Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: qGekUx/min79uCs6zwjn56q7xzZ1on0CZW75DTOM2MM=
Subject key identifier: 34:33:EB:CA:FD:7B:7F:DE:F9:9E:2E:24:23:0A:0A:CB:95:71:5F:94
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 0198D4736D4C0AE6C56E9196D15DEE1AB033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 1230
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: M2JUXDe0eEjNpC8BQzwyj5trMsLYNZc7OzFBqhV7zEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6d:4c:0a:e6:c5:6e:91:96:d1:5d:ee:1a:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=3433ebcafd7b7fdef99e2e24230a0acb95715f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ab:57:bf:c4:74:0d:b7:d2:06:63:dc:a5:2c:
cb:58:8a:22:2e:5d:61:9c:1c:80:3c:b2:e2:c4:29:
9a:c0:b6:f1:87:f8:48:1c:a1:cf:55:f1:85:02:04:
18:1e:8f:c1:39:0f:f3:36:cc:da:68:25:9b:42:98:
b3:97:f0:1c:ae:72:e6:f8:b3:a5:52:b5:eb:b0:01:
ec:ef:13:48:82:e7:a2:a1:db:ec:62:2b:cc:e0:b4:
8a:72:24:be:7b:90:68:0e:fd:00:5d:ef:04:0e:00:
6d:9c:ed:b3:23:c9:81:59:6f:06:c0:02:97:cd:4b:
e3:32:dd:ab:9e:17:15:23:2e:c3:84:33:3b:7b:de:
7b:59:dd:58:ac:0f:cd:99:92:8d:81:f9:01:ea:4e:
a5:17:ba:ae:4d:3a:4e:55:33:8f:07:eb:20:ff:c5:
a8:17:d7:81:e7:cc:57:0a:1a:19:63:a0:77:d1:af:
ab:5f:53:65:d8:2a:ff:21:e2:bc:26:03:22:7e:63:
dd:2b:d1:26:e8:b3:d2:4f:06:31:05:44:63:99:6b:
db:ff:91:fc:e3:cd:f8:5f:2b:ec:5a:45:0b:83:d8:
dc:55:c4:cd:17:5e:40:81:68:23:56:57:e3:26:86:
24:73:3e:51:b7:f7:a5:36:b9:98:e9:5f:71:d2:e4:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:EB:CA:FD:7B:7F:DE:F9:9E:2E:24:23:0A:0A:CB:95:71:5F:94
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:24:76:b5:d3:2f:e2:c7:d4:04:e0:c6:22:e8:2b:b8:42:
09:32:fe:1e:b9:72:fb:d4:be:a4:3e:a6:6a:06:a2:7b:4e:ff:
74:f9:40:e8:70:be:71:50:f0:4e:74:38:7f:c6:43:f5:fd:ff:
e6:a7:69:98:b5:14:85:4c:8d:b3:77:98:17:33:1f:7b:a2:ca:
d2:52:b3:d3:42:1d:61:50:14:54:47:74:a5:86:66:ad:14:fd:
79:79:4f:1d:e6:f8:c8:9e:00:b9:4a:01:37:8e:96:c6:ea:3a:
97:ba:e0:8c:78:ec:e6:b0:94:14:15:4a:76:08:d0:3c:45:13:
8b:81:80:58:72:9d:fc:09:08:93:87:0b:e0:ce:27:7a:14:44:
40:a8:48:0c:ee:53:1a:0d:8d:24:00:12:96:79:3b:26:ef:64:
42:94:13:5f:95:b0:2a:f4:bd:88:89:53:b4:00:67:a1:f7:56:
d5:65:08:b8:b0:34:8e:3d:06:ac:15:fa:bc:e2:3d:80:7f:91:
7d:c3:52:eb:f8:4f:31:ae:f3:37:76:6d:2a:20:3d:28:bf:4a:
10:d9:4a:5c:72:1b:ff:c5:c4:27:20:b7:eb:c5:66:7f:c2:b8:
5b:6f:d7:70:84:a7:29:8b:ee:d0:d1:8d:a9:c8:fa:a8:9a:cf:
d1:27:9b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:27 2025 by rpki-client