Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: ytOUMWS8AcboJESNSTb+UAPNRYm5lisJA+GPEq63sdk=
Subject key identifier: D0:AB:42:34:62:F4:BB:8C:D9:F6:08:42:16:23:BC:3E:D4:F0:5A:67
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 01978EB6857BA1F055AD2165E1DC27C9FC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0B7E
Signing time: Fri 20 Jun 2025 19:00:15 +0000
Manifest this update: Fri 20 Jun 2025 19:00:15 +0000
Manifest next update: Sat 21 Jun 2025 19:00:15 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: QUmcJctq0Ucqv7q6jU48FdXu/kH3hxXVq3wNp3EFvrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 19:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:b6:85:7b:a1:f0:55:ad:21:65:e1:dc:27:c9:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Jun 20 19:00:15 2025 GMT
Not After : Jun 21 19:00:15 2025 GMT
Subject: CN=d0ab423462f4bb8cd9f608421623bc3ed4f05a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:05:98:9c:63:93:8a:04:db:07:2b:e9:23:
7a:0d:49:e5:cb:9b:b5:4b:0c:0c:80:96:a5:f7:22:
76:51:9a:10:7c:51:c8:6a:46:dd:c3:ef:5c:42:8c:
dd:f5:c5:83:8b:17:9b:78:6e:82:b0:37:5c:d8:80:
b0:19:d8:1c:5e:c2:57:4d:61:d2:68:e1:59:5e:38:
65:66:a9:84:4d:31:19:43:50:33:97:fd:37:17:bc:
f5:4e:e7:33:a4:72:63:64:e9:95:d5:e6:46:db:38:
90:ab:61:0e:a3:c5:6f:2c:07:69:f8:1c:f1:81:2e:
bf:fb:14:c7:b2:b0:89:eb:9f:b2:95:0d:30:01:2e:
17:f2:12:d6:80:24:79:e9:c6:74:aa:55:38:67:a2:
c6:03:2a:18:79:d8:36:db:e8:21:b7:03:95:0d:19:
4f:a6:6e:27:2f:66:2b:28:c0:c7:94:eb:6b:6e:4b:
49:3e:2d:a0:ab:0a:90:95:3b:51:22:9e:2d:c1:56:
c5:d2:c6:72:04:37:d1:d7:57:06:7c:e3:b3:1a:18:
25:62:87:8a:12:6f:f7:51:b4:dc:75:3e:26:e0:00:
93:dc:19:78:e2:3d:c4:1d:8a:35:3b:b3:ec:43:44:
2f:aa:f9:c9:2f:2b:3c:c0:11:99:b1:5e:75:8a:6b:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AB:42:34:62:F4:BB:8C:D9:F6:08:42:16:23:BC:3E:D4:F0:5A:67
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a6:f4:88:0b:5b:68:b9:f1:2b:c7:ef:df:15:0e:c5:45:cf:
ed:7e:9c:07:06:7b:90:7e:7c:8c:95:bb:18:23:80:56:c2:d5:
43:4d:89:9d:a4:d3:91:76:40:8e:b9:a8:6c:0b:ce:1b:07:1e:
f3:4b:34:1c:11:1f:8f:f9:14:96:48:22:5d:b2:3b:61:1c:08:
47:31:b4:7b:02:ae:b1:0f:87:74:0f:ce:43:70:75:6d:55:b5:
60:07:32:85:e0:45:71:3f:f6:70:65:fc:76:99:3b:56:ba:3f:
79:77:6f:74:0a:bb:22:fa:1b:71:47:1c:bc:99:d8:26:fd:e9:
80:b4:5e:09:8c:1c:75:1a:18:5b:be:3b:b4:21:96:9d:65:62:
71:eb:50:12:ef:96:92:0d:0b:08:46:d5:0f:a4:0f:2c:a9:1e:
3b:e6:f6:2f:20:94:94:e4:86:20:d3:77:b3:46:8a:1d:ce:ac:
6f:da:2b:10:92:92:76:7b:2e:a0:24:a5:ec:7d:56:ca:92:95:
6c:1b:0c:78:1d:1c:9a:cb:09:15:4e:c8:3c:4c:a1:05:7c:f5:
59:d9:de:42:fc:9b:82:b4:b1:77:49:19:1f:82:8e:ae:ee:76:
18:68:3f:b9:cf:47:42:7e:0c:c4:d4:7a:e4:67:5f:e1:76:e9:
04:32:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 02:53:16 2025 by rpki-client