Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier: +ekijSoC7I+71Md4RxZWO+DUOeId3yasNDaAzDN3uDc=
Subject key identifier: 36:1C:4A:8E:77:83:1B:AD:29:29:BE:0D:E6:86:4C:09:3A:E9:7E:1A
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer: /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial: 01976960B2FB5C4E01A306EA920403A348CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number: 0E89
Signing time: Fri 13 Jun 2025 13:00:34 +0000
Manifest this update: Fri 13 Jun 2025 13:00:34 +0000
Manifest next update: Sat 14 Jun 2025 13:00:34 +0000
Files and hashes: 1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: C9rsaCLkO4bDa35FA88ESn4qLMG0F/qGZKdxSNQB8l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:b2:fb:5c:4e:01:a3:06:ea:92:04:03:a3:48:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
Validity
Not Before: Jun 13 13:00:34 2025 GMT
Not After : Jun 14 13:00:34 2025 GMT
Subject: CN=361c4a8e77831bad2929be0de6864c093ae97e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cc:45:3f:75:68:ad:e1:15:e8:59:ae:3e:f6:
c5:57:f6:fb:c7:99:95:ad:d0:4c:21:18:7c:58:bf:
10:17:01:27:a3:b8:08:2a:61:20:d6:50:e1:bc:95:
fc:9e:d8:78:82:35:33:e9:ab:74:16:b0:1c:70:f6:
67:da:a4:35:5a:25:23:f8:4c:54:57:7c:b5:ea:9b:
eb:4f:fa:2e:e1:2c:c9:c0:bc:df:00:f3:f0:80:3f:
70:a5:21:70:d9:e2:01:0f:07:a2:a7:73:0b:3c:24:
b8:72:f1:9e:38:53:aa:1b:aa:5e:34:c6:f6:ec:f7:
7a:c7:05:f3:5a:30:10:b0:ba:23:13:87:cb:3a:eb:
ff:6a:ef:71:4e:cb:d7:98:0b:8d:d2:8f:a6:0c:0e:
4b:9b:29:68:18:ec:13:77:58:57:56:5f:2c:8f:4c:
fc:9c:ba:b8:fa:12:8b:e5:01:54:0a:25:f8:be:cf:
0d:5f:66:d5:4c:05:61:f9:cf:7e:2e:87:a5:16:9a:
83:ed:7b:81:0c:34:1b:5b:37:99:1c:94:d1:91:c7:
86:5a:07:5e:85:bb:d6:ab:85:0e:58:84:2a:b1:1d:
85:82:13:a3:39:fb:7a:5c:43:82:1f:b0:4c:83:59:
91:ca:2f:e6:9b:3a:7a:fd:ce:8d:fd:7c:2d:f3:c6:
ea:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1C:4A:8E:77:83:1B:AD:29:29:BE:0D:E6:86:4C:09:3A:E9:7E:1A
X509v3 Authority Key Identifier:
keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:3e:b9:f6:3a:30:47:1c:7d:5d:64:d0:8b:61:a0:c2:19:
9a:b5:98:f3:c1:99:55:4d:27:c9:f4:53:7a:06:2f:ca:94:c3:
13:da:bf:31:c7:75:c5:29:a7:84:9c:1a:0f:7b:d9:3e:e8:75:
11:c1:2a:ae:67:21:df:78:ac:29:f5:50:bc:72:b7:1e:cb:50:
03:f1:17:33:6f:5e:70:8a:cd:fb:dc:7f:c6:c6:ab:1a:27:2e:
f5:76:21:0e:c4:33:7d:fb:78:95:fb:ef:af:ca:b9:9f:c6:ec:
d4:45:94:c3:ea:f5:20:db:41:c3:94:a1:69:6f:9e:a0:5c:e7:
31:00:dc:b3:ce:c4:1d:2b:90:c2:cc:79:c4:68:b4:4c:c1:e4:
fa:19:03:1f:ed:8d:7b:e8:bf:3d:4f:1e:db:e4:1e:a5:41:2e:
b4:61:c0:a0:07:d4:d7:a9:85:1c:00:31:b2:52:c5:d5:de:9c:
8b:32:6d:9b:5a:58:ef:d1:93:e6:74:0b:61:25:2b:65:6d:d6:
79:90:8e:38:12:b9:d0:2d:2d:8e:34:0b:02:57:a1:a7:f8:75:
41:1a:6e:2b:be:58:47:ed:06:32:fd:54:b1:28:ad:cc:0a:2b:
93:ed:4f:2d:30:b5:b7:9f:2c:ca:8d:db:d3:57:dc:92:ce:c0:
ca:f6:66:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYLL7XE4BowbqkgQDo0jPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTkzNGUzMGRhNjkwZTc1MTcxMzNiN2QyMTI2MzI2NTVh
NzRiODcwHhcNMjUwNjEzMTMwMDM0WhcNMjUwNjE0MTMwMDM0WjAzMTEwLwYDVQQD
EygzNjFjNGE4ZTc3ODMxYmFkMjkyOWJlMGRlNjg2NGMwOTNhZTk3ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cxFP3VoreEV6FmuPvbFV/b7x5mV
rdBMIRh8WL8QFwEno7gIKmEg1lDhvJX8nth4gjUz6at0FrAccPZn2qQ1WiUj+ExU
V3y16pvrT/ou4SzJwLzfAPPwgD9wpSFw2eIBDweip3MLPCS4cvGeOFOqG6peNMb2
7Pd6xwXzWjAQsLojE4fLOuv/au9xTsvXmAuN0o+mDA5LmyloGOwTd1hXVl8sj0z8
nLq4+hKL5QFUCiX4vs8NX2bVTAVh+c9+LoelFpqD7XuBDDQbWzeZHJTRkceGWgde
hbvWq4UOWIQqsR2FghOjOft6XEOCH7BMg1mRyi/mmzp6/c6N/Xwt88bqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYcSo53gxutKSm+DeaGTAk66X4aMB8GA1UdIwQY
MBaAFEqpNOMNppDnUXEzt9ISYyZVp0uHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FrMDR3Mm1rT2RSY1RPMzBoSmpKbFduUzRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTQ3ZjMtMTE3Mi00MDAxLTg3Yzgt
Yjk5Y2RmOTc1ZWI2LzEvU3FrMDR3Mm1rT2RSY1RPMzBoSmpKbFduUzRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYTQ3ZjMtMTE3Mi00MDAxLTg3YzgtYjk5Y2RmOTc1ZWI2
LzEvU3FrMDR3Mm1rT2RSY1RPMzBoSmpKbFduUzRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1I+ufY6
MEccfV1k0IthoMIZmrWY88GZVU0nyfRTegYvypTDE9q/Mcd1xSmnhJwaD3vZPuh1
EcEqrmch33isKfVQvHK3HstQA/EXM29ecIrN+9x/xsarGicu9XYhDsQzfft4lfvv
r8q5n8bs1EWUw+r1INtBw5ShaW+eoFznMQDcs87EHSuQwsx5xGi0TMHk+hkDH+2N
e+i/PU8e2+QepUEutGHAoAfU16mFHAAxslLF1d6cizJtm1pY79GT5nQLYSUrZW3W
eZCOOBK50C0tjjQLAlehp/h1QRpuK75YR+0GMv1UsSitzAork+1PLTC1t58syo3b
01fcks7AyvZmOw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:50 2025 by rpki-client