Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: FYtBkWkcrWGh5zsqIdkLZaX1IpOkf3J+efcjxMTU7Hw=
Subject key identifier: 24:FA:99:9D:F4:2C:02:1F:D8:39:AC:31:B9:D2:49:08:BD:35:D7:3A
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019A4EF4FD7D86E996DBF36611A4675D74BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0DF0
Signing time: Tue 04 Nov 2025 13:01:09 +0000
Manifest this update: Tue 04 Nov 2025 13:01:09 +0000
Manifest next update: Wed 05 Nov 2025 13:01:09 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: te+3FjTjEYGVgKQnh9DlBIK2lU5X98nfaarnSXeesqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:fd:7d:86:e9:96:db:f3:66:11:a4:67:5d:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Nov 4 13:01:09 2025 GMT
Not After : Nov 5 13:01:09 2025 GMT
Subject: CN=24fa999df42c021fd839ac31b9d24908bd35d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:de:a5:69:07:c6:75:f1:fd:b0:ac:90:2f:
e1:d8:e2:e2:85:19:28:63:46:1f:a9:ee:54:3f:45:
69:04:2e:ee:9e:78:67:6d:c1:ca:b8:0d:ed:db:28:
8b:7f:eb:80:dd:63:c4:1d:3c:2d:c5:1e:c7:69:e0:
9f:6d:aa:43:6c:e5:e3:09:76:0a:7e:62:c9:a3:74:
44:07:68:43:fc:a7:0b:4e:a6:10:8a:cd:cf:38:8a:
92:73:39:ea:a6:60:38:a0:18:46:3d:5a:c5:ca:42:
02:58:7f:e1:2d:04:96:db:ae:e8:01:7d:52:e7:02:
73:6f:48:72:aa:ac:cd:3f:72:c1:0f:f9:1d:b3:b0:
54:e2:34:8f:b7:13:65:66:c1:c7:1e:22:bb:ad:8f:
b7:fc:e8:23:e0:94:f4:37:5e:7a:b8:a7:ce:20:b6:
30:0f:34:ba:f0:c2:ae:d0:28:07:fc:72:b3:f3:91:
d7:66:90:25:f8:7a:ca:e7:92:16:61:ff:ce:b8:7f:
b0:e8:cd:a1:3d:83:84:47:e9:91:62:9e:2b:69:80:
79:aa:d6:1b:8d:3c:a8:37:aa:25:d6:3a:98:50:5e:
4c:51:bd:6b:0f:e6:b6:a8:e6:46:f8:83:11:dc:e2:
3d:35:3b:e5:60:95:45:b3:24:83:44:a9:f1:a5:2d:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:FA:99:9D:F4:2C:02:1F:D8:39:AC:31:B9:D2:49:08:BD:35:D7:3A
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:27:bd:2b:ed:78:14:a9:23:5d:d7:d6:8e:da:fd:69:44:04:
de:d0:a7:5d:11:c1:3e:0e:0a:bf:e9:f7:49:70:50:8f:b9:3a:
7b:9b:06:b1:75:2e:49:86:2e:f5:4b:95:9d:6d:57:ce:c2:6a:
27:7a:f7:5e:9f:e9:5f:1c:19:c6:03:70:83:eb:cb:bb:a6:79:
4a:bb:d6:2b:98:bf:82:be:e5:8d:24:52:05:df:a9:62:09:63:
10:32:9c:39:7e:35:07:70:6d:14:ab:71:42:5e:0f:16:df:22:
f3:1e:1c:2f:38:11:9f:5b:42:27:aa:bb:30:f7:fd:02:e8:3d:
f7:31:d0:ad:78:b2:7b:ff:ad:4a:87:47:7e:12:57:fc:87:54:
97:2c:ef:4a:d1:53:ce:83:e9:8a:ec:1e:51:60:95:6d:4d:f7:
8d:70:b8:81:3b:00:7e:65:da:f1:25:95:26:84:01:9c:8c:a0:
4e:5a:3e:e4:89:34:a6:50:bb:b2:5d:0f:9c:ba:f3:f8:c2:3c:
0f:22:51:53:4a:17:f4:ea:5d:9f:7c:3f:54:71:ec:ae:f2:bc:
30:c7:f8:8d:28:56:63:f9:bc:45:6d:b8:8b:da:bd:be:27:bb:
36:25:f0:b8:40:fd:fe:59:45:cb:30:1e:3e:4e:d6:3e:fb:5a:
6d:42:be:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:43 2025 by rpki-client