Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
File: u-Sqx31jiC90NiBwTCTb7bGIDXo.mft (raw, json)
Hash identifier: vAhoe7ngJ3+GaPPjjU5ldiHFnB3Pf5BnGAIfnUC3eMw=
Subject key identifier: FC:5F:EF:C3:12:CA:9D:23:47:62:9F:1F:4B:0B:8B:34:8E:8E:67:1C
Authority key identifier: BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
Certificate issuer: /CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Certificate serial: 01988733547BC5E4694EE8C3607F3DC467EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
Manifest number: 057B
Signing time: Fri 08 Aug 2025 01:02:24 +0000
Manifest this update: Fri 08 Aug 2025 01:02:24 +0000
Manifest next update: Sat 09 Aug 2025 01:02:24 +0000
Files and hashes: 1: u-Sqx31jiC90NiBwTCTb7bGIDXo.crl (hash: 9SFx7K73MI1b1ySL7PwKQ+s8iKwlVMcPU93gekxphhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:33:54:7b:c5:e4:69:4e:e8:c3:60:7f:3d:c4:67:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe4aac77d63882f743620704c24dbedb1880d7a
Validity
Not Before: Aug 8 01:02:24 2025 GMT
Not After : Aug 9 01:02:24 2025 GMT
Subject: CN=fc5fefc312ca9d2347629f1f4b0b8b348e8e671c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d0:52:51:86:7c:84:58:00:1a:8b:cc:a8:89:
73:f4:fe:45:77:a2:2e:ca:78:78:09:48:24:1b:61:
3d:79:9e:0e:d5:f1:32:20:eb:eb:32:9c:e2:5c:ea:
f1:0d:ae:d6:d6:14:04:d9:6c:00:29:59:2d:31:e5:
4b:da:80:89:8e:24:6c:eb:1a:21:c9:e4:87:3c:d0:
9c:ee:5e:56:fe:28:c3:69:f9:26:e9:15:26:c9:6f:
d5:55:a5:8a:e8:57:18:5c:a9:a1:43:9d:ff:36:d6:
27:1d:2d:ab:9f:73:a0:fd:34:36:19:ed:0f:fd:db:
d6:0a:2e:ca:d0:cc:75:41:bc:30:03:18:36:50:d8:
f1:8a:b6:42:1f:fc:42:47:cb:c8:8a:96:38:e4:09:
67:3b:bf:22:fd:5a:4c:f1:e5:2e:a3:58:48:72:5c:
42:d3:94:37:34:16:22:75:97:3d:1c:4e:01:51:3a:
5f:05:fb:7b:d3:d7:31:fb:2f:47:cf:4b:09:eb:d8:
b6:61:1c:b7:b6:a8:31:43:2f:f0:fc:ee:e6:5f:1c:
3b:96:16:ee:53:44:68:cf:50:2b:8d:49:56:6e:c9:
89:53:03:59:85:8c:b3:0b:0c:e2:db:c8:2f:90:53:
f5:a4:a2:f2:4b:dc:4c:27:0f:ef:5b:7e:f7:28:8c:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5F:EF:C3:12:CA:9D:23:47:62:9F:1F:4B:0B:8B:34:8E:8E:67:1C
X509v3 Authority Key Identifier:
keyid:BB:E4:AA:C7:7D:63:88:2F:74:36:20:70:4C:24:DB:ED:B1:88:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Sqx31jiC90NiBwTCTb7bGIDXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d4d7d2-9cb2-4ce0-8665-1ba21b0e2913/1/u-Sqx31jiC90NiBwTCTb7bGIDXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:41:20:64:e2:c4:f2:be:09:06:c8:fc:05:f4:71:33:46:9c:
84:b1:f2:0e:6a:b3:07:02:6b:31:d1:6d:e2:00:ed:70:55:cf:
8d:ca:76:e2:6a:e1:33:7b:4c:32:91:7f:e2:6d:57:89:57:db:
7a:61:54:a9:85:61:4d:f4:16:f1:cb:91:85:89:56:2f:85:26:
d3:13:1b:a2:cc:5f:a4:2f:a8:f0:5c:b9:ad:79:ec:b9:81:8c:
38:05:ef:22:cd:b8:8f:72:6b:78:5a:bd:2b:4d:89:0d:a8:18:
6b:f3:2b:aa:48:4a:72:d9:88:aa:e5:65:5e:5a:14:a1:f6:ee:
e9:30:ad:84:8c:52:e9:ad:c1:c7:64:c3:5e:76:92:fd:de:78:
7f:bf:5e:62:bf:fd:27:ba:d6:96:6d:b0:f0:71:72:65:f9:d0:
eb:fd:5d:54:23:d2:8c:dd:8c:6c:64:de:56:be:25:23:c5:59:
0c:eb:77:00:d2:07:3b:63:83:4b:76:d6:5f:17:4b:88:26:51:
cb:65:3b:3a:b4:32:71:cc:61:ac:5c:18:32:64:0b:f6:17:1b:
3a:65:5c:41:46:3b:07:7d:7d:5a:35:b3:e8:01:24:a1:1e:1a:
49:d7:c3:17:68:1d:66:c3:20:f3:f6:a7:85:80:cc:c5:9d:5b:
c4:c6:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:33 2025 by rpki-client