Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: 7oHWoudeleZUZBB5KWZki6Otjtd5iQ6cfBDcGyz/2T4=
Subject key identifier: CD:8C:7D:B8:10:9B:59:6D:A0:46:6A:6F:E3:A2:29:15:A5:0E:67:16
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 01976BF4129AB4BAB53FDF462CE9E8BBDE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 151C
Signing time: Sat 14 Jun 2025 01:00:46 +0000
Manifest this update: Sat 14 Jun 2025 01:00:46 +0000
Manifest next update: Sun 15 Jun 2025 01:00:46 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: 0Kzt+fB/XXcOE8Yxu6WRJsMCpnJ3SQl+99Ed329GhJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:12:9a:b4:ba:b5:3f:df:46:2c:e9:e8:bb:de:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Jun 14 01:00:46 2025 GMT
Not After : Jun 15 01:00:46 2025 GMT
Subject: CN=cd8c7db8109b596da0466a6fe3a22915a50e6716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b0:0a:e4:49:0b:ed:cb:46:64:df:61:d0:e2:
64:d2:d8:bd:b1:1f:e6:b5:f1:11:da:8a:97:25:b5:
4e:47:22:66:bc:33:96:ec:8d:02:9a:3e:6a:4f:72:
5d:9f:e5:11:40:80:d2:0f:e4:23:57:10:70:fe:40:
3d:98:85:45:04:99:a3:63:8a:46:54:de:4f:a2:e0:
6f:db:a4:9d:dc:44:fb:68:6c:12:c5:ab:65:32:92:
58:90:e0:dd:e4:cb:5d:d0:7a:34:44:d1:51:28:bd:
9f:53:cc:98:6d:be:53:61:30:42:dc:19:cb:2a:c4:
04:24:de:19:3c:e7:9e:bc:02:ab:48:d3:18:45:64:
d7:d3:46:14:fe:d8:6f:8e:6f:e5:a0:bb:3f:8a:f7:
32:04:21:c3:d9:41:bd:f2:54:04:9e:1a:c5:58:63:
7a:16:59:17:cf:3d:7d:70:fe:72:9b:c0:8d:df:8e:
85:c5:56:39:12:da:b2:2c:9a:e1:2c:ac:83:c8:1e:
0a:b5:a0:c3:15:49:83:dc:72:1b:33:7d:19:34:42:
ec:bd:dd:db:a6:fd:40:75:21:e4:2a:2e:72:3f:7e:
db:25:39:d0:0e:a8:0f:4c:c5:f7:70:11:60:3f:e2:
45:39:84:9c:98:33:4b:ec:0d:ea:26:61:10:7f:dc:
9c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8C:7D:B8:10:9B:59:6D:A0:46:6A:6F:E3:A2:29:15:A5:0E:67:16
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ed:7f:64:e9:df:23:f1:66:dd:e4:86:8c:16:16:7d:ec:01:
44:64:b0:bb:31:b7:93:10:4c:cd:27:09:69:8a:a9:40:1a:f3:
01:d6:db:72:4d:8a:70:d6:de:ec:90:8a:83:19:b1:b8:d6:de:
05:f2:98:b7:d8:4e:45:a4:c0:46:4e:a0:63:7b:fb:11:af:93:
0c:6e:a1:b7:f6:f3:7e:f7:48:31:37:cf:b8:3b:bb:c6:4f:31:
8f:cc:35:55:67:5f:11:13:90:ba:06:39:2d:8d:e0:66:66:85:
2e:05:d7:f9:96:e7:4c:1b:14:d0:e1:11:7b:9d:76:f3:a5:87:
0a:fe:3d:78:6c:e8:63:d2:f9:55:a2:54:56:e4:94:7f:96:a8:
dc:86:62:04:fc:c7:96:20:56:ce:24:c2:86:b4:b5:80:e9:68:
7f:b3:63:13:28:6c:21:d3:fb:4c:53:de:ad:6f:76:fc:f5:3f:
cf:f5:c6:3d:69:ba:92:55:68:03:82:ad:30:38:70:7b:d9:fd:
20:c6:58:3d:05:cc:ba:b2:82:62:ce:05:28:fe:8e:3a:d7:c6:
9d:63:d7:ef:69:87:4e:5b:f4:b4:af:95:a7:16:3d:91:bd:39:
92:e4:ae:8f:f1:ff:88:02:f7:fd:09:dd:25:9d:d8:62:d9:2b:
ef:a5:7e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:32 2025 by rpki-client