Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: aklYDvukLSnHl0wpeQ3pQoisEjHs5VQOQljZYt4ECxQ=
Subject key identifier: 6F:8F:73:C5:59:F1:32:A0:F8:32:4B:84:C8:7B:E1:FF:0B:98:0F:90
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 0198451A82CF8ABD9F62D0774E33D07A9798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 0FBA
Signing time: Sat 26 Jul 2025 05:00:22 +0000
Manifest this update: Sat 26 Jul 2025 05:00:22 +0000
Manifest next update: Sun 27 Jul 2025 05:00:22 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: ue+K5WcoE6V906aB5RqR1Io3irzAcuTPJWkuOQDukzs=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:82:cf:8a:bd:9f:62:d0:77:4e:33:d0:7a:97:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Jul 26 05:00:22 2025 GMT
Not After : Jul 27 05:00:22 2025 GMT
Subject: CN=6f8f73c559f132a0f8324b84c87be1ff0b980f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:28:aa:5a:cd:51:c6:65:cc:22:dd:db:13:a9:
ff:18:3f:8f:1d:48:e0:3f:9c:61:10:15:37:6b:f2:
fb:d4:89:9e:36:6d:fd:79:1e:e9:3c:4a:ad:9b:bf:
3f:27:3e:d3:40:2c:90:2d:4d:87:64:11:ff:c9:ad:
4c:02:00:76:30:2a:b5:ee:f9:13:7c:95:3a:52:5d:
76:73:e9:82:75:6a:6b:20:48:24:ce:ba:fd:5b:96:
1b:12:50:da:ba:1b:bc:27:09:ea:03:be:20:05:8e:
9d:d7:62:c6:d6:ce:04:71:84:8c:fc:55:42:e4:6e:
1c:9e:97:37:a5:25:4c:50:cf:19:96:24:11:d4:be:
48:49:e6:b6:19:62:9e:03:54:43:45:fb:a4:a0:20:
2a:13:46:f7:05:ec:57:4c:0b:57:df:36:d3:96:e5:
c5:7b:a8:fa:1f:08:9a:83:87:86:b5:d9:8f:62:da:
0b:e2:ef:2f:72:86:fd:17:a5:01:7e:b0:10:aa:44:
1c:e0:bf:9f:02:f8:f7:85:13:be:bd:8d:81:f3:93:
6f:74:bf:8f:c6:43:1b:49:88:d5:ad:1b:99:31:4e:
b1:20:ce:ae:3c:ae:9d:3f:8a:9c:da:b2:2b:f5:89:
52:6a:5c:7c:02:c0:cf:3a:3e:35:91:01:91:6d:78:
36:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8F:73:C5:59:F1:32:A0:F8:32:4B:84:C8:7B:E1:FF:0B:98:0F:90
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0a:ce:fe:a0:96:8e:7c:42:f8:57:98:a8:81:93:67:66:5d:
d2:f1:2b:a6:26:8a:f3:0e:9c:43:74:b1:e1:84:72:50:f3:f8:
ef:d1:16:9d:c1:94:47:6c:ce:bb:34:66:aa:10:33:18:bc:dd:
22:e9:bf:28:e5:a2:83:e3:5d:de:bd:28:e2:23:4a:b6:ac:61:
bc:72:b5:8e:7a:86:7c:9a:0f:6b:9a:58:ae:dd:38:34:de:3f:
12:a7:33:a7:71:80:59:b2:5b:30:5f:47:1b:90:44:90:da:1e:
d9:39:de:e2:a5:1d:db:f0:4c:13:12:4b:5c:80:db:bb:6e:ee:
6a:20:41:d5:76:09:5b:1e:93:3b:96:01:bd:8d:17:f3:05:fb:
bd:4b:40:36:d2:de:73:2c:41:e1:61:98:b2:a1:ae:47:93:5c:
1e:72:ff:75:43:d9:43:66:ef:0c:90:42:f6:33:73:fd:c9:94:
6e:89:e1:e0:3d:b0:ac:2e:38:26:38:3f:e4:f6:7d:95:59:dc:
3d:71:69:5b:d4:ca:66:c1:eb:9d:27:d0:ff:51:17:fd:4d:1b:
b2:5f:77:59:75:6b:2b:aa:7e:71:6d:02:b6:f5:66:c8:1b:11:
f7:f3:ee:6b:25:9e:7b:e9:92:8f:09:0d:a8:0f:fd:67:f5:be:
09:09:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:51:45 2025 by rpki-client