Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: QM3j+X8itws0UHXfsLPQ8DGOVaplcmgEBASxOQLrh4I=
Subject key identifier: 7E:9C:89:F0:BA:68:A0:AA:15:28:2C:B2:C6:A8:DB:75:EF:0E:0E:3C
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 01976F2CD80C44BFA58FF306AA4218E3927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 0F20
Signing time: Sat 14 Jun 2025 16:01:39 +0000
Manifest this update: Sat 14 Jun 2025 16:01:39 +0000
Manifest next update: Sun 15 Jun 2025 16:01:39 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: /VFrkOOSNEMPXhEBjBvWdXXT22QmZl3KywhNGrnILAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:d8:0c:44:bf:a5:8f:f3:06:aa:42:18:e3:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Jun 14 16:01:39 2025 GMT
Not After : Jun 15 16:01:39 2025 GMT
Subject: CN=7e9c89f0ba68a0aa15282cb2c6a8db75ef0e0e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:3e:ea:69:2a:1b:03:7a:cd:5c:9d:0d:a7:
51:a7:d7:98:c6:28:b9:b4:f3:df:ca:9a:6e:7e:a5:
3d:d9:fc:8d:bc:6e:a5:d8:db:2d:12:20:82:46:ad:
1e:4b:e9:b4:a0:ec:7a:89:05:e8:50:33:82:de:96:
94:5c:68:63:6e:59:8d:3a:5b:5e:56:11:6a:29:ec:
6b:e6:28:e9:1b:92:98:1f:ba:a6:3a:37:57:09:8d:
a8:0e:11:dc:ed:9b:1a:aa:a9:fe:46:19:4d:66:49:
b4:e6:2b:cc:a2:73:a6:20:03:b1:19:06:9d:c3:80:
36:c4:6c:a9:07:8a:13:40:b4:8b:b0:7b:9b:30:2c:
ca:73:b8:d2:9c:95:64:05:65:73:ec:c0:d5:78:b0:
74:ef:5d:3a:04:2e:d1:9f:2f:86:b6:61:10:12:df:
8f:d8:a1:73:35:96:e7:b7:e3:c2:ad:ff:e2:24:ca:
7d:67:0b:1a:f9:9e:be:83:16:2d:00:ab:de:76:e0:
07:b2:14:92:25:66:19:55:f6:88:c6:55:01:c6:d4:
97:b2:f2:7d:63:ce:e2:fe:a8:b4:38:03:48:5f:30:
96:b5:17:7c:e6:c7:84:19:be:fe:5e:a6:1b:84:bd:
65:bd:0c:84:a7:78:54:d3:a6:a6:b9:a8:9e:f0:2c:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:89:F0:BA:68:A0:AA:15:28:2C:B2:C6:A8:DB:75:EF:0E:0E:3C
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:45:a6:40:44:de:27:50:2e:3b:ff:32:7b:3c:46:52:06:
e8:af:05:11:65:84:3e:55:34:fa:35:59:9b:5e:17:40:c4:b6:
c3:44:b4:7c:30:4b:93:8e:28:46:d6:f8:51:5c:a2:26:28:58:
84:f9:73:38:4e:cb:9e:78:4e:95:65:7a:a1:a8:b1:e3:fc:b6:
74:80:b2:94:97:5a:bf:c3:42:30:58:d2:ce:e1:7b:93:0e:ad:
b9:d7:92:85:85:b6:6f:f2:02:98:6c:ba:e9:0b:91:da:4b:3f:
4a:80:08:a0:50:ed:65:79:2f:01:3b:2b:35:85:53:be:f7:99:
f8:0b:28:5e:05:28:31:42:6c:97:46:f9:4f:19:0f:b4:80:80:
b8:6c:ca:a8:f6:d1:b1:87:f0:54:b2:34:3d:33:ec:9d:46:79:
af:52:50:73:30:cc:08:52:98:7b:37:96:56:0d:e9:4b:81:5b:
ab:c8:e3:aa:13:d9:74:d3:6d:07:bd:06:18:6f:e4:e0:4b:b0:
c4:c6:88:fb:12:f8:e0:69:3c:33:99:fa:42:88:c0:8f:de:84:
6a:41:b8:f9:43:f5:ff:20:e7:be:da:60:3f:94:e9:e9:68:a7:
02:85:bd:f5:be:e3:5b:c8:8e:3b:bd:db:e1:62:df:ca:d0:22:
4e:c2:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:52:30 2025 by rpki-client