Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: vD7aKxzqh7oVHhdlsn78+oHEq8Zbh6/m141adUQ8mr0=
Subject key identifier: 3E:DA:01:A3:85:32:57:84:DA:D2:DD:6D:34:70:E3:55:A7:98:AC:48
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 0197B7EA3AA26DA0EE46432AB7FA2F50CC7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 12CC
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: a2glq7Eo2Vhn8k+Tp21qBW23LzyqBDSlduim7DJakSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3a:a2:6d:a0:ee:46:43:2a:b7:fa:2f:50:cc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=3eda01a385325784dad2dd6d3470e355a798ac48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:35:f3:1b:19:8a:87:9b:cf:a4:0f:2f:5e:
b4:42:7c:a8:7d:18:0d:be:b4:21:db:26:3e:96:c5:
4b:9a:dd:6f:44:09:3f:51:e6:5e:5d:9c:7a:6c:0d:
86:73:db:7e:14:5b:d8:2a:b0:20:2c:19:d3:f6:5e:
14:a0:1c:3a:9a:9c:4a:e2:7a:de:0c:28:d2:ba:30:
a0:88:66:d0:4a:89:21:26:0d:59:84:b4:e7:3e:d0:
e8:5c:0a:fd:e0:9f:c2:be:32:05:37:3b:7c:0a:9f:
1d:be:bb:47:1d:e3:52:80:a9:fe:51:e5:eb:70:0f:
c8:7c:2c:b0:3e:ca:b8:f6:1d:da:7f:f0:cf:b4:55:
2b:ed:a1:67:81:5b:e6:bb:6c:43:59:49:3e:0d:cb:
88:5a:17:06:46:61:ac:85:c9:e1:08:52:80:e0:cd:
22:1b:01:cc:02:f3:3b:c0:d0:bb:df:48:ec:5c:f0:
e4:61:93:10:83:fe:21:83:49:67:b4:23:cf:99:32:
26:b1:1c:a5:a3:8c:59:b5:3e:37:79:72:55:4c:89:
1f:97:19:f4:92:c0:61:b5:8e:14:3f:fd:6e:ca:3c:
15:f1:5d:ad:dd:e5:af:e6:de:e9:78:a5:fb:c8:2e:
d6:ae:41:af:fa:68:20:d3:7f:c8:9a:d0:ab:c1:85:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DA:01:A3:85:32:57:84:DA:D2:DD:6D:34:70:E3:55:A7:98:AC:48
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:71:00:75:e4:2b:37:55:5b:ae:d7:05:7e:fa:ae:69:48:01:
72:51:75:89:40:ab:fd:cf:c3:99:4f:d0:d3:c3:72:30:7f:61:
2e:4e:96:17:85:e3:86:18:b0:de:e5:4a:a2:81:79:db:30:3b:
3a:11:c3:92:1a:3d:db:cf:a5:23:85:a6:89:d1:95:dc:a3:b7:
11:d0:f4:f6:4d:6c:60:ca:d3:2f:ce:f7:9b:53:17:d6:4d:1a:
12:2e:e9:3f:bf:b4:75:15:f1:1e:6c:b5:63:7f:86:af:22:91:
3f:66:79:43:ab:82:33:88:ac:de:74:4b:b8:9c:72:71:7a:5e:
e2:ef:e0:b2:b7:d4:30:8e:51:15:02:4f:1b:b9:11:6f:61:5d:
45:99:04:4b:59:03:cf:ce:9b:34:13:54:56:c2:d1:81:d0:a0:
b5:20:91:97:d7:52:6c:14:e7:c9:f4:30:46:aa:bf:57:93:a2:
ec:3e:7c:7c:d7:cd:67:71:91:90:a7:5c:39:1b:b9:85:25:2a:
0b:d5:53:19:54:6a:d0:11:52:00:b4:ed:3a:ef:9f:54:28:72:
1e:b7:d9:aa:54:c4:76:5c:35:e6:32:ae:be:c6:8c:60:f5:0b:
9c:be:f7:21:74:bb:9e:77:99:fa:6d:79:bb:2e:39:13:79:52:
42:b8:a8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:41 2025 by rpki-client