Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File: Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier: XKEiboW3bkv5fhAvuXyuRTYk0UuqO7Gyis8Noh8bLGw=
Subject key identifier: 20:BF:3A:5A:F3:B1:B9:55:D7:9A:C1:BC:4A:49:97:E6:DB:EC:4F:39
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 01984BC1CE11CB41E45BF763C27426A56F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number: 1359
Signing time: Sun 27 Jul 2025 12:00:49 +0000
Manifest this update: Sun 27 Jul 2025 12:00:49 +0000
Manifest next update: Mon 28 Jul 2025 12:00:49 +0000
Files and hashes: 1: 6rSD7g_qe8K6KqZqqkL-N5Tz2Po.roa (hash: f+qXxbPCW54Fvdn+IqLViujGUR732uBcWtFNMxPAlWo=)
2: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: FSFPzQzq7Y4LYt4LzXwFy35Il0wJ3qY5PqIMrO1LCzs=)
3: ppQ6By3CT5q_MfQmc3W2cOrYYME.roa (hash: 4gJ96x0hdM1YSAgq0bPa2tEWjzZ2Ifp4c6peJQDYI0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:ce:11:cb:41:e4:5b:f7:63:c2:74:26:a5:6f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Jul 27 12:00:49 2025 GMT
Not After : Jul 28 12:00:49 2025 GMT
Subject: CN=20bf3a5af3b1b955d79ac1bc4a4997e6dbec4f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8e:7e:08:6b:35:56:85:65:61:d6:93:22:ef:
93:90:a0:62:cf:71:be:ee:87:54:57:c1:24:34:ea:
0a:e3:df:54:db:1b:5d:d4:fe:54:d2:9b:c2:4c:1f:
1d:fa:82:93:05:01:87:fc:27:73:58:2e:81:4c:ea:
fb:5d:70:f4:fc:2b:a9:6a:73:e7:88:c6:2c:c9:94:
b7:46:4b:47:1d:89:c9:3b:6b:bd:f7:2f:fe:7d:c5:
c6:68:6e:72:2c:eb:15:8b:7f:03:29:69:71:90:aa:
b0:a2:4b:08:a7:2d:c6:f2:f8:70:2e:16:03:33:b7:
1f:53:99:a2:c2:ec:60:3c:21:71:ab:dd:45:c7:2d:
f4:6b:5b:8e:f7:c4:9c:e3:d3:e5:f3:fc:2f:ae:b6:
08:6a:25:3f:38:e4:d6:6f:2b:a6:22:1d:34:e1:c6:
54:0a:78:54:16:33:34:de:f2:fa:ba:fa:aa:41:cc:
12:60:40:4e:c2:a4:3c:66:40:96:37:6d:53:e0:1c:
03:39:76:6d:a9:22:57:5d:36:75:97:01:e1:a8:35:
67:73:5a:8d:b6:2d:26:0f:f7:e5:4a:95:dc:95:a0:
47:a2:d7:6d:96:d7:43:05:bd:fe:4d:7c:04:74:23:
56:a0:80:b1:15:ac:aa:53:10:c7:32:e3:77:1b:ba:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BF:3A:5A:F3:B1:B9:55:D7:9A:C1:BC:4A:49:97:E6:DB:EC:4F:39
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a8:a5:76:cc:47:d7:c7:33:83:27:0d:08:71:f0:df:7e:48:
ea:37:f0:44:00:62:62:59:91:81:97:40:83:77:ad:d1:e6:75:
45:94:fb:a5:d8:00:fd:d2:a3:a1:d0:5f:27:aa:2c:ac:58:61:
d1:32:fc:d1:50:bd:b4:8c:5d:96:b8:9a:38:2a:2d:70:b1:bd:
1d:92:81:9d:ef:50:89:2f:17:65:d8:e4:37:5c:ed:ad:47:f8:
f8:0b:0b:40:5d:87:79:30:51:93:0a:87:50:e5:90:0f:cb:b1:
f6:c6:56:13:40:ff:5a:14:69:92:13:11:ca:aa:d3:3a:8e:b8:
f7:89:ae:3d:c7:6c:e1:3f:48:bf:3d:b0:a2:f0:0f:71:4e:b9:
87:59:c0:39:dc:a1:37:da:4f:ab:52:9e:8a:96:c2:bb:99:ef:
67:47:d9:81:a6:86:9b:10:5c:e7:82:66:8a:59:17:09:65:55:
94:2a:ae:be:c9:93:25:7b:b2:9b:6c:d0:36:8b:2a:00:7a:92:
3a:f6:95:96:75:e5:4e:26:72:e5:6d:75:40:bf:52:a9:52:83:
dd:6b:e6:aa:11:57:0c:6b:1a:a4:b9:53:8b:ad:87:31:2e:ac:
e4:a5:d9:5a:7c:a3:87:d9:90:c0:e3:79:65:b1:81:f4:ed:3e:
3f:17:2b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:14:56 2025 by rpki-client