Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: DXG0FZsUA0bvPzMNuSl8w9vc8SviFCBLRUixeWY99aA=
Subject key identifier: 9C:42:64:3C:C6:6F:35:EF:D0:AE:7F:D9:C1:16:B8:39:74:E7:B9:AD
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 019680592FD2E8DA6909F0DE7A62970B6514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 14A2
Signing time: Tue 29 Apr 2025 07:00:50 +0000
Manifest this update: Tue 29 Apr 2025 07:00:50 +0000
Manifest next update: Wed 30 Apr 2025 07:00:50 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: V9ta9l507sKaNlZPIeP1Bo4893DsnKwRflWC+KvNYQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:59:2f:d2:e8:da:69:09:f0:de:7a:62:97:0b:65:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Apr 29 07:00:50 2025 GMT
Not After : Apr 30 07:00:50 2025 GMT
Subject: CN=9c42643cc66f35efd0ae7fd9c116b83974e7b9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b5:ad:29:1a:97:5e:00:c9:18:4e:d6:a1:0b:
a1:82:dc:47:56:49:4c:37:70:bb:3d:f8:e5:01:64:
ea:98:05:ae:c0:d1:1c:c7:c3:02:3f:a5:3b:0f:cf:
3f:68:08:76:c8:9b:51:ed:bd:41:f1:b0:4f:55:5b:
f4:7e:60:a9:0d:18:15:22:59:46:90:61:40:d2:06:
d9:1b:5a:e0:10:80:2c:ed:c4:32:b7:0d:85:09:7e:
f4:c6:dd:9c:40:29:9e:c9:1b:b1:fa:21:18:8a:5c:
03:c8:ac:68:ce:4c:7d:13:2c:b7:ac:a1:3a:dc:cb:
12:d6:8e:b5:1a:c1:aa:c3:8d:dc:ca:54:74:50:98:
9e:33:27:55:88:d0:15:0b:0e:69:9d:e1:76:b3:1d:
67:dd:0e:ed:ab:e3:d8:32:5a:73:8a:1b:62:3b:00:
84:07:ec:43:fe:c9:fe:be:bc:a2:90:2b:80:70:65:
3c:bb:ee:32:04:2e:64:67:d8:24:6c:fc:09:85:2e:
fc:db:bf:0a:c4:dd:d4:b9:65:4c:55:5b:e7:02:df:
11:e3:ed:c6:16:8d:b0:c9:d0:21:a6:b7:50:3e:34:
55:f2:97:a8:0a:de:ce:d8:ba:d0:90:b2:6d:9e:b9:
48:81:77:e2:2a:86:41:ff:85:29:40:9e:1f:f7:1b:
72:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:64:3C:C6:6F:35:EF:D0:AE:7F:D9:C1:16:B8:39:74:E7:B9:AD
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:93:19:05:cb:56:6d:36:04:37:e0:93:fc:6f:88:cf:98:93:
de:b8:77:2b:bd:12:ca:07:8d:92:15:0f:f7:53:d9:4e:12:0f:
5f:26:73:31:3c:64:f6:f4:b0:e5:2b:12:e1:25:2e:1d:4f:dd:
3a:ff:96:dc:d3:d3:fe:85:38:83:57:cf:65:d3:95:ed:de:c1:
8a:6e:39:f4:cd:32:8a:8f:78:e7:88:a2:43:3b:c0:dc:14:28:
93:cf:89:66:cb:b0:d3:df:0f:9b:dd:17:2a:49:e2:db:63:4f:
28:93:1b:5b:14:da:96:81:e8:00:52:d9:7a:2d:a0:f4:c8:9f:
14:87:d8:f9:45:88:37:50:ad:57:ad:94:dd:54:18:62:7a:c8:
e4:cb:93:f0:cc:0b:bb:31:d7:d1:d8:19:71:7f:9b:b2:58:68:
bf:f0:2f:a8:b4:79:a5:55:ca:fa:00:2b:c2:5e:b0:6c:5b:60:
55:5f:6a:e2:46:2e:50:f3:8b:bd:d0:20:86:47:4d:87:25:8f:
a0:2d:27:36:d2:40:30:1b:ee:cc:29:7f:7e:6e:40:85:02:bc:
9a:1c:a0:fc:c7:f5:04:df:43:50:2e:b5:71:6e:a5:8d:34:3e:
b6:3e:f2:f0:ea:76:2a:51:d0:85:40:5c:fb:9c:34:28:b1:9c:
ac:07:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:28:26 2025 by rpki-client