Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: fq/9QouYybCCItpszBj65FpHeoZ5/i/0TqyplvVskjA=
Subject key identifier: D6:FA:B8:52:F3:9F:60:0E:2B:ED:8E:06:68:E7:B8:4C:C8:EA:16:B8
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0198D66000278EB7D8F65CD2C4CFDB12ACF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0D2D
Signing time: Sat 23 Aug 2025 10:01:12 +0000
Manifest this update: Sat 23 Aug 2025 10:01:12 +0000
Manifest next update: Sun 24 Aug 2025 10:01:12 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: JRcPsVnfLprucNCpQJWCNLZc5us11EBx7Lo19YaepDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:00:27:8e:b7:d8:f6:5c:d2:c4:cf:db:12:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Aug 23 10:01:12 2025 GMT
Not After : Aug 24 10:01:12 2025 GMT
Subject: CN=d6fab852f39f600e2bed8e0668e7b84cc8ea16b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:72:52:93:e3:ca:6d:6c:41:57:83:30:94:
dc:86:3a:ee:84:2f:16:41:35:0d:00:01:29:41:f4:
c7:49:fe:33:a7:cc:4e:29:b3:71:b4:47:dd:84:b8:
f7:f0:18:e7:df:c6:7e:80:aa:bd:bd:e0:2e:66:da:
a1:54:4d:c2:12:38:f7:0c:3e:69:24:bf:e1:52:88:
15:0a:08:e4:da:b1:5f:e0:ee:c0:a9:a3:ac:c3:5b:
8d:ff:f5:b1:8a:3d:b3:1b:94:4d:59:84:5b:bd:42:
e1:d7:49:20:67:eb:2f:ab:b4:dc:a4:f2:57:21:e6:
81:14:3c:5c:91:df:9a:9b:30:6a:c9:1a:3d:bf:3a:
5a:13:05:a0:f1:c0:d0:47:95:5c:c3:f2:bd:4b:a3:
08:51:f1:d0:57:51:9b:e3:a1:c2:ad:5e:ed:28:35:
b0:bb:36:9a:4f:89:e3:19:2b:22:6f:46:46:52:4e:
17:04:50:30:5f:8f:b7:84:8f:ca:b3:ff:ef:07:ec:
cb:61:85:a0:3f:ac:64:f9:1d:dd:38:6c:4a:00:ed:
f4:c5:09:1b:f9:dd:e3:1b:f3:29:82:16:8e:71:4a:
8a:c1:61:55:96:d2:74:4d:5f:ff:2f:73:cd:eb:2f:
b6:be:66:ab:e6:01:31:c5:ec:de:f7:6d:fc:bf:6c:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FA:B8:52:F3:9F:60:0E:2B:ED:8E:06:68:E7:B8:4C:C8:EA:16:B8
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:23:57:09:48:41:8c:e7:70:7b:e2:81:cd:ac:65:0e:7f:65:
70:30:0d:14:eb:2c:66:a7:1a:e3:21:5e:62:3f:c6:39:3a:0b:
2a:d1:e6:19:e8:1f:c0:c1:87:bb:6a:e2:f5:b5:75:a4:a4:12:
dc:1d:1c:bc:b8:01:7c:40:01:f4:d6:2a:d3:8a:c3:1a:18:d4:
ab:df:da:65:2a:7a:46:c8:cc:9e:91:9c:2f:20:75:72:e3:34:
27:29:90:84:23:c7:ca:e8:bf:1f:a9:3f:f1:f1:b7:54:bf:39:
20:cb:5b:62:84:12:05:8b:6c:e7:09:c0:83:c4:08:e9:5d:cf:
20:4b:c0:ad:2d:7b:27:ac:f1:a1:11:3f:07:e8:82:3e:b3:83:
7e:4b:b3:b9:19:50:98:68:cd:34:2c:d5:cb:f7:da:74:dc:fa:
09:ff:ba:3f:66:b9:b0:9b:99:bf:a3:55:70:87:56:c4:99:a8:
0e:5c:32:b8:7a:0e:e8:18:66:bc:aa:fd:7d:86:53:f8:d5:79:
2f:d7:90:38:7e:bc:3c:54:8c:1b:cd:bb:23:6c:78:d0:42:cc:
9e:f1:41:51:7b:3c:d3:2e:6b:a0:5c:57:50:26:3c:4a:4b:d7:
58:44:23:cd:d5:f0:92:37:27:ff:f9:9e:69:1f:36:24:c7:2f:
95:1e:38:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:30 2025 by rpki-client