Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
File: SLQt9x-KKZb70xXQqmF63zQ9WwY.mft (raw, json)
Hash identifier: /fkXX6rLjMjFzyj6inTw3cL0+NMS4tEUNj6BLaI/vGg=
Subject key identifier: F9:09:54:6E:66:A1:48:58:5B:B7:FF:2A:C9:F8:3A:17:99:C1:60:63
Authority key identifier: 48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
Certificate issuer: /CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Certificate serial: 019759EEB9540EF5B36D55E014BAC68A4117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
Manifest number: 02F6
Signing time: Tue 10 Jun 2025 13:01:46 +0000
Manifest this update: Tue 10 Jun 2025 13:01:46 +0000
Manifest next update: Wed 11 Jun 2025 13:01:46 +0000
Files and hashes: 1: SLQt9x-KKZb70xXQqmF63zQ9WwY.crl (hash: HAQHq67WS1vRR/iVG18hBawzXeB3ucmQoN0WoT3Z9Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:ee:b9:54:0e:f5:b3:6d:55:e0:14:ba:c6:8a:41:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48b42df71f8a2996fbd315d0aa617adf343d5b06
Validity
Not Before: Jun 10 13:01:46 2025 GMT
Not After : Jun 11 13:01:46 2025 GMT
Subject: CN=f909546e66a148585bb7ff2ac9f83a1799c16063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:2d:38:86:b6:0d:1b:31:cf:91:3c:75:3a:
69:ad:02:6a:7d:cc:ca:a9:09:e1:67:00:2f:30:ed:
df:43:1b:e6:0a:6a:cf:90:e0:15:c7:2d:7d:e7:fd:
98:5d:1d:00:2c:f5:10:4f:d0:4d:ea:47:33:cf:18:
ae:20:4e:6e:16:bb:c5:aa:0e:d3:10:cb:b0:ca:50:
89:b3:b3:4f:1c:ba:28:a5:a2:d6:f9:2e:aa:fe:32:
6e:78:71:66:07:75:52:a7:14:29:9d:1e:20:34:4b:
d3:39:67:c9:8b:9b:5b:1c:0e:f8:83:5a:2b:ed:10:
e1:c7:9c:4b:ba:b9:ac:bc:1f:f8:63:30:02:0b:e5:
27:c3:45:44:5d:01:5a:d8:10:74:11:4d:c5:6d:fb:
2f:76:27:73:0d:80:d8:52:0b:ed:be:b5:3c:06:18:
e7:15:ec:ef:5b:19:bb:63:50:2a:2d:a1:43:e2:85:
f7:ca:3f:87:5a:38:17:ba:99:1e:4a:ed:34:34:d4:
7c:77:46:2e:7d:6d:f2:bc:41:7e:cd:38:68:c6:a7:
44:07:29:ae:77:fb:cc:a3:7d:35:10:20:fb:55:d8:
a8:95:22:e2:0b:d3:96:5f:7a:64:d5:ab:19:7c:a2:
5f:d3:94:32:33:2a:3f:86:01:46:7f:07:0f:57:77:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:54:6E:66:A1:48:58:5B:B7:FF:2A:C9:F8:3A:17:99:C1:60:63
X509v3 Authority Key Identifier:
keyid:48:B4:2D:F7:1F:8A:29:96:FB:D3:15:D0:AA:61:7A:DF:34:3D:5B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SLQt9x-KKZb70xXQqmF63zQ9WwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/754095-5582-428a-9b11-a8be4fb00121/1/SLQt9x-KKZb70xXQqmF63zQ9WwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:11:26:57:fd:7d:1e:1a:31:70:d4:93:b0:c7:71:01:e7:f6:
f4:69:7b:ff:e8:0a:fd:1f:c3:a6:1e:3b:a1:17:76:32:f0:fb:
d5:de:ed:7d:6a:d3:2d:bb:eb:0c:a4:c3:03:25:59:f8:23:33:
53:64:af:6b:76:46:53:ae:f1:71:72:e2:49:2e:c0:d2:da:4f:
b2:1c:29:c3:f8:2c:aa:80:57:9a:81:2c:88:0b:10:e3:bb:80:
3c:5a:5d:19:c7:8e:9b:3b:8e:ce:98:5e:bb:f7:42:ab:69:fa:
ab:ff:cf:09:b1:dc:f8:31:e5:7f:48:14:dc:e0:33:1a:df:a0:
3a:b8:1b:f3:e2:28:23:ac:af:23:c7:bd:d6:dc:e2:15:e3:c5:
ce:e5:34:64:83:60:d2:35:01:2c:3a:32:d4:d7:77:29:c6:fb:
51:f3:ed:46:16:4b:bb:58:30:2c:19:d9:21:87:16:a3:41:c4:
a1:29:da:ac:8a:36:0c:e6:56:9a:12:a6:8f:b9:0a:93:f9:46:
c0:08:36:15:64:a0:50:7b:64:07:24:0c:95:17:d6:8a:31:a7:
7c:61:11:50:b5:8f:69:05:f7:c8:3a:8f:cb:22:3d:d9:02:dd:
08:a8:b6:7c:ae:f9:6b:63:65:53:bb:44:51:e3:8d:01:2b:5d:
27:92:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:01:34 2025 by rpki-client