Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: yEcS0LD9YKDXKtNGlupVFQ85k0N1q9cZ2WcVL1DwN2c=
Subject key identifier: 4B:0D:DB:2E:D8:26:6F:DE:C1:7C:41:2E:31:22:4A:28:7B:BF:68:1F
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019892C82C9E5FCA13FDA4AF00144736F4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0D0A
Signing time: Sun 10 Aug 2025 07:00:48 +0000
Manifest this update: Sun 10 Aug 2025 07:00:48 +0000
Manifest next update: Mon 11 Aug 2025 07:00:48 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: xIWJr6jFeSQXa6HusNcVo4GLe+p9wtGC75E2Y02ouPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:2c:9e:5f:ca:13:fd:a4:af:00:14:47:36:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Aug 10 07:00:48 2025 GMT
Not After : Aug 11 07:00:48 2025 GMT
Subject: CN=4b0ddb2ed8266fdec17c412e31224a287bbf681f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:02:2b:4a:a2:30:04:23:ae:9f:ca:90:bd:
af:a7:0f:33:31:4c:4d:26:c6:f5:89:9a:45:12:40:
0b:bd:c9:55:0f:d7:11:e2:72:4e:73:29:aa:16:4d:
5f:9e:8c:e2:c8:e7:f2:ee:0e:21:c1:9a:97:93:c4:
bf:5b:87:47:65:bb:b9:eb:17:9d:2e:3c:cd:7c:a5:
68:01:19:e4:00:5f:88:12:ee:ae:ea:11:bc:f2:b1:
cd:24:fe:10:ee:22:f3:4a:2b:68:bf:6e:03:30:77:
d8:ca:5c:f6:4d:c5:21:7e:8e:62:ee:9b:74:e4:71:
04:ff:ae:45:5d:5a:87:ec:93:30:a1:4a:55:93:e1:
33:c2:8f:f4:5e:70:86:11:7e:a5:dd:ee:84:3a:84:
fd:ab:a4:99:9d:07:e4:78:a9:e7:4e:f3:e3:11:e0:
59:26:96:fb:13:88:06:04:2a:dc:45:79:cd:1a:af:
cb:6a:7c:18:97:2d:98:9c:01:1e:f3:ce:ce:c3:a5:
0e:d1:13:f4:54:19:66:93:0c:6c:34:4e:85:19:4e:
bf:ae:71:5c:71:bb:c4:41:08:19:e1:a3:01:bf:80:
8c:35:b2:4f:29:d5:d5:66:44:fc:2e:da:1d:ca:f9:
0b:bd:01:86:da:53:bc:e4:15:f5:ef:dc:1a:e5:89:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:DB:2E:D8:26:6F:DE:C1:7C:41:2E:31:22:4A:28:7B:BF:68:1F
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:83:8e:5b:69:e2:54:f7:0b:7a:26:4f:04:04:4f:1d:b0:1a:
9a:9d:d3:d5:ed:d0:dd:2f:5d:5c:07:ad:23:ec:1e:9c:0c:05:
e8:32:50:d7:7d:f2:aa:d0:63:e6:6c:55:40:e2:c1:09:3b:83:
e3:a1:0e:85:c9:15:09:4e:33:52:0b:ab:14:d8:c3:ad:29:ed:
fe:f0:96:32:19:27:d0:83:38:0f:21:d1:49:5e:af:8b:b9:46:
da:84:a2:6b:de:9b:e1:56:3d:46:08:5f:5b:63:73:32:8a:7f:
8b:d7:15:ce:38:dc:bb:ee:0d:81:08:9b:28:92:e1:e4:5a:05:
af:cb:78:36:56:96:59:e8:b6:ac:8f:57:b6:30:1f:76:9a:d2:
47:e4:13:f1:f2:33:51:e8:e9:cd:68:df:4d:3a:8b:1b:09:f2:
76:82:7b:d4:f1:a2:0c:7c:4e:87:cc:46:70:7d:84:f0:dd:5b:
49:f5:f7:86:47:e5:fd:65:61:9f:8a:c2:da:3f:6e:3a:96:32:
67:1e:16:cb:6f:e8:55:0d:08:02:53:09:7b:de:c2:62:04:45:
4c:3b:99:d9:11:b1:25:08:e7:3b:13:44:e1:7f:42:e5:ba:31:
21:d3:17:7b:37:e8:35:7e:a8:97:74:f5:1a:a4:a5:88:b1:6b:
1b:89:7f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:58:59 2025 by rpki-client