Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: 2lugMJX5NYjwHqBNuTj0s0NKqW9xjsS7gioECgwJTJc=
Subject key identifier: 6D:A6:66:4E:2C:91:BF:74:73:CF:BE:0C:03:5A:BB:2D:30:F0:66:CD
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 0197B6A1A7D72821C137F75C325E3DB690B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 0F45
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: 8qf+RU37ZDWkbAKpgMGTX9qS2i9voKSgLDMk2kR4GTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a7:d7:28:21:c1:37:f7:5c:32:5e:3d:b6:90:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=6da6664e2c91bf7473cfbe0c035abb2d30f066cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:39:a8:ff:14:04:b8:2b:5d:3b:7c:ed:3c:
fd:67:3b:37:46:32:f2:9e:38:15:90:26:d7:14:67:
b4:cb:8f:e4:23:70:38:55:b4:07:55:30:09:c2:aa:
64:ce:b0:7d:0c:c5:9d:2e:f6:f1:d2:42:39:b0:16:
7e:19:a6:6a:42:56:27:15:bd:34:fc:3f:27:90:a4:
07:c6:76:83:50:9b:73:26:fa:67:13:2f:9e:7d:b7:
b4:e1:a8:b2:24:a8:b1:5a:0e:d4:67:dd:05:d4:e4:
67:54:52:b3:8c:df:09:a0:66:04:df:ca:65:bc:fb:
f9:3e:2f:38:86:9d:b4:b2:0f:06:8d:41:f6:2f:b7:
13:57:1a:5c:6c:7c:5a:aa:49:83:ac:ed:1e:57:89:
41:10:18:99:52:d5:19:12:40:65:fd:b2:2f:55:08:
3e:58:8f:43:9d:81:75:be:ae:a8:1b:d1:3d:7f:df:
50:46:32:03:8e:fd:6a:3d:ec:d9:16:ed:35:7f:94:
67:03:7b:92:c8:a2:1c:fa:1c:7b:28:98:87:4e:13:
94:0c:1a:99:fb:91:40:6c:09:09:7b:2d:44:7c:6c:
21:cc:a7:e9:8d:c5:55:6d:e7:05:32:d3:73:d8:ea:
23:99:7a:6d:a5:4d:77:55:87:e2:62:ea:f9:d1:70:
2d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A6:66:4E:2C:91:BF:74:73:CF:BE:0C:03:5A:BB:2D:30:F0:66:CD
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:ba:a1:8d:51:39:01:dd:98:1f:0d:f8:6a:32:2c:48:92:
1b:5b:37:f8:9d:24:20:06:ee:ce:8f:6b:46:1a:cf:2a:55:63:
13:68:cc:77:4f:77:4e:a0:bf:80:2a:da:2c:18:ab:10:01:54:
1c:6f:2a:dc:21:b3:7b:12:69:94:8b:94:14:21:84:66:c8:61:
49:41:47:39:2b:c4:fe:b0:95:0e:f9:c0:88:1d:44:c0:28:65:
05:df:5b:f9:65:b1:9b:bf:7c:65:53:67:19:91:ae:03:1d:25:
65:da:1b:5e:fd:b7:81:9e:ec:cb:11:7c:1f:7c:75:5c:51:4d:
6d:a3:76:de:03:d1:2d:22:01:20:f6:94:52:e5:ce:83:9e:b2:
8a:cf:89:c1:29:bc:5e:cf:8b:8c:a5:88:61:a7:31:97:b1:07:
19:97:fb:14:fb:0e:bf:5d:31:40:92:c7:c5:2e:2a:7b:45:53:
6c:ec:24:c8:76:ce:14:2c:a9:de:54:24:c8:c7:5a:e3:77:8c:
79:53:d5:2a:91:bc:d8:a2:d3:cf:30:6e:2c:cc:9e:67:23:8d:
5c:5a:17:aa:99:08:d7:a0:28:2e:61:b3:0c:eb:07:a8:e7:95:
5f:a8:b4:dc:db:58:16:4b:2c:42:20:64:67:15:5f:66:83:25:
10:b7:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:09 2025 by rpki-client