Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: GAiuul96fIhs9yBuiwAWsToCMm32cZaR80IXE4FXU70=
Subject key identifier: A4:88:4F:6F:D7:22:5D:A6:D0:71:F9:BA:06:2A:24:73:19:7E:21:CE
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 019873E23D3CA65F8F3F8789BD8B3F5A153E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 0FA7
Signing time: Mon 04 Aug 2025 07:01:03 +0000
Manifest this update: Mon 04 Aug 2025 07:01:03 +0000
Manifest next update: Tue 05 Aug 2025 07:01:03 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: wYgAI1wlG9USz5f7NHqPQSIky6wo6VPWtP+C5P5cuNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:3d:3c:a6:5f:8f:3f:87:89:bd:8b:3f:5a:15:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Aug 4 07:01:03 2025 GMT
Not After : Aug 5 07:01:03 2025 GMT
Subject: CN=a4884f6fd7225da6d071f9ba062a2473197e21ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:32:ba:6f:ea:04:c6:0d:d1:33:a4:40:9d:
7b:96:b5:67:ca:3c:d4:b0:e1:6d:61:f9:4a:a2:90:
c0:56:0c:30:c3:a7:de:be:29:f0:11:80:54:4e:e2:
a7:df:c5:d6:27:9e:cc:05:96:66:7b:e5:d5:7a:f1:
a5:f1:24:44:82:9a:85:34:1c:54:a9:8f:8f:0a:5c:
a2:51:a5:4d:50:46:19:1c:28:34:74:e7:e0:d9:23:
6f:5f:b5:cd:46:77:dc:f9:ca:3d:90:1e:e6:2c:27:
52:84:27:99:b6:2a:ea:12:f6:6f:32:42:2f:fc:2c:
a7:19:78:fc:b6:30:d7:fb:82:cd:0c:c1:4d:9e:08:
81:6c:50:bf:f2:19:a7:dd:61:29:04:6e:3b:1a:8f:
dc:6c:c5:0e:b4:75:be:da:b8:e0:6c:43:de:8a:e5:
63:d5:6d:9d:10:84:8b:c4:9f:44:bd:a4:78:24:0c:
dc:76:77:67:85:01:9f:67:d5:55:82:12:7c:e8:66:
56:d5:46:23:20:8f:53:46:c0:1e:17:c2:f7:c7:07:
1c:4b:7f:16:ea:d2:e6:17:7c:75:a5:d8:5a:35:aa:
3e:b7:46:4b:d9:a2:f2:44:23:20:4a:99:80:e4:16:
a0:03:25:d4:ba:d0:ad:35:b9:fc:52:79:bb:9e:11:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:4F:6F:D7:22:5D:A6:D0:71:F9:BA:06:2A:24:73:19:7E:21:CE
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:65:75:49:0c:41:47:43:c8:04:34:e1:ac:4b:9f:8f:a1:
b9:32:da:31:8f:0d:f8:bb:a8:5f:ee:df:fa:13:9b:4c:1b:cc:
36:48:03:8d:89:57:01:9c:8f:dd:8a:0f:57:f1:9d:a1:8c:cc:
32:1f:44:aa:b9:c8:85:69:c1:10:0f:7c:37:4f:8f:8a:e9:e0:
03:0f:ca:09:3d:87:5a:ab:ed:3d:33:a1:17:96:bf:64:ec:f5:
06:f7:bc:54:27:3e:36:67:21:02:9c:e9:aa:af:1e:e5:a5:de:
95:f1:9e:3b:86:bc:73:de:b0:c9:fa:a2:c9:57:dc:40:c7:d8:
55:9a:34:48:5b:81:a4:d2:a1:e3:52:3c:b4:48:30:6c:c8:41:
a7:ea:1b:5d:9b:64:d2:06:ff:5e:2d:65:18:f9:b7:2a:f7:74:
fd:0e:3d:4c:90:79:43:e4:f0:a6:e1:97:2c:1c:f8:a8:14:22:
d8:e2:a6:f2:aa:c2:4e:ff:53:95:24:a0:85:6b:26:74:91:e3:
5e:2b:3e:25:22:10:4c:6f:a6:cf:c2:90:df:66:9c:ad:33:89:
fa:0d:1f:70:b4:ad:bd:df:31:8d:52:22:3b:87:be:72:84:1d:
55:32:43:88:90:85:fd:0e:72:e0:35:b2:97:24:15:81:2c:35:
a9:95:3f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:16 2025 by rpki-client