Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
File: SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft (raw, json)
Hash identifier: MVPU6wsahYR4etjXA35i13gZCMSdj3IAPei34YECdHI=
Subject key identifier: B1:47:51:92:49:3B:50:87:4F:CB:E0:7F:4D:EC:D7:15:4F:E4:11:09
Authority key identifier: 4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
Certificate issuer: /CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Certificate serial: 01976A05F26AEE5917D2D231CE795DE698F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
Manifest number: 0B6B
Signing time: Fri 13 Jun 2025 16:01:04 +0000
Manifest this update: Fri 13 Jun 2025 16:01:04 +0000
Manifest next update: Sat 14 Jun 2025 16:01:04 +0000
Files and hashes: 1: SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl (hash: e4rMQIG7JpByN1pQwOM0IRhijwym5UZ1V9/m3Gs4/SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:f2:6a:ee:59:17:d2:d2:31:ce:79:5d:e6:98:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a3c42683c089135a49ef1f5653cb9ce5eb70be6
Validity
Not Before: Jun 13 16:01:04 2025 GMT
Not After : Jun 14 16:01:04 2025 GMT
Subject: CN=b1475192493b50874fcbe07f4decd7154fe41109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:4d:bd:f1:16:72:b1:d9:cd:4d:f8:85:2e:
c6:4e:40:fb:0a:7a:50:66:16:96:b1:38:18:bc:13:
55:3d:fb:0f:0e:b1:d9:95:e6:ef:e8:1f:10:90:6d:
0a:26:e7:96:56:5c:ee:c3:fe:ba:99:1d:97:99:89:
bb:e0:34:c1:9b:33:26:a6:3a:78:05:6a:60:12:86:
4e:3f:c7:28:40:c6:bc:65:c7:0b:65:3f:17:d0:38:
84:0c:8d:4c:a0:0c:6b:c0:fe:cc:c5:8e:4d:44:58:
7b:f6:98:54:96:09:7f:20:50:6a:91:5a:85:80:7b:
b3:4e:93:b7:ff:48:9a:97:a1:14:a7:15:8e:34:68:
6c:44:0a:08:3d:bd:dc:16:4a:3d:a8:92:eb:d0:ae:
cf:91:9b:b3:36:92:68:0a:63:e3:dd:ff:6d:73:52:
9a:87:36:7d:d7:cd:6a:f6:96:61:ab:35:20:96:9c:
f6:a8:15:6e:d7:70:2a:60:da:5d:56:82:2b:e9:ba:
13:1a:b1:08:ce:c1:b8:24:23:e1:bf:8d:c0:dc:9c:
b9:16:86:55:d9:87:a7:90:b6:52:dd:6b:db:d8:24:
e3:f6:5c:a6:16:cd:d7:c9:46:97:1a:0f:2d:e2:e4:
57:4b:ad:dc:f7:a3:7a:2c:c7:2c:19:06:81:06:cf:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:47:51:92:49:3B:50:87:4F:CB:E0:7F:4D:EC:D7:15:4F:E4:11:09
X509v3 Authority Key Identifier:
keyid:4A:3C:42:68:3C:08:91:35:A4:9E:F1:F5:65:3C:B9:CE:5E:B7:0B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SjxCaDwIkTWknvH1ZTy5zl63C-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/752d3e-9126-41d4-b45b-47909dd57800/1/SjxCaDwIkTWknvH1ZTy5zl63C-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:78:3d:09:92:7c:6a:71:ce:25:86:ea:b9:c2:b8:1d:ad:8f:
67:52:bc:e5:e5:9c:6e:41:22:a4:2f:fc:97:df:34:4b:17:97:
b6:c5:3b:7f:e2:1a:a0:51:80:fb:7d:0c:1f:b4:8a:af:ba:34:
e6:05:3f:e8:98:a3:48:98:6c:1f:8d:f4:48:db:d4:2c:ab:63:
40:82:af:9d:ec:8c:c2:bf:51:0a:b5:10:bf:12:ba:c8:d2:07:
5a:38:04:8b:32:1a:91:57:36:bd:e4:ee:98:71:6c:b0:40:1b:
dc:c4:a5:cc:59:33:3e:bd:81:24:74:92:d0:f3:ae:e9:f7:23:
66:e8:2d:20:9b:c4:81:36:d9:21:3a:09:f3:b9:53:e8:b7:1c:
8c:21:a6:35:42:38:75:5e:f4:e4:cb:58:eb:e6:19:10:5a:a3:
68:67:45:37:58:05:37:d2:93:a0:18:b9:1c:e3:3a:fd:f8:07:
ce:86:2e:4e:8e:1b:b1:1a:89:17:0b:55:61:22:24:6f:15:2b:
1c:1d:d0:a2:69:f3:1a:98:4a:8e:e2:15:ce:ee:a3:9d:97:70:
51:85:87:9b:ae:ad:c1:da:86:5d:ed:4b:fd:42:a8:2f:15:a5:
5f:fc:84:60:2a:5f:39:a2:23:ae:dc:b2:d1:ae:67:55:9b:82:
d3:0e:4d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:44:50 2025 by rpki-client