Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: BlE3NdXl9auSK3IOOZaNL00cjTbztbBBxCuc3OXTFtw=
Subject key identifier: 1A:35:03:7F:BA:27:E7:78:FD:BA:3B:0E:98:68:23:A5:D3:74:69:26
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 01992255393D9FF5F3414867612A13E36724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 15FF
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: DPoNbBpmBlgrPl6wd+CZA4e3NOom0ao4lYytoLL2aZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:39:3d:9f:f5:f3:41:48:67:61:2a:13:e3:67:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=1a35037fba27e778fdba3b0e986823a5d3746926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:2f:41:ec:e7:6d:00:d1:b6:01:a6:a6:9c:
5c:bb:d5:90:a7:d5:af:f6:f6:d0:d1:83:4f:9c:c5:
3a:e7:f7:10:86:ce:45:5c:08:9e:cd:cf:03:44:51:
c3:1e:e2:f4:fc:0a:2f:eb:b9:bd:ca:de:d4:2a:8c:
90:4e:95:79:cf:ed:11:d1:13:e0:c5:91:7e:45:43:
32:40:9b:ef:6d:82:a0:d5:33:12:e8:c0:3c:d6:d7:
13:e3:1d:0c:0b:e9:31:53:30:02:d2:b5:25:b1:18:
62:b1:d4:96:c3:5f:21:7f:f3:f5:68:ac:02:c5:f3:
03:74:82:60:53:c4:b2:cb:ee:13:44:54:19:a1:26:
83:b7:79:8d:46:e8:3d:43:b7:81:d4:ff:b1:f1:e0:
81:24:3a:6c:84:e4:ac:0f:55:a1:f3:e3:94:e1:dc:
c5:0b:4a:bd:9c:a3:05:7a:8f:18:c5:1e:1b:fa:e4:
32:87:97:c8:ae:2c:e4:be:95:c0:d6:de:8e:46:73:
e9:d3:c2:37:e0:a2:d6:84:fc:09:0d:8e:40:53:1b:
e4:19:07:9b:b6:7b:c1:5a:dc:28:8c:c3:91:15:2b:
d4:93:12:ef:86:97:26:d3:fc:44:62:be:72:d4:eb:
2d:d8:c8:4d:a3:b8:3b:0e:45:09:62:10:f2:fd:ec:
7d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:03:7F:BA:27:E7:78:FD:BA:3B:0E:98:68:23:A5:D3:74:69:26
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cf:89:49:60:08:f5:79:e6:59:2a:f8:a7:ba:64:72:4c:8c:
9d:5f:81:85:0c:ee:b6:84:ed:ce:dc:fa:b1:43:94:99:42:13:
d4:10:5b:37:2f:cc:31:4c:62:35:ba:71:05:9f:f4:e4:6d:2a:
68:db:b6:4c:06:5d:25:71:eb:5b:f3:25:a6:67:d7:5e:a5:be:
18:c3:31:c5:3b:e1:9f:16:76:30:6d:41:a9:4e:c1:79:02:23:
e0:59:b5:67:05:30:42:92:dd:e1:95:10:59:9e:63:9e:38:70:
5b:a1:3f:88:4b:ce:9b:12:3e:81:0e:4a:16:f2:43:33:5d:90:
0b:8c:e9:04:90:89:51:e8:c7:4c:f7:30:42:9e:92:29:3e:ca:
27:1a:60:51:1c:28:30:ff:de:cd:89:47:f5:c4:a5:af:00:0d:
b7:2d:f2:6c:be:67:91:b0:7a:c8:04:36:e5:1a:12:40:59:60:
08:fd:d1:5d:38:2c:73:31:90:84:94:ce:fc:b8:f3:0b:5a:df:
e6:9a:07:0b:04:9f:53:ca:d4:04:ed:48:91:49:3a:fe:b4:22:
7d:94:ab:b3:e1:77:9a:aa:17:49:09:81:98:4b:9c:32:45:93:
c8:64:50:96:7a:45:8d:cf:4d:f0:01:0e:0e:58:22:95:4d:4b:
b4:81:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:32 2025 by rpki-client