Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: FlC0ZbeIbN5ALXBLlzMfmCHOFtBNsaqD/inIMuBFNQ0=
Subject key identifier: 6E:6B:05:86:3B:56:30:47:71:07:22:09:B1:10:96:42:62:85:DF:30
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 01974E574174AE42D9D7D0681C9467701627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 062B
Signing time: Sun 08 Jun 2025 07:00:30 +0000
Manifest this update: Sun 08 Jun 2025 07:00:30 +0000
Manifest next update: Mon 09 Jun 2025 07:00:30 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: o2oqE6CUX8KCIDjLltyBIOhZtmP8CkoXRpKTK9usvBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:41:74:ae:42:d9:d7:d0:68:1c:94:67:70:16:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Jun 8 07:00:30 2025 GMT
Not After : Jun 9 07:00:30 2025 GMT
Subject: CN=6e6b05863b56304771072209b11096426285df30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:3f:d4:75:91:33:fd:be:f7:f7:a5:30:fa:
47:66:18:d8:69:5d:13:b2:cc:17:6f:b5:e6:a2:22:
e8:ec:2d:fd:ac:28:77:71:f2:96:c0:a6:fa:38:9e:
78:ff:43:de:ea:31:af:97:85:2c:c4:cc:8e:08:af:
28:72:71:41:1e:e1:78:d4:48:2d:0b:ef:5a:f3:af:
f4:86:82:d4:65:c0:db:21:40:38:67:00:3a:58:2c:
d5:e4:42:9e:97:42:b8:c6:8a:df:9a:57:89:2a:6e:
5e:3b:cb:6d:d8:4c:89:c3:d1:c8:9c:de:69:4c:2e:
27:f9:cb:22:ee:9a:72:0a:b2:11:01:8d:05:fa:d9:
14:6f:f6:d5:d4:82:e1:00:2f:36:42:c9:4c:d6:f0:
04:ec:57:1e:83:2b:2a:e5:df:c2:23:86:7c:84:fc:
6a:06:8b:1f:f5:83:96:33:25:6b:93:82:de:5b:e9:
aa:f7:f5:5d:31:8f:eb:93:cd:f5:08:18:01:08:05:
a8:98:c8:54:df:0a:2f:48:83:c4:68:bd:0c:ac:62:
47:ed:38:4f:b9:97:fd:cf:fd:70:ce:0c:4b:71:4f:
94:91:70:54:57:b1:e8:67:3b:4f:ce:15:9c:35:87:
b7:e4:c0:81:85:df:f5:2b:af:79:51:3b:10:d5:5b:
66:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:05:86:3B:56:30:47:71:07:22:09:B1:10:96:42:62:85:DF:30
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c6:8e:92:e2:31:58:ef:58:b1:df:5f:75:ba:83:9d:72:f5:
1d:e6:c2:7a:e6:8f:34:9d:a4:0d:02:04:03:db:91:be:fe:91:
7f:9f:eb:4f:31:75:4f:6d:b7:82:a1:60:90:1c:aa:74:78:5c:
5d:76:8f:b7:c8:67:74:77:a0:32:81:7d:a4:bf:5a:7f:50:d3:
d0:52:f6:57:f9:39:8f:7c:2e:d4:2e:95:21:39:a9:67:90:5d:
e0:bf:bf:65:b2:5b:05:21:ca:22:49:53:da:81:75:00:fc:52:
98:12:0d:5c:31:31:e6:fa:90:d9:a4:8c:f0:3d:3e:10:8a:8e:
12:17:50:a5:79:4e:3f:87:19:d8:69:c3:57:44:00:05:14:cc:
aa:9a:e8:d7:f5:17:42:a1:05:35:0d:d2:49:c3:b1:2e:42:f2:
eb:cc:35:7b:4b:eb:85:cb:39:67:8f:d1:99:eb:5d:36:ad:d5:
7a:0a:fe:e0:d6:ab:86:da:85:5f:cd:5c:b1:d2:84:91:d2:1b:
03:69:52:bd:e9:bb:0a:2f:d6:34:37:cc:e4:d4:f6:44:a4:2b:
21:4f:17:67:64:50:46:1c:e6:97:2a:7d:7a:38:5d:84:e3:cc:
af:be:c4:5c:81:2c:78:08:02:9c:b5:30:f0:d0:31:c3:e2:96:
53:f1:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:40:59 2025 by rpki-client