Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: FRPD2qof/85ksi5iQ9/jl8e6rzSUeeeo6cMAjeAe7vw=
Subject key identifier: 39:14:52:D3:41:EB:63:93:02:0D:6A:D5:DA:5C:61:EC:71:26:7A:0C
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0197DB52BAF7F5D895F970BFFC52B686B234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 15DD
Signing time: Sat 05 Jul 2025 16:02:01 +0000
Manifest this update: Sat 05 Jul 2025 16:02:01 +0000
Manifest next update: Sun 06 Jul 2025 16:02:01 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: pLVOLiqVDYp2d09kSYbdIopiknxPiyWSl1v73pghz4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:db:52:ba:f7:f5:d8:95:f9:70:bf:fc:52:b6:86:b2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jul 5 16:02:01 2025 GMT
Not After : Jul 6 16:02:01 2025 GMT
Subject: CN=391452d341eb6393020d6ad5da5c61ec71267a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:fb:92:62:af:ba:b5:be:a3:7a:8d:94:36:
b5:e4:ab:06:9c:01:6d:b7:7d:79:3e:5b:51:5e:99:
07:2c:6b:0c:26:6c:8e:f0:6c:b4:a8:eb:22:98:cb:
73:00:fb:26:87:61:3c:e7:c5:ac:6b:0e:45:d8:87:
12:de:3b:08:94:70:86:6f:c7:e8:d1:0c:02:b2:b3:
db:55:ba:f0:d4:0b:e6:85:7f:87:91:77:56:2d:93:
ce:78:1d:64:8b:52:5c:b5:07:b2:dd:73:1b:16:43:
87:f6:ef:5e:d0:6d:ba:8d:5f:df:87:c6:89:bb:ad:
0a:e9:90:6b:ed:8e:e7:0f:97:7e:16:24:55:11:dc:
72:cb:c5:1c:b6:27:76:7c:6b:da:c7:ec:32:4a:d0:
c9:a3:cd:bf:aa:09:10:c1:38:8f:65:d0:17:c9:50:
77:f7:e4:41:87:c7:fe:09:b1:95:04:9f:b3:cb:cc:
73:7c:f3:bd:b8:da:51:88:19:84:42:78:86:71:b5:
41:41:e4:65:60:1f:be:06:e6:4e:27:9a:51:09:82:
67:d8:2d:c1:2c:81:08:8c:5e:88:df:24:ae:5f:59:
4b:1d:a5:59:33:c7:53:71:4e:0d:4f:7a:0c:e7:cf:
10:61:55:d3:46:51:93:cc:cb:d6:4a:8a:58:54:9e:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:52:D3:41:EB:63:93:02:0D:6A:D5:DA:5C:61:EC:71:26:7A:0C
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:06:c8:43:3b:bd:ab:6c:42:78:ac:d7:6e:8f:65:e4:8f:7b:
71:c2:7a:d1:b3:ee:76:40:8d:a3:d9:e4:25:f9:93:1d:df:e3:
e5:0a:38:db:2b:84:10:08:1b:98:8a:52:b2:4d:33:e4:c3:02:
b3:10:62:8e:03:7a:30:ef:53:06:45:80:d5:19:27:ef:04:27:
d3:61:11:13:f7:9e:4f:40:bd:51:dd:c2:9b:28:ae:7d:4c:b4:
3b:9e:f2:ab:27:ab:fd:84:d0:42:3e:d1:ff:49:d7:52:73:47:
88:4d:ea:91:f4:b7:c8:47:c4:6a:7a:e8:2a:8a:9d:81:ff:d9:
b2:f4:82:f2:e1:36:28:a9:2e:ad:8c:d2:b7:9a:81:1c:29:06:
f1:9f:8a:31:ab:13:16:7f:75:25:e8:1b:c8:5b:a1:cb:a1:55:
f3:f2:09:c8:e9:5f:76:ff:45:3a:9a:39:e8:e3:24:b1:33:5c:
95:2a:dd:f8:17:b1:6f:3e:4e:02:aa:f7:a9:f9:87:9a:42:be:
c7:7f:84:7d:a9:00:48:96:ea:ad:f8:b1:c1:42:0c:9b:e3:ef:
41:2a:c0:3b:4b:08:cf:0e:1d:07:d2:ca:40:e9:66:c4:0d:6f:
dd:82:49:d3:cc:70:ca:50:96:16:d2:92:5f:3e:99:98:35:c7:
e6:bb:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 18:34:50 2025 by rpki-client