Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: FQ+D2W9SCqMUBOSvpBv5R8fP6++O2XKDcBS3DoOkKxU=
Subject key identifier: A5:0E:3D:23:8D:1F:4C:AE:5D:8D:75:CF:27:AB:E8:72:2E:FF:9E:C4
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 019890D9BA50E14534702920D2CE00021AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 06D2
Signing time: Sat 09 Aug 2025 22:00:44 +0000
Manifest this update: Sat 09 Aug 2025 22:00:44 +0000
Manifest next update: Sun 10 Aug 2025 22:00:44 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: 6f1VfW1swdkasMe8EFZZQcnAh84X8KHT9jYcEGe13Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:d9:ba:50:e1:45:34:70:29:20:d2:ce:00:02:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Aug 9 22:00:44 2025 GMT
Not After : Aug 10 22:00:44 2025 GMT
Subject: CN=a50e3d238d1f4cae5d8d75cf27abe8722eff9ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c1:44:ca:34:30:67:58:82:b9:a0:06:3c:8e:
4b:66:04:3e:43:f5:50:bd:86:5c:df:c6:7f:9d:1d:
03:af:d3:74:d7:8e:09:e9:52:6d:54:95:15:50:7f:
0b:ac:ac:7a:d6:3a:0f:9c:08:31:b4:91:27:99:ea:
31:73:9c:12:a0:e5:79:7f:7f:88:0d:7b:1d:1e:99:
35:3b:cc:7c:26:2d:d3:76:7d:52:0e:e7:23:bb:d0:
c5:88:b3:ab:b6:8e:e9:22:13:84:f5:59:3b:3e:c2:
50:0c:16:0f:e6:f0:4c:b3:62:a1:a8:32:e8:86:15:
2a:de:52:f6:14:53:87:a3:e8:17:23:50:d1:92:7e:
50:ba:ad:f1:ac:50:5b:ac:fb:e9:a8:fe:86:f0:b4:
5f:cb:37:cb:c3:ad:28:34:50:e9:60:c9:ea:a4:80:
e0:89:67:b0:80:bd:6b:ba:a4:5b:d9:5b:ac:5d:5f:
67:26:33:6e:2b:7a:7b:bd:a1:fd:61:df:51:ec:92:
fc:49:0f:cf:36:e8:2e:16:e0:fb:7f:3f:95:9f:d7:
dd:c3:0e:39:50:eb:e8:e1:de:5d:cd:64:1f:64:76:
5b:f2:c4:81:27:a9:29:b0:5f:15:21:59:11:9a:7b:
cf:95:1b:a4:83:04:10:47:fe:50:d5:1d:46:e7:73:
b1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:3D:23:8D:1F:4C:AE:5D:8D:75:CF:27:AB:E8:72:2E:FF:9E:C4
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:89:41:85:ed:79:99:93:c2:d6:60:a4:a4:d3:a0:a2:61:a1:
5d:d0:60:36:c7:2b:6a:17:e7:9f:eb:3d:8e:c8:5b:40:8d:02:
47:28:b8:d9:2f:d9:7e:15:c0:91:d5:36:ad:93:6f:99:0f:da:
3f:4e:de:9c:f5:ee:05:9d:75:e4:b3:96:cb:b9:c1:42:24:6d:
ca:ff:44:03:41:d6:0a:57:ca:27:76:48:9e:98:aa:d9:29:39:
99:1e:c1:fb:10:ea:eb:e6:34:a4:7e:8a:6e:b5:7b:34:77:2e:
8d:04:ab:d7:60:9b:f3:4d:44:9c:e4:de:e8:fd:cd:77:42:ce:
f5:7e:66:21:b7:47:fc:9b:6e:33:94:ae:3d:57:38:de:5b:e9:
bd:f6:b1:ef:0d:fc:ce:9a:61:e7:4f:b4:a9:c4:bd:a7:65:24:
5d:4d:19:cf:e2:26:ab:d2:ea:5d:4b:2e:1d:cb:4f:f9:60:a7:
97:7b:84:1d:21:fe:28:17:99:23:1e:aa:22:5d:c7:04:68:40:
10:e7:8d:82:93:47:b5:cb:5d:ad:55:9b:a5:1c:97:52:21:c0:
be:e6:bf:0b:86:ac:bd:10:99:de:b5:65:95:11:1e:a2:ca:bc:
77:1f:7d:db:a2:66:be:c7:8f:10:69:53:f8:31:5c:60:05:ca:
c2:12:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:27 2025 by rpki-client