Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: xylQGh6K0kyNBp0nb9hgjtx19oBOFVLTeGvcuMQv6FU=
Subject key identifier: 99:D8:80:CA:D1:25:99:B2:DE:AC:3B:B4:A1:9B:DB:BB:7B:82:E1:38
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0196C916706B5405D1BB76D3217259597EE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 154F
Signing time: Tue 13 May 2025 10:00:12 +0000
Manifest this update: Tue 13 May 2025 10:00:12 +0000
Manifest next update: Wed 14 May 2025 10:00:12 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: RLJcDaNXROCLMvCX7b18F+nEVPqtrBKZa1mhoL8mrnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:70:6b:54:05:d1:bb:76:d3:21:72:59:59:7e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: May 13 10:00:12 2025 GMT
Not After : May 14 10:00:12 2025 GMT
Subject: CN=99d880cad12599b2deac3bb4a19bdbbb7b82e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:90:ea:fb:34:76:87:7e:01:f9:e9:97:69:
e0:d7:51:e8:09:d9:93:b4:6b:0a:d4:e4:7c:92:89:
d1:6c:49:6c:48:35:3f:1c:db:7e:25:00:ae:6b:9c:
03:a9:51:e1:cd:d4:2b:ca:9f:96:61:bd:13:4f:aa:
b6:22:85:ba:c5:d7:9d:f7:b9:3a:f6:71:75:1f:5b:
f6:89:90:79:eb:7d:90:81:38:10:96:a2:a4:74:52:
26:e7:06:3f:51:9c:12:92:bb:6e:e7:68:ed:52:cd:
16:81:54:d2:17:16:4e:d7:34:14:5f:5a:ed:c1:08:
31:db:58:69:2b:2d:72:d9:32:2e:fb:34:89:95:0c:
b9:14:41:14:d5:0b:3d:07:09:98:5e:57:1a:24:9b:
90:ac:e6:b0:28:1a:26:c8:08:ae:b8:d1:00:8b:6e:
7d:ca:b0:36:53:1e:67:a7:9e:24:12:db:c7:2e:64:
99:f7:4c:98:a6:4f:52:8a:21:56:ba:85:87:e5:b8:
8e:e3:bc:8f:4e:49:c4:ee:92:15:d5:b4:ca:bb:a0:
38:f5:87:78:0c:6e:6e:87:89:1a:a8:e1:38:21:cd:
85:5c:52:49:91:5a:bb:55:be:8a:13:40:5a:a3:82:
bd:06:c1:54:8a:e7:84:96:a1:f3:9e:49:76:9a:bf:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D8:80:CA:D1:25:99:B2:DE:AC:3B:B4:A1:9B:DB:BB:7B:82:E1:38
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c9:bb:e2:47:94:fd:a1:c1:1a:1c:c8:ab:80:13:3f:ba:3c:
df:b2:7a:be:05:b5:f5:d8:63:bb:e0:dc:e1:34:de:81:91:5d:
cd:a4:da:c7:e8:04:2a:39:57:03:50:70:eb:0e:bc:31:e6:08:
42:50:4b:bc:33:41:43:95:a3:83:76:fa:88:4f:95:4c:52:fa:
ad:ad:fc:59:79:3e:7e:d7:a0:c6:9e:fa:97:3b:f9:a9:8c:5b:
ec:06:97:d3:9f:79:1a:77:52:99:48:0e:b3:d0:1c:34:8a:52:
7a:21:e7:fa:94:2f:e8:8f:63:be:17:76:33:42:de:6d:65:e5:
56:89:c7:4c:4f:ef:77:2e:e0:da:4b:26:76:0a:c1:87:1e:c4:
31:9e:66:d7:ad:92:51:a9:18:a2:30:5e:88:c1:87:2d:c8:90:
f6:53:23:5d:b8:69:9d:34:41:c9:d7:5e:3d:37:c6:63:75:fb:
5d:44:e1:ab:f4:bc:08:9d:b6:26:84:b2:7a:bb:86:f5:75:f0:
a5:0b:7a:18:43:f7:be:fe:42:ed:08:5d:cc:dd:bc:b8:17:d1:
67:3d:f1:65:b6:a7:80:77:66:bb:f0:de:e0:fb:c3:b4:6c:51:
e6:9f:bc:0b:54:7a:fc:cf:56:aa:6c:a8:f2:93:2a:60:b2:e9:
39:b9:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:31:20 2025 by rpki-client