Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: 330GkqpI1z3dz5aWp+aDfQz+DWSOnS+qyLxc8fZ83Ko=
Subject key identifier: 1F:A4:6C:01:B0:41:73:B5:CF:73:DB:E9:01:E7:E3:CE:28:1D:B9:BA
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 0198922339CEE90EA25C68E7627EE73BED96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 133D
Signing time: Sun 10 Aug 2025 04:00:38 +0000
Manifest this update: Sun 10 Aug 2025 04:00:38 +0000
Manifest next update: Mon 11 Aug 2025 04:00:38 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: vABfyR5AzDEC9sn3+CtTAiVpaT5n4EEj6s39w5vCxh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:39:ce:e9:0e:a2:5c:68:e7:62:7e:e7:3b:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Aug 10 04:00:38 2025 GMT
Not After : Aug 11 04:00:38 2025 GMT
Subject: CN=1fa46c01b04173b5cf73dbe901e7e3ce281db9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:53:99:95:1f:fb:e7:73:02:eb:4f:4f:77:
0e:5a:f0:c2:3c:46:22:6d:73:e9:96:9b:74:b8:f3:
6b:a3:a7:e4:68:4f:f4:93:a4:9b:7d:4e:5c:af:6e:
c8:84:93:60:3e:d5:15:aa:34:5f:13:f9:f7:47:3f:
fc:36:78:81:8e:fa:3b:2e:ab:6e:f0:65:59:cb:8c:
46:d1:b2:cf:ae:6f:eb:e5:b6:f5:e0:61:ad:40:fd:
38:4c:5c:e4:d0:95:18:82:71:79:50:f3:08:df:78:
8f:34:c8:86:e7:20:dc:d7:2d:68:c3:f3:17:cc:fe:
c8:fa:b6:e3:92:89:9e:60:5d:99:7d:35:83:bf:b7:
57:cc:08:8e:3d:e6:09:00:2b:f0:c5:a2:df:d9:ba:
18:cd:78:55:72:47:6d:39:dc:cd:ad:fa:80:b8:82:
3b:97:d5:33:5d:ba:29:8a:f0:0b:b4:a3:6a:7e:dd:
61:dc:b7:0f:6e:df:53:6b:75:51:b3:8e:e2:79:a0:
b7:64:e8:4c:12:18:4b:e4:69:da:bd:bd:b3:93:e7:
6f:d5:ce:1f:7b:2c:57:df:dc:91:27:db:aa:1b:18:
e4:a7:79:9e:a0:6e:94:05:12:47:44:34:55:da:f7:
32:93:4c:0b:40:28:07:bb:56:5d:36:7b:57:ea:16:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:6C:01:B0:41:73:B5:CF:73:DB:E9:01:E7:E3:CE:28:1D:B9:BA
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b5:dc:25:6f:c9:ec:21:81:e1:06:77:c3:e9:22:5d:af:6b:
1a:cf:41:e8:32:79:d7:85:79:48:31:c3:e1:99:15:8d:9c:3d:
84:0e:09:05:1e:5f:94:e9:4a:d7:04:f8:1e:14:be:5d:73:29:
cb:25:f8:73:c9:63:74:62:a9:f3:5c:54:af:39:91:2c:4e:ea:
09:4c:e2:ef:ef:0c:bb:24:57:36:7c:14:2c:cf:05:7e:32:75:
0e:40:28:dc:53:2c:d5:05:bb:c8:e4:b4:cf:6f:f8:e0:4a:21:
ce:0a:40:23:bf:2d:7b:b0:48:67:50:c0:66:9e:56:b9:f5:48:
cc:77:ce:c8:b9:90:75:c4:ff:c9:47:3b:8f:31:a3:7d:a2:f5:
d5:0a:55:0b:50:08:8e:d6:14:57:59:45:f2:12:bc:42:7b:1d:
bb:e5:d2:97:50:73:b8:3f:29:ed:16:57:bd:3c:b8:bf:1e:9e:
bd:fe:37:78:36:40:f3:a7:82:96:85:37:1f:c1:ac:fa:50:15:
96:22:dc:d2:b4:40:52:ba:0b:ec:07:cd:d1:db:33:2b:1e:50:
4e:84:52:95:ba:6a:05:78:f2:38:bf:ce:c5:05:5a:52:0d:dc:
09:c1:c2:ad:7e:77:86:05:e9:63:71:7b:b1:8f:dd:cf:92:83:
6d:80:d3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSIznO6Q6iXGjnYn7nO+2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGQwNDJjZmE3NjZlN2UyYmI2ZjBiMDRjMzdkNjAzZmZh
MzM4M2UwHhcNMjUwODEwMDQwMDM4WhcNMjUwODExMDQwMDM4WjAzMTEwLwYDVQQD
EygxZmE0NmMwMWIwNDE3M2I1Y2Y3M2RiZTkwMWU3ZTNjZTI4MWRiOWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9RTmZUf++dzAutPT3cOWvDCPEYi
bXPplpt0uPNro6fkaE/0k6SbfU5cr27IhJNgPtUVqjRfE/n3Rz/8NniBjvo7Lqtu
8GVZy4xG0bLPrm/r5bb14GGtQP04TFzk0JUYgnF5UPMI33iPNMiG5yDc1y1ow/MX
zP7I+rbjkomeYF2ZfTWDv7dXzAiOPeYJACvwxaLf2boYzXhVckdtOdzNrfqAuII7
l9UzXbopivALtKNqft1h3LcPbt9Ta3VRs47ieaC3ZOhMEhhL5Gnavb2zk+dv1c4f
eyxX39yRJ9uqGxjkp3meoG6UBRJHRDRV2vcyk0wLQCgHu1ZdNntX6hYdzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+kbAGwQXO1z3Pb6QHn484oHbm6MB8GA1UdIwQY
MBaAFEkNBCz6dm5+K7bwsEw31gP/ozg+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMt
OTYyNjJjODE5MzMzLzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kYzg3NzgtYTU3MC00ZTQ4LWFjMzMtOTYyNjJjODE5MzMz
LzEvU1EwRUxQcDJibjRydHZDd1REZldBXy1qT0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbXcJW/J
7CGB4QZ3w+kiXa9rGs9B6DJ514V5SDHD4ZkVjZw9hA4JBR5flOlK1wT4HhS+XXMp
yyX4c8ljdGKp81xUrzmRLE7qCUzi7+8MuyRXNnwULM8FfjJ1DkAo3FMs1QW7yOS0
z2/44EohzgpAI78te7BIZ1DAZp5WufVIzHfOyLmQdcT/yUc7jzGjfaL11QpVC1AI
jtYUV1lF8hK8Qnsdu+XSl1BzuD8p7RZXvTy4vx6evf43eDZA86eCloU3H8Gs+lAV
liLc0rRAUroL7AfN0dszKx5QToRSlbpqBXjyOL/OxQVaUg3cCcHCrX53hgXpY3F7
sY/dz5KDbYDTDQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:53 2025 by rpki-client