Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
File: SQtgyL0tnQHwq1ocTApT4dczn2U.mft (raw, json)
Hash identifier: Xx/p++syDrJQEEjangN2WAcgijkNzNoNyRzo66RoJyg=
Subject key identifier: 1E:33:A0:5C:89:E6:4A:03:F8:7A:FD:BE:BA:13:D3:86:1F:57:67:F7
Authority key identifier: 49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
Certificate issuer: /CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Certificate serial: 0196A27710C3FDE2C4FF96DE4CC1E2541B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
Manifest number: 110D
Signing time: Mon 05 May 2025 22:00:34 +0000
Manifest this update: Mon 05 May 2025 22:00:34 +0000
Manifest next update: Tue 06 May 2025 22:00:34 +0000
Files and hashes: 1: SQtgyL0tnQHwq1ocTApT4dczn2U.crl (hash: lu/3FY+NYdkBcpY2C2r1axXMuTIgumshgHG6Amn/9u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:10:c3:fd:e2:c4:ff:96:de:4c:c1:e2:54:1b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b60c8bd2d9d01f0ab5a1c4c0a53e1d7339f65
Validity
Not Before: May 5 22:00:34 2025 GMT
Not After : May 6 22:00:34 2025 GMT
Subject: CN=1e33a05c89e64a03f87afdbeba13d3861f5767f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f1:68:39:ee:48:37:bf:f7:61:7d:00:b1:1d:
bc:86:6c:47:d5:b6:3c:8e:e6:27:f7:c9:73:72:ef:
f2:4e:38:70:f9:dd:d4:8a:76:ff:8d:bf:95:d5:f8:
41:5f:b7:73:54:e2:63:8b:7d:82:b2:ad:4a:c8:95:
14:76:3e:7a:1e:fe:bb:9d:ca:6c:af:69:08:4f:fd:
66:63:80:66:ac:ac:64:b4:33:4e:13:02:ca:6f:c6:
33:e7:c0:20:0e:0e:79:a2:c5:d1:d3:33:3b:50:c9:
6d:26:55:bd:38:9c:f1:dd:e1:84:bd:2d:a7:56:e8:
59:54:ef:28:b2:62:b9:bf:a5:3f:04:0b:00:90:18:
ad:39:7e:72:7d:be:0a:e5:ce:1a:b3:ad:71:eb:25:
72:92:04:4e:60:ed:7b:8d:58:c5:9c:c6:93:1b:a9:
16:9c:47:de:fe:10:66:c6:5d:a6:f3:c2:33:c5:9f:
a3:3a:59:a9:7b:2c:16:c9:a6:1f:34:df:9d:9f:2b:
1c:45:db:56:93:b4:cf:29:ec:4f:29:3e:95:70:a5:
1f:40:ea:b0:92:8f:42:4d:61:28:8a:4b:44:32:f4:
dc:79:46:df:b9:aa:05:28:f3:66:be:2a:1d:2a:ed:
25:ef:75:ae:d9:f3:9d:98:95:50:4e:fa:2c:7d:75:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:A0:5C:89:E6:4A:03:F8:7A:FD:BE:BA:13:D3:86:1F:57:67:F7
X509v3 Authority Key Identifier:
keyid:49:0B:60:C8:BD:2D:9D:01:F0:AB:5A:1C:4C:0A:53:E1:D7:33:9F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQtgyL0tnQHwq1ocTApT4dczn2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/926b57-cc12-48fc-b996-92a4be85c11d/1/SQtgyL0tnQHwq1ocTApT4dczn2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4d:03:ed:2d:09:26:df:03:fc:bb:fb:7e:fd:26:9c:9f:74:
ab:32:1e:d7:f6:0c:39:49:60:3b:84:03:06:56:dd:83:81:45:
7d:84:fb:6c:46:7b:9c:25:05:02:2d:e5:a4:26:e8:8f:b3:cb:
3c:52:c4:d7:7b:c0:0d:20:8c:80:55:a0:55:2b:7c:7a:7e:fa:
c8:4f:d7:d5:ff:23:5b:dc:4a:d5:39:c9:0b:03:5d:db:00:a4:
f6:be:ca:f4:6d:07:b8:49:3e:bc:c1:a3:6f:b9:47:ef:ac:d7:
88:1d:ee:0b:f4:99:b6:62:14:c0:2d:90:44:1e:d7:8f:54:eb:
0d:93:3c:37:8b:6e:ba:28:f6:64:68:3e:3b:e3:70:63:b0:f0:
50:0d:bb:bc:ec:d0:36:8f:c1:73:42:90:0c:4d:e8:5e:e0:96:
12:91:7c:86:7f:69:de:51:bf:13:bb:d7:e4:c4:2e:b8:b9:0f:
a4:c9:e8:ba:dc:4b:38:1a:d6:b5:63:a3:2d:f8:b5:eb:2e:7f:
c9:ca:bf:fc:f2:6f:0f:98:07:e6:ef:3d:88:8a:9d:f9:3f:fc:
b3:9d:3f:4c:0b:a8:61:9d:a7:ed:65:16:ce:7d:5e:84:ca:4a:
ff:0e:33:c2:31:00:63:69:25:5f:d6:cc:d3:44:e6:ab:3a:3a:
88:ec:5b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:32 2025 by rpki-client