Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: mH/dj58VKpVU878BI4/KyUTMC7Pn6UlcpZaAz659Uuw=
Subject key identifier: 1C:CA:7F:B9:53:37:DA:0D:85:22:70:23:0B:60:25:9B:AF:4C:F3:94
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 0199FBEC353E2580F2D02FB00FE367AD9446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 12C9
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: BX6uuty2BjrafRb89twPY0VL5DshuHL/lWuG+hSIEco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:35:3e:25:80:f2:d0:2f:b0:0f:e3:67:ad:94:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=1cca7fb95337da0d852270230b60259baf4cf394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:65:63:bb:22:32:60:13:b0:30:06:ce:30:
a0:3c:7f:1e:8c:86:ce:67:7c:18:7b:5f:ea:68:6d:
58:62:17:56:be:59:9c:fd:51:ff:c7:f3:6d:3c:f1:
f1:e6:f0:bf:cf:6e:ea:40:b4:53:81:8b:fc:cb:7c:
56:11:35:85:15:84:89:0f:f6:44:a9:93:8c:94:10:
c7:20:a9:20:0f:7e:51:b6:65:30:ed:d9:14:ca:b8:
e2:50:67:91:c2:35:50:cf:df:06:de:19:1b:4c:2f:
97:72:5b:de:e1:0e:27:e7:7e:76:b0:9a:4f:6f:35:
5c:ac:c9:ee:17:dc:85:0f:d2:fd:2d:4b:84:02:34:
e1:33:99:1a:c2:25:e3:dc:ae:cd:2d:03:50:b8:e0:
7a:19:fe:90:0b:97:fe:73:c7:6b:ec:71:a3:8f:01:
8e:6c:74:80:3c:1b:0d:39:0a:c4:94:30:45:c6:bd:
4e:d6:fc:47:38:a6:ed:f8:f0:57:0a:3c:10:f1:02:
5d:71:d1:85:39:1f:33:a9:e5:f5:05:ca:82:73:51:
db:a6:a8:0a:c0:df:84:74:ce:d8:4f:e2:9f:ee:12:
26:84:7c:bc:67:93:0d:90:ed:45:66:7c:94:e8:09:
72:a3:dc:fc:8e:26:79:93:30:36:ad:56:de:3b:6a:
a8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:7F:B9:53:37:DA:0D:85:22:70:23:0B:60:25:9B:AF:4C:F3:94
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:a8:30:57:23:ab:c7:f2:e4:b1:ec:b4:74:b1:60:98:ec:
e0:31:39:5d:26:2c:29:db:a0:83:45:60:23:c6:7b:cf:6f:9e:
00:1c:db:66:07:5c:1a:07:98:7c:9f:36:ab:cb:c3:ca:79:c3:
e2:b8:8f:82:17:db:c8:bc:25:bc:a3:6f:af:19:70:6f:0f:8e:
d5:0f:bd:f5:dc:82:54:e6:08:20:37:cf:2a:3f:5f:24:9a:82:
5b:6c:92:77:3a:91:f0:d3:42:03:34:00:26:92:75:6a:df:18:
3a:0c:2b:e9:58:20:30:3b:20:02:4a:1a:0b:b8:93:5d:c4:3e:
6a:64:21:09:cd:d4:fa:73:c6:fe:f9:98:09:83:27:63:f2:68:
2e:1b:aa:2e:81:c2:52:a1:19:15:bc:f1:4b:1c:fa:6a:42:ae:
b5:5c:7f:32:a2:f6:d3:c5:71:c1:d5:43:84:ca:90:b6:b5:9a:
fd:3d:1d:21:41:9d:ca:71:68:93:95:fb:18:05:4c:34:59:e7:
84:f9:9c:be:38:4e:b1:fc:7e:32:f2:d6:9a:c5:92:b3:2b:e9:
86:bf:49:17:e0:9e:70:dd:65:f3:43:20:35:fd:96:34:52:74:
44:c3:b3:a3:d2:3f:93:08:fe:43:94:55:60:23:7f:a0:e4:36:
b6:aa:e3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client