Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: iC5ZxTa0+JBhRDw3/38E1cnndzruilTKnkUMYBBO69s=
Subject key identifier: BB:FA:3A:D1:37:AC:8F:BC:5E:30:CC:61:83:66:D4:73:CC:A2:32:5F
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 01984A09E12F1378C4BBDD5A2DC742A37660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 07A7
Signing time: Sun 27 Jul 2025 04:00:17 +0000
Manifest this update: Sun 27 Jul 2025 04:00:17 +0000
Manifest next update: Mon 28 Jul 2025 04:00:17 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: srU1Xv9+mA6YM9NGI0in+8XQkc/wv/66/y9ZqIbIhCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:e1:2f:13:78:c4:bb:dd:5a:2d:c7:42:a3:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Jul 27 04:00:17 2025 GMT
Not After : Jul 28 04:00:17 2025 GMT
Subject: CN=bbfa3ad137ac8fbc5e30cc618366d473cca2325f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:bf:20:3c:54:eb:46:13:d8:e9:4f:75:71:
a1:04:19:13:72:af:e1:bd:86:30:2f:4c:91:63:a4:
6b:eb:2d:c8:78:c2:bd:aa:f0:6f:c5:ce:a9:0c:88:
dd:42:37:ff:36:f6:cb:2c:16:69:91:49:e2:96:7d:
5a:df:70:ac:aa:33:95:1c:4d:da:08:19:29:62:19:
3a:45:6d:cf:75:c1:b0:5b:38:d2:d4:2e:85:cf:16:
01:48:2d:f8:c2:59:67:a5:31:3d:14:a1:cf:f9:ea:
3b:68:67:53:45:35:c6:a2:03:10:91:ac:03:bc:b9:
e8:b5:be:54:e3:1a:83:a1:94:c2:fe:99:f7:a9:e4:
43:2d:88:9c:ea:09:73:c8:0f:4f:97:af:ae:76:d8:
62:75:5d:d7:8b:c4:42:57:51:5a:86:77:b7:18:db:
f3:b1:02:8a:21:00:12:1f:d9:0c:99:34:74:44:b3:
d5:3a:76:5e:fd:d6:9c:c2:4b:ba:23:4c:7a:f9:3c:
e4:f6:96:ef:69:ab:31:4e:63:43:a2:fd:12:52:72:
b0:a5:ba:95:ce:80:aa:d6:af:64:99:07:51:ae:8b:
28:de:2f:34:3c:1f:bd:71:67:0c:0b:a7:7a:df:5a:
08:5a:07:b1:bc:40:ae:8a:a3:02:9f:14:9e:ed:94:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FA:3A:D1:37:AC:8F:BC:5E:30:CC:61:83:66:D4:73:CC:A2:32:5F
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5e:d7:0b:15:b0:87:36:ab:c8:61:aa:03:11:95:ac:62:92:
da:8c:38:82:3f:f1:f4:41:de:b1:63:a7:6c:18:80:63:05:a2:
b8:0a:41:40:a6:fd:61:a8:f4:4a:d4:dc:ea:85:a6:77:cc:68:
d3:b9:9b:90:2c:b0:8d:ae:3f:36:f3:66:e2:a7:69:b6:97:da:
23:89:5a:f5:1d:5f:e8:52:18:24:53:0d:fb:60:3c:a0:de:83:
aa:af:eb:4b:6e:8e:20:5d:22:0b:d2:e2:dd:ba:52:84:e3:39:
11:f8:fe:ec:b8:c8:ba:48:70:1f:66:f5:9a:0e:f3:5a:0b:04:
d0:36:f6:97:5f:ba:03:33:3f:9d:54:0b:13:8d:3e:01:47:31:
30:8e:67:7a:8e:cb:2c:7b:48:a3:1a:7c:95:f7:66:8f:d0:06:
10:55:44:91:e4:66:fe:5c:cd:6d:a1:2c:3d:cf:54:fc:40:c6:
3a:96:66:20:52:21:c0:01:fb:bb:3f:27:77:c7:ce:fb:74:23:
5d:e3:7b:e5:17:6b:0b:aa:9e:a2:fb:6e:58:e8:27:68:a5:4a:
a8:19:03:43:2e:3b:6d:ef:fd:b6:31:da:63:ec:72:37:e6:80:
96:aa:56:f3:f2:bd:81:74:13:96:d8:04:44:20:b7:05:be:52:
c5:50:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:04:29 2025 by rpki-client