Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: HyYuS8RX2ftrY5D75gsxFYP/SLGQB1WPniJLg6GsOac=
Subject key identifier: 8A:13:0F:9F:1C:54:83:0C:88:A9:EA:7A:D9:38:18:A2:AD:B9:C5:80
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 0197B74541B882C373F54378EFA244ECFA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 0FB0
Signing time: Sat 28 Jun 2025 16:00:58 +0000
Manifest this update: Sat 28 Jun 2025 16:00:58 +0000
Manifest next update: Sun 29 Jun 2025 16:00:58 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: QD+Pg2Xu7UCbsauRxVO5h5fDrOL3fn9I1YZ18ZB0Tbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:41:b8:82:c3:73:f5:43:78:ef:a2:44:ec:fa:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Jun 28 16:00:58 2025 GMT
Not After : Jun 29 16:00:58 2025 GMT
Subject: CN=8a130f9f1c54830c88a9ea7ad93818a2adb9c580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:7e:43:66:63:40:45:ed:83:d6:fd:54:8b:
a7:af:0b:b0:f7:1b:d2:9a:87:f5:fa:b7:b2:36:14:
0a:99:8d:21:9b:da:37:18:2f:cf:cd:96:ff:11:42:
41:d7:b6:fb:29:c4:9e:10:bc:c0:35:02:06:1c:da:
9c:68:0a:02:e8:56:4c:72:f2:8b:52:f1:52:41:19:
29:5d:f4:93:c2:02:2c:c7:c0:ba:e8:ea:a2:fa:2b:
b1:63:ae:b7:f4:fe:ae:24:bb:ce:cb:9c:87:d3:bd:
29:05:01:a0:e9:46:e7:17:bb:3b:b4:5b:78:c4:41:
ba:4b:12:ea:b5:32:90:d3:ea:c0:20:b6:bc:a7:c7:
91:fc:61:fa:d6:cd:8b:3b:89:06:2d:37:bd:ac:54:
43:d1:e4:9c:db:58:8f:54:34:30:e0:84:a6:0a:b8:
1e:17:69:83:58:47:38:34:1c:4c:ee:9b:aa:bf:48:
f9:2e:eb:ba:17:ab:6c:5c:79:14:e9:c2:5e:6b:2a:
c1:6e:0c:84:ce:6b:2c:aa:4b:f0:49:31:01:14:0d:
f9:c8:07:6e:30:4f:94:81:5d:b0:df:88:22:37:c1:
9c:0a:d4:a7:0e:85:44:3f:3e:18:d7:9a:3e:ee:9e:
bc:55:01:6c:d9:6e:e4:7f:2c:1e:1e:76:6c:33:81:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:0F:9F:1C:54:83:0C:88:A9:EA:7A:D9:38:18:A2:AD:B9:C5:80
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:fa:ad:be:78:a3:a5:17:9a:d9:38:73:91:dd:21:03:d7:
bf:95:6a:6e:e9:8c:2e:53:a8:01:c7:0f:92:55:da:f2:cc:a1:
b6:d5:e4:61:86:b1:2f:72:64:25:60:3b:4e:c6:ba:94:9c:e4:
5a:7a:37:9f:8f:83:63:ee:97:e5:20:76:64:53:9d:3e:98:19:
68:83:e3:fb:fd:cb:3e:29:72:75:48:c2:93:74:68:27:06:df:
e6:2c:a9:ab:43:b3:6a:a7:39:77:eb:a3:25:cb:63:6f:f8:91:
05:29:fb:e3:aa:ca:19:65:52:0e:25:f4:a8:c6:ce:18:32:0e:
ec:70:2d:fb:7d:1f:0e:21:82:65:db:3c:20:7d:c2:78:4a:89:
e2:88:a6:23:2f:c5:4a:3d:6c:84:78:41:58:89:f7:73:08:da:
71:a3:88:30:b1:68:66:ae:6d:19:fb:1b:ee:4e:67:dd:ff:c5:
13:23:ab:05:f0:9a:5a:9b:16:84:6b:f0:44:ab:98:cb:19:19:
c3:73:bc:6a:96:5d:74:93:be:78:a1:1a:fc:40:40:29:2c:07:
d7:f1:19:7e:1e:43:9d:05:a6:8e:a1:cf:39:04:73:05:06:57:
6c:f5:8c:c2:8f:ae:db:2f:c3:62:c3:e5:c6:d5:1e:58:e9:7e:
71:7d:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:56:00 2025 by rpki-client