Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier: fLfGUJVxiTQ+5MkvYVj+T4M6T2MtiABQ03IrrogzHgM=
Subject key identifier: 3D:33:43:1E:23:55:D4:2E:63:7D:9B:B5:A6:4E:3E:5E:81:F4:F6:95
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial: 01976EBDC2A5B4513F01F3A303B29B9EFEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number: E5
Signing time: Sat 14 Jun 2025 14:00:19 +0000
Manifest this update: Sat 14 Jun 2025 14:00:19 +0000
Manifest next update: Sun 15 Jun 2025 14:00:19 +0000
Files and hashes: 1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: shGExQpZOrE95q5skimJ9SoIfeVhYRoOQexVGh0TiiU=)
2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:c2:a5:b4:51:3f:01:f3:a3:03:b2:9b:9e:fe:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
Validity
Not Before: Jun 14 14:00:19 2025 GMT
Not After : Jun 15 14:00:19 2025 GMT
Subject: CN=3d33431e2355d42e637d9bb5a64e3e5e81f4f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:1e:a6:b5:34:3c:0b:5d:d4:ba:ae:ad:a9:
82:14:3e:9a:e4:cb:ca:32:d1:ae:ef:b5:47:55:82:
a5:3d:bd:b2:6e:c2:a4:e4:fd:85:8e:b2:d6:98:b8:
1b:c2:c8:bc:d7:30:ed:ef:3e:8d:c7:13:35:34:85:
98:29:6e:73:77:31:6a:f3:3d:86:de:14:60:3e:02:
99:12:3a:a4:d8:34:bc:09:47:e7:8e:f0:4a:35:67:
a6:ed:2b:69:84:56:27:e4:53:5d:66:4a:fa:f8:dc:
74:b4:57:84:22:c8:93:cd:e6:10:2e:74:99:c5:c3:
51:48:17:52:be:b0:fc:74:ce:06:fa:75:69:53:40:
f7:87:a9:a3:95:5b:6e:ef:47:ac:47:ee:33:a3:af:
7e:f7:27:1c:a1:de:e9:ca:47:72:ec:61:3f:03:fb:
ee:4f:6e:9c:ca:60:e5:fb:ab:e5:92:d4:cd:0a:3d:
00:57:06:70:6d:9b:9c:45:01:95:99:39:85:bf:dc:
a9:cb:2b:95:ff:c5:90:48:5d:21:f7:51:3b:73:0f:
dd:59:70:50:1c:69:c8:4e:d7:d8:ba:ae:2c:80:ed:
bb:0f:2e:75:c4:3e:18:1b:66:15:8a:92:c0:f5:de:
0d:cd:2f:3f:75:32:46:91:a9:db:2f:6b:36:02:72:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:33:43:1E:23:55:D4:2E:63:7D:9B:B5:A6:4E:3E:5E:81:F4:F6:95
X509v3 Authority Key Identifier:
keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a0:36:71:a7:a5:d0:51:3a:20:f4:b6:78:62:7b:39:a6:42:
73:62:55:ff:03:83:b1:e2:c1:8c:2d:ae:8b:5e:a3:92:68:52:
4a:46:ce:88:ca:d6:c4:fc:47:f5:6d:1f:62:39:d8:a3:81:90:
11:70:fa:eb:c3:d9:d7:24:e5:8e:59:37:47:0d:e1:c2:60:64:
9e:24:00:65:e1:77:52:8b:44:cb:21:d4:a4:96:2d:4d:08:db:
24:f2:f7:5b:a0:6f:29:61:99:bf:04:36:c0:b0:ab:08:f5:7c:
c4:78:7e:ea:d1:3a:04:34:4b:27:21:a8:49:d2:ba:ad:48:7c:
2e:7b:2f:b9:77:53:5d:89:94:d4:18:9b:7d:a7:01:15:d4:5e:
78:9d:f5:bf:6b:da:24:f0:38:71:2f:45:fc:85:bf:1f:51:d4:
46:9d:92:02:ac:5f:67:0b:28:23:66:9b:68:6d:17:39:1b:48:
cd:ca:aa:0d:a2:d3:ab:e7:bb:c9:b2:7b:ae:10:ea:25:c5:fb:
b8:f6:78:6b:9a:7e:44:8a:74:75:b2:3e:b9:67:20:88:b4:87:
4f:a0:ec:d8:2e:a5:61:5c:52:9d:c7:fe:2d:61:8f:0d:e8:43:
f8:89:0a:d4:13:a3:5e:b6:08:8c:ca:f7:68:78:a6:18:23:3b:
a9:5d:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:47:39 2025 by rpki-client