Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json)
Hash identifier: ZI+5be3jk8t211tpP8HUVEewl7WNvFdS/jqDR3oFYr8=
Subject key identifier: 83:E5:51:82:B0:F0:C6:F8:23:A6:4A:33:AB:55:F5:F7:36:6D:38:FD
Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Certificate issuer: /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Certificate serial: 0197771C5A9B03ACB714D0B8917C181EA4EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
Manifest number: 0232
Signing time: Mon 16 Jun 2025 05:00:36 +0000
Manifest this update: Mon 16 Jun 2025 05:00:36 +0000
Manifest next update: Tue 17 Jun 2025 05:00:36 +0000
Files and hashes: 1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: zcrYI1IDZei5I0BXLO7W87b8RzzfvBYM/SEXdGRXWtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:5a:9b:03:ac:b7:14:d0:b8:91:7c:18:1e:a4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Validity
Not Before: Jun 16 05:00:36 2025 GMT
Not After : Jun 17 05:00:36 2025 GMT
Subject: CN=83e55182b0f0c6f823a64a33ab55f5f7366d38fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:4f:37:6b:a5:44:eb:13:b2:d2:09:d7:7d:
c4:69:20:24:57:a4:3f:c6:ca:8e:71:01:2e:61:aa:
f9:c7:0e:b9:2e:c2:84:17:c9:c3:3e:5d:34:24:7d:
24:19:e2:31:23:a0:0a:1b:bf:d6:3a:ba:a3:d0:3f:
a6:f3:a8:49:e7:7d:e4:38:83:ba:8e:d7:61:94:e3:
d2:74:6b:5c:50:f3:c1:2c:0c:e2:bc:2d:89:63:16:
7c:0f:3f:75:59:97:8f:b6:45:0a:51:f1:e3:e0:32:
4d:58:7a:40:94:86:bd:f6:64:19:a5:60:f9:f0:84:
56:24:a9:35:0e:90:1a:0f:2c:53:ca:b6:52:af:ec:
c3:0b:4a:56:82:d8:fd:61:d0:04:b0:60:58:54:44:
95:55:86:78:82:18:b2:fb:5c:47:0a:be:8c:6d:34:
7c:81:80:03:e3:7a:b3:7f:7e:08:7c:71:31:f5:1a:
bb:21:e0:28:e8:4b:f3:e6:fc:5b:ac:3f:fd:3b:3a:
e9:f4:76:ef:04:41:27:35:f2:0d:1e:1d:52:e5:e9:
25:7a:65:8e:ba:f0:e0:7b:d9:e9:e5:fe:2e:a0:74:
ab:1b:6e:71:82:d5:d2:93:65:26:99:f0:7c:ba:1c:
10:e8:54:8f:71:72:18:dc:25:f8:79:0e:d6:bb:e4:
61:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E5:51:82:B0:F0:C6:F8:23:A6:4A:33:AB:55:F5:F7:36:6D:38:FD
X509v3 Authority Key Identifier:
keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:46:af:67:e5:db:0d:e2:1a:09:ff:a2:3d:7e:b6:a6:b5:14:
27:ed:91:34:66:ae:f4:b9:22:0a:f0:9b:93:5e:b2:f4:87:2a:
5a:0d:6d:97:d9:bf:13:9c:ca:ef:db:5e:9a:8e:0a:5b:ec:eb:
26:86:4e:f5:93:ee:7e:84:84:a7:e1:5f:5b:cf:13:fe:89:9f:
60:69:e5:21:1e:09:c3:f5:31:04:08:b2:96:24:d4:c8:92:59:
44:af:b4:30:90:00:bf:0c:ba:88:07:48:cb:7f:7c:8a:27:2b:
0e:54:81:13:f6:5b:2b:c4:d2:ab:94:4c:a7:dc:57:09:42:ce:
63:5c:a9:61:5a:54:49:e5:af:f6:7e:63:45:12:8d:0c:76:85:
e1:59:3a:91:39:87:29:a5:b5:df:c2:6d:07:6f:5f:20:43:5d:
f4:50:76:c8:2c:5c:f0:b9:1e:57:ab:52:05:c9:0e:76:0a:73:
9e:01:e6:c3:76:73:fe:74:75:8e:a8:64:0c:c1:a4:d1:89:80:
be:83:b4:3d:ce:ea:b6:ae:37:b7:03:d6:2a:0c:1f:b6:1e:6e:
f4:31:c3:5a:20:2c:66:8c:4e:05:fe:31:aa:e4:39:f5:52:12:
f3:7a:b7:7f:a9:35:86:99:8b:e9:e1:dc:30:50:51:a5:f7:c2:
76:cd:03:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:15:36 2025 by rpki-client