Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier: 2H5APg6aBuQT8PNbD5lJke36lKw4Nza4fqW7ocT5x48=
Subject key identifier: 9C:04:4F:4C:FD:91:8B:0A:BE:F2:2F:DA:38:D5:C2:73:C8:2E:27:A2
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer: /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial: 01967BD7289F75194BC9E5DEA9FD59B824B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number: 0E0E
Signing time: Mon 28 Apr 2025 10:00:20 +0000
Manifest this update: Mon 28 Apr 2025 10:00:20 +0000
Manifest next update: Tue 29 Apr 2025 10:00:20 +0000
Files and hashes: 1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: 9+Y/HdayX0K+hPutZfeg04pZ/Y0AK5/fYwlhEWFmgNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:28:9f:75:19:4b:c9:e5:de:a9:fd:59:b8:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
Validity
Not Before: Apr 28 10:00:20 2025 GMT
Not After : Apr 29 10:00:20 2025 GMT
Subject: CN=9c044f4cfd918b0abef22fda38d5c273c82e27a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:c1:99:49:ad:3e:92:f7:58:f5:6d:15:d7:
e8:59:e1:08:5e:7a:d0:a0:10:da:b2:fc:7c:4e:13:
1f:ec:f7:a7:94:e4:d0:2d:ce:ac:7e:d6:88:e9:8c:
f7:62:8e:4e:a5:d1:9c:fc:38:00:8e:44:86:06:65:
31:f1:9c:2e:49:d3:17:47:95:b3:5a:cb:1e:f0:7d:
76:3f:e2:e6:9b:96:b4:c3:16:5f:0d:60:37:0a:0f:
a6:d5:f5:e8:0a:e0:c4:d1:2c:67:7c:ed:49:b5:d6:
06:ee:53:45:c1:99:15:52:86:5b:7d:95:b7:9b:87:
7b:b1:e5:11:b4:cf:5e:f4:79:55:7c:99:74:3d:fb:
2d:05:48:52:0f:3e:e0:14:d4:4f:ab:d1:c0:91:74:
9f:45:a9:20:f6:41:a9:55:f2:a4:c4:d5:a0:10:dc:
9c:a0:17:4f:49:4b:5e:b5:d3:9a:a6:2a:4b:10:0e:
68:cc:42:74:74:94:3a:3d:c1:8a:2b:9a:1c:5d:f6:
85:47:bd:7e:c7:50:19:06:f2:72:df:e5:12:76:33:
55:2e:77:ce:c7:a3:6c:6a:8e:75:fc:28:78:b8:39:
c0:55:ac:84:ec:3e:00:f5:9e:18:53:8a:9c:fa:78:
9f:17:9d:d4:42:95:8a:00:0c:93:68:a1:cb:a1:44:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:4F:4C:FD:91:8B:0A:BE:F2:2F:DA:38:D5:C2:73:C8:2E:27:A2
X509v3 Authority Key Identifier:
keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2b:f1:50:6f:92:08:c2:bd:6d:d0:07:7e:e6:3f:85:f6:f9:
28:d8:d8:38:ca:9c:65:2f:9d:9b:32:f9:79:6f:41:2d:7c:dc:
11:8e:59:6c:78:5e:ce:e5:2d:86:e6:f2:7a:fe:59:90:00:5e:
65:72:7c:10:aa:c0:15:93:da:50:4f:ca:9c:af:6e:64:8c:e4:
4f:e2:50:c5:b9:2b:04:fb:d8:89:b3:1d:d8:66:12:72:e0:74:
c4:30:71:ea:44:ae:d9:7c:c6:28:28:ff:0a:7d:7e:14:89:bd:
b9:b2:c6:80:d0:eb:d2:ad:d8:a7:d4:bd:8b:41:8b:4a:84:55:
41:04:bd:43:3b:c7:71:81:42:64:bb:51:96:9f:6c:46:c0:df:
cd:6f:c9:08:c5:c4:c2:1b:4c:6d:48:da:44:2b:c6:05:ae:0c:
7f:a3:ae:22:f2:93:d7:53:55:0c:b9:92:50:1b:4e:ef:b9:2d:
84:fd:fb:1c:32:67:aa:0b:d9:b6:9d:2c:ce:3f:dd:c7:f3:7f:
01:3a:95:3a:5f:c4:50:10:cc:7c:07:e9:51:76:eb:6b:ab:9b:
e6:cc:77:c1:07:15:e6:f9:a4:7a:61:d6:8c:fe:21:f9:f4:b8:
fb:ad:de:77:dd:72:ab:00:85:46:09:bf:43:82:97:3f:93:6e:
1e:e1:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:42:57 2025 by rpki-client