Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: n70hxCoYuQE6Fh2d85O7IDKPFYxJlrYSDGTkAAEgyEs=
Subject key identifier: E6:FF:A3:FA:73:20:20:A8:3B:8A:45:17:22:30:DB:E6:11:64:3A:B5
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 0198D5157701C6633B3E656E27B5F3420A69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 07EF
Signing time: Sat 23 Aug 2025 04:00:10 +0000
Manifest this update: Sat 23 Aug 2025 04:00:10 +0000
Manifest next update: Sun 24 Aug 2025 04:00:10 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: 9FtkeHi8rK+RLbx6RHSXmddtXzRc887wFcDtHrb9BKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:77:01:c6:63:3b:3e:65:6e:27:b5:f3:42:0a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Aug 23 04:00:10 2025 GMT
Not After : Aug 24 04:00:10 2025 GMT
Subject: CN=e6ffa3fa732020a83b8a45172230dbe611643ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:30:c8:df:5d:83:23:db:d2:f3:87:d0:ff:2c:
c0:47:8a:5b:7c:2c:bf:b3:99:2f:9a:fd:17:60:62:
99:8e:f0:b0:2a:0d:f2:f8:fe:80:26:29:fd:7f:97:
6f:fa:31:6d:69:83:cf:e8:e2:11:8c:05:f3:c3:29:
24:9c:8c:23:a6:26:17:2f:1d:42:c4:aa:d3:61:c0:
9f:e0:61:a7:09:e9:4a:29:f1:49:6e:b9:47:44:31:
d0:1a:c0:f7:d0:c4:79:fa:b9:34:d1:98:40:52:83:
52:ef:7e:7c:cc:4f:1e:40:6f:0a:91:4d:93:0a:01:
ea:92:ba:0e:ab:ab:95:ca:d6:36:86:d9:a1:1b:2f:
ea:1b:b9:0c:bc:80:5b:7b:94:80:a9:62:df:83:b0:
af:89:d1:5e:92:93:0a:5b:1b:85:8b:b3:fd:c6:08:
66:61:57:c8:ce:c3:3c:b9:7b:98:d8:47:ca:e9:52:
3e:fc:b4:f6:c9:6b:0e:8d:32:3d:40:65:4a:20:41:
e2:53:5c:95:c7:c7:8c:f6:ab:e4:a6:7d:2f:61:5a:
22:33:63:03:d9:38:25:1e:51:49:38:7e:c8:07:02:
41:82:a0:00:35:fd:bc:7c:22:73:c4:4f:7e:16:34:
35:58:1a:47:14:f5:c7:5c:b5:5a:d5:d5:0e:1a:8f:
6c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FF:A3:FA:73:20:20:A8:3B:8A:45:17:22:30:DB:E6:11:64:3A:B5
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:96:af:90:e8:d5:47:70:8d:26:94:3d:85:4d:cb:94:a1:35:
b4:6b:a5:e5:e8:2d:d8:60:cc:df:3d:cc:4e:11:84:d9:99:02:
69:a8:0f:8e:7b:40:d6:a8:2d:90:8e:81:79:8f:f4:91:04:c2:
14:dd:1f:6f:32:17:86:e7:e8:99:2f:8f:e1:7a:c5:b6:16:ec:
e8:16:7a:47:2e:49:2d:1f:c7:85:a8:ce:00:3d:61:cc:7e:7a:
65:7d:94:2b:42:19:c9:03:6d:bc:dd:5f:b8:8b:f7:1a:e6:8f:
4a:9b:cc:40:e0:19:5f:42:ec:84:cf:eb:0f:33:8e:8e:7e:e0:
da:59:e0:ee:08:2d:9d:50:35:b9:82:54:ce:0a:5f:bc:59:2a:
2e:df:ed:e7:a1:ef:c4:fd:2d:03:1a:a0:01:c3:07:db:de:f1:
1e:c8:60:f8:f5:68:29:ee:90:f5:40:08:ea:dc:19:8a:e3:58:
be:40:43:19:2c:de:4b:a9:b1:11:e5:e4:93:cc:77:b1:78:89:
63:d4:9c:91:61:40:30:3c:dc:dc:09:8e:c0:ff:51:b9:04:9f:
a7:7b:a2:42:0c:1c:4b:dd:f3:9d:8a:6f:e3:0e:39:68:6a:96:
18:b9:a9:5b:1f:98:fe:00:c0:8b:b9:c1:f0:f0:3b:f0:4c:8f:
f8:e3:dd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:44 2025 by rpki-client