Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: jkeuOYhX4aTf8DrAsNRwpmOqUeXH3zyBmWPDRGX4l6w=
Subject key identifier: 27:33:9B:80:57:38:D9:05:AB:86:CF:73:B5:D7:68:09:91:78:9A:C5
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 0197B6A13D4AC01BCE1357723E7238735290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 119C
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: Ua7fX4KVoRnEeTOW8pKlg8UZuuXJBbOrIbEr07J/Ieo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3d:4a:c0:1b:ce:13:57:72:3e:72:38:73:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=27339b805738d905ab86cf73b5d7680991789ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:84:5d:7d:10:27:27:06:7d:19:e5:76:f9:7f:
fd:43:c5:ba:ac:59:f2:bc:63:f6:39:ff:2a:a2:0f:
ea:00:1b:34:76:9f:ae:c8:61:70:c2:13:94:6d:74:
2f:4f:28:cb:98:1f:b3:5f:1b:b1:ab:6d:5c:0c:23:
2f:01:64:eb:12:7c:70:34:2b:35:f3:b7:03:3d:73:
69:ff:ac:73:04:a1:ed:e2:83:27:b1:10:eb:f7:00:
63:fe:fe:d2:a2:ab:ea:87:00:41:48:57:89:e1:87:
b1:97:63:ad:36:b8:49:b1:68:4c:33:67:ab:60:bb:
4f:13:a8:83:d4:e2:16:86:29:9e:82:41:ce:af:13:
9a:20:0e:d5:d1:89:96:64:3f:80:be:a9:12:61:79:
ff:07:57:39:9d:bd:06:3f:88:93:87:eb:01:b0:9b:
3c:f8:de:d9:a2:97:70:19:73:74:a5:5e:d8:0c:a0:
03:91:fb:08:98:60:8d:7d:bd:63:29:59:9e:42:61:
14:02:c0:89:7f:7c:6c:1c:d1:ec:21:9d:b4:0b:d5:
b8:c4:f8:ca:70:49:25:b8:c5:c9:4b:b3:2b:4a:d2:
29:9c:ed:f6:e0:99:a4:55:34:6d:12:e4:77:af:fc:
34:93:bf:93:4a:4f:b0:10:4c:17:ab:cc:f5:d6:3e:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:9B:80:57:38:D9:05:AB:86:CF:73:B5:D7:68:09:91:78:9A:C5
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2d:9c:a2:5d:31:bf:56:70:14:a6:6e:df:58:d1:25:9f:75:
00:cd:1b:8c:01:2e:26:cb:e8:13:f1:10:cb:72:ce:94:39:5d:
c1:b2:9e:b2:db:07:e9:2b:9b:41:03:35:ae:fe:e2:f3:e4:4d:
d9:60:64:07:a3:75:d1:94:7c:60:81:a2:cd:ec:b0:0b:7e:0d:
e1:87:0a:ec:80:1b:c5:43:79:54:63:3b:0e:59:46:9e:10:9e:
b2:ad:71:5f:d1:77:1c:d5:80:8a:99:25:72:16:0d:dc:d2:66:
90:59:3a:be:f9:bc:d4:17:70:40:a2:42:59:b0:dd:30:eb:39:
cf:81:f7:63:15:48:1e:9b:3e:e2:68:79:fc:b4:0c:01:18:54:
cb:a3:2c:68:35:54:74:14:f1:9c:57:19:67:95:78:37:96:9d:
92:f4:6c:3c:49:83:83:5b:46:d4:c1:63:45:45:80:2b:0e:4f:
25:1a:63:e6:4f:cf:0d:5f:65:9b:84:8e:36:28:86:d0:5d:64:
a4:ff:1d:57:fc:9c:6a:d7:ea:cd:de:96:15:62:b9:69:84:e1:
cc:a9:9a:17:c9:30:14:59:79:94:c5:d6:35:9a:db:ed:99:ba:
91:4c:1b:b6:ac:e9:35:02:eb:89:9e:6a:45:4a:5a:94:78:5a:
01:b2:62:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:46 2025 by rpki-client