
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File: sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier: iWJWLK5qGTcluUi209RLOzepNIJ3nOD5TO3fAABmVWQ=
Subject key identifier: 1D:1B:6A:52:67:9D:3E:35:67:0F:A8:35:16:03:7D:AE:06:DD:D5:CA
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial: 019848533EB4DFFE3EE374B80B7AC76BE917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number: 07D4
Signing time: Sat 26 Jul 2025 20:01:11 +0000
Manifest this update: Sat 26 Jul 2025 20:01:11 +0000
Manifest next update: Sun 27 Jul 2025 20:01:11 +0000
Files and hashes: 1: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: FEaOXGX1ni3k/orkur2XsmQ6Am+TruU3xat78U14dZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:3e:b4:df:fe:3e:e3:74:b8:0b:7a:c7:6b:e9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Validity
Not Before: Jul 26 20:01:11 2025 GMT
Not After : Jul 27 20:01:11 2025 GMT
Subject: CN=1d1b6a52679d3e35670fa83516037dae06ddd5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:0a:2e:7f:57:90:5c:4d:d4:aa:8d:4b:8d:
d7:ed:2f:f2:9b:e8:09:0a:c6:7c:14:e7:b7:2f:2c:
67:38:a5:af:ef:af:74:e6:8e:1f:a4:cc:2f:c0:28:
48:8c:40:08:74:f0:c2:b8:9f:4c:19:5d:1f:c3:f1:
b9:bc:50:a1:d6:1e:e5:a3:27:78:c6:0a:e6:8e:4b:
1b:88:ea:6f:fb:8b:1d:4a:df:ef:c5:fb:ab:e9:60:
2f:8d:9c:f0:2c:bf:66:5e:ef:0a:24:df:c4:8c:47:
d5:87:20:a1:78:5e:92:dd:b9:2b:ce:6f:7e:db:e8:
fb:2c:c1:6f:e1:d2:2c:66:7c:85:cf:63:2a:64:4e:
11:68:29:37:13:aa:cc:96:e9:97:da:b7:2e:e6:7b:
1d:d8:84:57:4e:00:d6:99:82:9f:a2:0f:7c:61:32:
4b:bd:f0:9f:13:a8:f9:e9:80:b2:1c:bb:2b:a1:2c:
0b:91:ec:57:00:11:4d:1e:32:f4:ba:80:81:45:67:
45:25:4f:44:db:9b:ef:ae:4b:cd:f4:07:0f:e4:60:
45:b6:64:f2:aa:53:7d:53:10:88:74:74:b5:34:10:
09:26:e6:74:dc:19:77:7b:2b:0a:8a:f4:58:d8:b7:
2f:4e:a0:1e:54:63:f3:10:cf:50:09:52:11:8b:6e:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:1B:6A:52:67:9D:3E:35:67:0F:A8:35:16:03:7D:AE:06:DD:D5:CA
X509v3 Authority Key Identifier:
keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:39:4a:e0:26:bc:46:76:04:3c:96:df:3d:83:4d:7d:b9:1f:
5f:d4:f8:fb:31:34:d6:f7:50:d7:f5:27:13:7a:a9:75:d4:f5:
ec:5d:e5:9a:4b:b7:d6:d0:f2:7d:cd:bc:08:af:b2:0d:c0:38:
5e:bf:94:f7:02:a3:6e:8b:38:32:fe:07:df:89:8b:c5:f3:74:
d1:98:ac:d4:c2:18:6f:45:ec:59:65:12:66:15:27:e2:f8:1c:
22:4e:65:f9:71:da:54:ce:74:fb:98:46:5e:d2:ef:ad:73:be:
a8:d2:a8:5f:5f:44:e8:a5:48:f1:20:27:f3:8d:06:cf:02:fb:
3c:dc:7d:01:47:29:09:17:8f:12:fe:79:72:c4:32:0f:42:73:
35:a5:a8:6a:ac:3b:c2:10:4b:93:cf:9d:2e:46:17:55:56:2e:
c7:36:56:84:0d:2d:21:91:14:9a:96:b0:15:4f:34:ef:75:77:
52:5a:92:0a:11:56:77:47:8b:d3:21:68:fa:5e:4a:38:ae:d8:
30:a5:00:62:84:d4:74:51:50:4a:59:ba:b0:cb:4d:50:de:7a:
51:d0:96:57:25:c6:43:a0:5a:42:1c:8f:44:aa:67:bd:77:3f:
04:81:44:62:6d:f1:3c:52:ed:5b:51:1e:3f:b8:07:d3:ec:1d:
90:e7:28:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:46:10 2025 by rpki-client