Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: 7qVCTWwJ8b98UdU6QYkyZbrHkv7SwenywZn+3hsfDNQ=
Subject key identifier: C2:B6:3C:F7:99:C7:10:3C:10:4D:98:CA:AA:44:85:3D:D4:0E:AB:D7
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 0197BA0F3C1FCB7C7EF28458D8A74BDE7503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 0F72
Signing time: Sun 29 Jun 2025 05:00:49 +0000
Manifest this update: Sun 29 Jun 2025 05:00:49 +0000
Manifest next update: Mon 30 Jun 2025 05:00:49 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: JXPhJ0fGcLaMwBp+Fb50frI1/tCEGMy6ZHM6l599sFE=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:3c:1f:cb:7c:7e:f2:84:58:d8:a7:4b:de:75:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Jun 29 05:00:49 2025 GMT
Not After : Jun 30 05:00:49 2025 GMT
Subject: CN=c2b63cf799c7103c104d98caaa44853dd40eabd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:6b:db:62:b7:c5:98:05:30:85:d5:6a:4b:
57:6c:57:b8:c4:43:0b:f8:18:3b:6e:0e:04:e9:fc:
e0:35:5a:95:56:39:c9:0c:29:10:d7:1d:04:45:75:
38:d2:38:24:eb:70:ce:2a:1e:12:c5:66:b6:cf:78:
d8:78:4f:b5:4c:3b:2d:78:b5:91:fa:bf:ef:dd:d2:
23:3a:84:58:1e:e9:8f:c8:4a:81:22:15:c1:d4:e7:
cd:12:30:71:6a:f2:01:0e:84:8c:19:70:59:c6:93:
5f:73:0d:93:07:18:77:8b:f7:d9:58:29:dd:5f:57:
87:8c:c8:55:b3:c1:0a:37:f4:c2:e4:64:ea:e3:26:
6c:33:2d:b6:bb:f3:7c:10:cb:0f:68:c6:f5:b6:07:
41:58:e1:6a:14:73:b2:26:89:f9:de:aa:a9:10:ae:
6e:f0:e9:95:2f:2e:20:02:31:c1:a1:78:c5:ce:b1:
3d:a3:92:1c:41:8a:cf:70:d8:92:9e:f6:47:88:84:
f3:2e:9b:ea:49:b9:e1:7e:4e:63:95:09:53:a3:15:
5a:27:f1:27:8d:cd:f9:d0:e9:38:d7:36:46:50:07:
74:75:ff:5b:1f:b8:2a:da:c5:1a:88:5b:f5:94:ff:
82:a2:df:4e:43:d8:1a:90:1d:15:d7:0f:8a:5e:6f:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:3C:F7:99:C7:10:3C:10:4D:98:CA:AA:44:85:3D:D4:0E:AB:D7
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:66:e6:0a:69:25:2f:03:65:79:77:d8:d7:1b:b2:90:8a:
1a:47:d0:bb:0c:85:c1:be:a5:5a:63:bb:f2:31:04:d6:73:af:
ea:ba:d2:98:16:be:3a:4d:40:d5:42:16:9d:80:3c:a8:eb:05:
f6:6b:66:fa:fe:c2:c2:ff:be:ee:0e:d4:c7:c7:3c:2c:34:51:
be:8e:f9:ae:c4:4f:b6:9c:d4:34:4c:6d:20:57:c7:16:84:da:
45:5c:3f:5d:28:28:64:d3:3f:26:00:69:eb:8d:df:88:5b:94:
e1:e1:bc:31:98:d4:23:53:cb:0e:ad:45:e5:06:52:eb:7a:61:
8d:a6:e9:69:fc:ac:45:f7:f1:f6:77:df:4f:ba:e6:24:c2:0b:
87:51:0c:ce:ec:7b:f1:92:24:d5:3a:c7:aa:6c:9c:52:ea:ad:
e1:de:83:14:ea:de:67:e1:7a:fc:ec:56:b5:53:44:ca:0d:ab:
3f:08:8f:7e:b3:74:f8:1c:c4:fa:1b:68:d1:c1:62:5a:66:03:
d7:7a:c5:00:6f:bc:3d:b6:ea:a0:ee:b0:3e:14:6f:25:32:bf:
f4:30:1d:f9:6b:49:4f:fc:68:d9:11:c2:f5:0c:b5:ef:59:e9:
65:96:8b:aa:12:66:2b:20:5f:04:c2:46:7c:10:bd:da:46:5c:
4b:47:7d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:56 2025 by rpki-client