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: 1xffgFNdOqDwwcsFezZVU8yaMyxM5VJ/1RAzRX2Xajg=
Subject key identifier: 41:A9:19:08:1A:AB:E8:97:DE:20:E2:F8:52:4A:40:C0:C2:D5:6C:FC
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 0196C0138F80865BA9120B46F7F2135E6B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 14C3
Signing time: Sun 11 May 2025 16:00:29 +0000
Manifest this update: Sun 11 May 2025 16:00:29 +0000
Manifest next update: Mon 12 May 2025 16:00:29 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: WuWIyqqUu+U1xcLTx9Gz/NOJeWVRuYyIaKvuWCsZX+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:13:8f:80:86:5b:a9:12:0b:46:f7:f2:13:5e:6b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: May 11 16:00:29 2025 GMT
Not After : May 12 16:00:29 2025 GMT
Subject: CN=41a919081aabe897de20e2f8524a40c0c2d56cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:17:fb:89:ef:d8:d6:9f:a6:56:f6:e6:fe:5b:
df:4a:f9:05:03:e2:b0:70:11:97:92:c7:ad:77:e0:
1d:f4:f1:e7:51:38:d7:7b:6f:a0:22:05:91:8d:ad:
ff:17:e9:a7:09:9c:45:50:ed:04:a6:58:00:79:75:
26:7c:24:f9:d9:b8:0f:4e:50:2b:66:a8:f4:5b:f3:
e4:7e:2d:bc:3e:f5:71:86:8f:37:ec:4c:e3:5c:d7:
e5:55:6b:de:16:ce:8a:6a:ad:29:f0:47:c0:12:56:
6c:54:1d:a8:19:66:94:64:45:8a:0c:fd:63:73:30:
da:9e:16:9a:61:b2:c3:57:58:87:48:b2:29:f7:b4:
02:37:ed:85:44:5a:63:a5:8d:d9:ba:4e:72:1b:b0:
cd:26:1a:28:bd:13:1b:16:37:91:f3:1b:bf:44:73:
57:96:f6:74:8f:e8:a5:02:b1:f2:e7:ab:7a:52:d1:
a4:6f:e6:cb:c8:1d:c6:7c:5f:45:e9:ef:88:5e:4e:
73:b9:29:db:b6:7d:c7:72:89:40:56:db:2c:aa:20:
dc:2a:4b:c1:c5:8a:a9:c3:a4:aa:8f:fd:eb:ae:1f:
ca:4d:7f:b3:37:7c:e8:26:4e:70:b1:95:43:a7:eb:
74:69:fb:a8:0e:bd:44:3c:ba:8e:73:72:f6:f6:04:
67:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:19:08:1A:AB:E8:97:DE:20:E2:F8:52:4A:40:C0:C2:D5:6C:FC
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3a:cd:f2:01:a8:3a:73:df:5a:a4:31:43:2e:e6:62:13:16:
b7:e7:16:b7:11:15:74:13:f8:77:f8:81:00:cc:0f:f3:2f:89:
80:37:f6:cf:cf:f1:3c:a8:04:48:35:c2:b6:27:fd:ec:e2:7e:
e0:d6:e7:1c:04:64:3c:14:94:4a:6d:8d:19:cd:2d:a6:50:6b:
e4:ef:e9:c0:a8:94:25:61:6a:92:20:f5:3b:ec:11:ff:0e:7f:
86:dd:ce:b0:c4:b7:ed:d9:e3:77:9f:90:7b:e2:fd:fb:5f:6e:
d2:a3:73:5f:1b:af:30:db:11:f2:bb:c1:42:ea:f3:69:4b:d4:
0c:4c:66:a9:cf:72:55:ea:e7:30:93:08:1a:1d:4f:f4:b3:ce:
bb:13:3c:4c:2a:d3:c0:e4:ed:44:86:20:1c:a8:14:d1:0f:c7:
c8:07:e8:61:62:36:09:d0:ee:81:2f:6f:46:fe:e7:a9:f5:c8:
5a:72:bf:47:0d:dd:bf:17:dd:68:ea:17:e0:dc:ce:62:d3:6b:
6b:7c:97:06:a4:c7:95:a4:90:7e:c4:59:16:fb:5b:c6:12:9f:
f6:01:d6:e3:bb:6e:13:da:48:8a:48:35:a6:02:86:d4:6a:86:
fe:c9:17:b7:b6:1d:9b:f1:39:de:42:19:e2:cd:ea:86:59:44:
eb:51:97:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:11:33 2025 by rpki-client