Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: Idbd4E6YLO+sYgyeBGlRD2jGt5JSFhoWICPW+ZjgJvc=
Subject key identifier: 4F:AF:82:16:0E:3F:B3:20:9E:E6:0A:CA:C6:BB:25:F6:7E:1A:39:89
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0198530DEB586D0D01AB66D820244230092F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0CE9
Signing time: Mon 28 Jul 2025 22:01:17 +0000
Manifest this update: Mon 28 Jul 2025 22:01:17 +0000
Manifest next update: Tue 29 Jul 2025 22:01:17 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: iFUZ+3FPGl37a/GDBfMu1lrxxic3AkIM1+uQDcCSWb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:eb:58:6d:0d:01:ab:66:d8:20:24:42:30:09:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Jul 28 22:01:17 2025 GMT
Not After : Jul 29 22:01:17 2025 GMT
Subject: CN=4faf82160e3fb3209ee60acac6bb25f67e1a3989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:c5:04:0c:f6:5f:e7:20:d7:4f:47:23:26:
06:6b:b8:9a:0d:7c:bc:63:3a:c5:49:78:bc:06:26:
a9:e1:46:27:30:25:c6:a1:24:89:67:7c:4a:b1:44:
3d:9e:4b:6d:b8:f7:69:5f:e0:d3:a6:41:ec:c9:24:
41:33:42:0f:81:ca:97:36:39:ee:92:35:5a:a1:65:
b8:1f:7d:f3:a5:e2:e3:eb:79:14:58:fb:24:21:d2:
1d:25:ac:e6:ae:94:89:f2:15:b9:bf:28:f9:df:1b:
11:50:7a:7b:2b:ee:b8:e9:08:c3:e7:fa:e6:6c:86:
11:8d:3f:c6:09:ec:9f:db:3c:f5:f2:0a:cb:fc:cb:
2d:e0:61:66:07:ed:9c:0e:14:b8:71:e8:4c:98:90:
b5:ad:c2:48:77:b2:75:bb:13:1a:52:0b:f4:1b:89:
54:f1:61:a8:6d:a5:d6:6b:f3:f2:76:69:a2:a6:85:
f4:d8:95:45:4f:a6:7e:0c:31:81:cd:29:c9:4e:ad:
3a:7a:03:4c:76:40:29:76:77:c8:d7:82:b9:f0:fd:
49:6e:a0:d9:36:39:37:ed:51:6a:29:ce:b9:a3:05:
87:f8:03:aa:cf:c2:a6:7c:60:dd:7f:42:a5:df:a4:
01:57:8a:c2:09:0e:47:94:92:d6:98:a4:4d:77:22:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:82:16:0E:3F:B3:20:9E:E6:0A:CA:C6:BB:25:F6:7E:1A:39:89
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:36:53:92:34:d0:79:05:1c:32:28:7f:02:09:d4:bd:0e:16:
f8:07:ae:e0:f4:10:42:7a:ed:0b:97:e0:c7:12:c5:db:f0:bb:
7b:1c:45:14:48:eb:b8:9e:23:af:e8:30:82:da:ba:e2:d4:cc:
e9:29:47:3d:e6:a4:e4:1c:2e:2e:40:a4:f4:ab:4a:e8:34:60:
9b:91:7e:54:9e:2c:c4:04:56:16:c8:ac:69:96:8f:6e:3c:a2:
bf:8c:82:73:35:98:3a:34:a6:76:0d:ad:21:40:48:30:15:84:
28:78:b6:bd:75:d7:96:f3:fd:3f:56:64:ac:00:0e:3a:bd:e0:
df:7b:bb:bc:3f:d8:9c:69:b0:b8:52:09:5d:5e:8a:26:90:12:
0c:55:f4:9a:59:c4:78:ce:06:0c:0d:f4:52:51:7c:e7:81:53:
2b:e4:de:e5:e2:61:11:55:40:dc:57:d4:04:3e:06:b5:28:6e:
3d:40:18:07:7d:e3:3d:11:3c:c8:f9:cb:72:54:06:8b:47:90:
37:e7:d9:99:d0:7f:1d:29:04:35:55:ac:aa:ad:02:0f:51:a8:
8f:32:15:23:56:e4:ed:55:e7:6f:26:6f:32:61:2c:82:b1:1b:
1c:c5:f1:c1:41:88:7a:2b:26:62:d9:fd:01:f0:62:f8:1d:1e:
b0:03:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:01:23 2025 by rpki-client