Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: hWzXs2E4KeUyjGgjfPB3it3R5zZJca5G+yXkwZUgtb8=
Subject key identifier: 19:B5:1B:CB:A5:9A:53:46:80:25:75:E2:9E:CF:2B:A9:E7:36:B7:FF
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019768BC1CAEAF7085F3E26FF78C9C318C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 12B6
Signing time: Fri 13 Jun 2025 10:00:47 +0000
Manifest this update: Fri 13 Jun 2025 10:00:47 +0000
Manifest next update: Sat 14 Jun 2025 10:00:47 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: ASa1hHzIeWhqHA+ygcFRMNRePlZPgEEKYPcNf5gtGg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:1c:ae:af:70:85:f3:e2:6f:f7:8c:9c:31:8c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Jun 13 10:00:47 2025 GMT
Not After : Jun 14 10:00:47 2025 GMT
Subject: CN=19b51bcba59a5346802575e29ecf2ba9e736b7ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:9b:43:83:42:51:31:ec:1e:09:41:68:f3:
bb:53:42:d2:bf:e4:25:22:8b:0d:85:8d:92:9e:8b:
11:15:06:ce:5d:d2:2a:69:a6:9b:5d:f6:db:ec:c7:
94:cd:84:5a:9d:20:c9:8a:e8:46:d4:37:f6:a0:51:
cc:87:36:3a:b7:2d:e8:87:ad:33:26:84:9c:bb:0c:
7c:27:dd:9f:09:98:f9:5d:d3:66:6f:83:19:c1:9c:
29:d9:3f:a1:a1:29:49:20:db:76:a9:93:66:f5:81:
02:a1:f9:30:9f:44:7a:16:3d:6f:c2:c3:81:ef:f8:
1e:66:2c:6e:a5:c4:26:26:01:6f:b7:a4:91:be:a7:
38:7a:df:ea:ea:ba:a7:53:47:81:6a:91:c4:6e:51:
87:1c:14:34:4f:93:39:f3:a2:9d:33:34:f1:df:db:
83:41:5d:4a:8d:3d:ca:81:b5:23:40:57:3d:8a:90:
5d:93:26:6b:1b:e0:9a:85:89:71:94:1d:49:53:cd:
bc:29:b2:53:80:f6:b1:85:9a:67:4a:f4:41:43:ca:
28:00:35:27:13:c6:4f:89:88:cd:67:d0:48:71:df:
46:e9:ec:12:fa:e4:2b:21:81:47:6a:d1:b4:74:b5:
8d:50:b2:db:95:b1:2c:c6:84:be:9c:d5:9b:21:87:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:1B:CB:A5:9A:53:46:80:25:75:E2:9E:CF:2B:A9:E7:36:B7:FF
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:11:63:4e:d9:e0:15:6a:d6:fb:ae:9b:03:ff:3c:2a:bc:
71:bf:be:13:18:0e:7c:7f:86:fb:72:59:15:74:eb:d9:f2:2e:
21:65:3b:96:27:d4:78:95:f0:bb:68:6c:a7:38:05:bf:fb:c2:
2f:93:f5:7f:d7:08:2d:86:49:db:fc:3f:59:95:cc:5a:cd:70:
72:03:87:0f:6a:fa:4f:e4:ca:fb:9f:3b:a2:b9:40:ad:16:82:
d8:df:f2:a8:97:b3:18:04:20:fe:e5:72:02:8d:5d:c8:7e:95:
ff:87:31:bb:1b:80:cb:99:76:b4:f8:9e:b2:bf:d4:9b:cc:9a:
ef:8a:ee:57:02:22:09:c4:6e:b3:bd:ee:3a:8a:f1:0a:b5:88:
e4:db:26:ef:dc:c5:63:29:d6:97:e1:2c:b5:cf:c2:d7:39:50:
06:27:e8:6f:4c:03:d8:51:ce:7c:3f:c4:ff:df:e8:df:f9:e2:
74:9f:a0:63:c6:c4:5c:7a:ca:cb:0e:df:53:1e:5c:a0:7b:59:
7c:d1:f3:c0:cd:50:b2:44:a4:2e:a1:5e:81:85:6d:93:1b:c7:
07:93:12:3a:8e:1e:0d:d9:5a:24:1a:d1:27:59:c0:59:49:64:
d5:ba:42:0d:48:fa:46:92:e7:7f:d4:90:3b:4a:58:db:6b:5e:
ef:60:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:03 2025 by rpki-client