Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: hjj/oipzf4moPTfqAIXVAANeS7T+gvX6d6w0If/Oyy0=
Subject key identifier: 44:3C:DE:77:37:49:E9:11:A4:ED:6F:AC:B1:68:E3:25:F8:C6:4E:E2
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 019A7112D13BC1587AC9519C86667EE3A9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 1435
Signing time: Tue 11 Nov 2025 04:00:49 +0000
Manifest this update: Tue 11 Nov 2025 04:00:49 +0000
Manifest next update: Wed 12 Nov 2025 04:00:49 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: pVGzeqZQTNQY5qlsJLaKDZXWEQMYlNEaHsGIj1JL7Uo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d1:3b:c1:58:7a:c9:51:9c:86:66:7e:e3:a9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Nov 11 04:00:49 2025 GMT
Not After : Nov 12 04:00:49 2025 GMT
Subject: CN=443cde773749e911a4ed6facb168e325f8c64ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a4:9c:75:56:2c:25:16:a5:05:c0:28:18:0e:
55:64:4b:5b:04:1e:72:79:35:53:a4:8b:c9:fb:9f:
9c:17:09:a4:f3:55:50:34:cf:75:a2:f6:bc:c5:77:
91:7b:69:00:9c:a5:a1:1c:db:72:df:29:cd:ad:db:
3e:e1:f0:45:d8:a5:b8:cb:00:1e:18:53:17:02:cb:
88:08:f7:32:8a:eb:6b:45:7f:ef:44:3b:46:ff:b9:
47:9a:7b:57:10:22:cb:32:de:be:43:fe:eb:aa:b2:
fc:af:c4:39:7c:95:44:c5:d4:c5:00:f2:6c:72:a4:
d4:1d:c2:29:c4:a9:8d:65:a7:9b:f6:0e:19:8d:8b:
a2:27:84:5d:ce:35:1b:e4:a8:b8:1a:d2:2e:db:33:
79:61:08:ae:b6:37:0e:9a:37:a3:a3:43:3b:ed:4d:
bd:ab:bb:3e:58:9f:5c:44:84:c7:75:50:0d:43:3a:
ec:82:ae:53:be:69:98:62:c6:3b:7d:95:8c:11:a3:
d2:29:2a:26:cc:ee:cd:57:7a:08:df:0e:c9:c8:ba:
d1:c8:36:8a:c8:72:0d:2e:5a:cf:a7:98:be:64:70:
00:45:8a:2c:c3:d9:4d:6d:08:f4:df:07:66:ef:30:
68:97:32:9c:a8:da:a0:e8:d1:b4:32:6c:ed:fd:7c:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3C:DE:77:37:49:E9:11:A4:ED:6F:AC:B1:68:E3:25:F8:C6:4E:E2
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b6:d6:27:b9:c4:40:93:17:85:e6:4e:e0:cc:cb:29:3a:a5:
07:60:d1:ac:35:21:87:3e:2d:87:06:8f:80:4c:6b:bc:ee:77:
44:41:d6:b1:10:6b:91:a4:a3:76:65:a1:88:46:17:49:cc:99:
88:1b:87:41:19:41:1e:0a:07:c3:8e:75:c1:fd:f9:46:db:f6:
2b:bd:7e:b0:3a:0a:ea:99:6d:50:31:30:b8:e0:aa:70:da:64:
43:7e:33:09:01:64:3e:44:80:2c:fb:47:c7:22:00:8c:82:46:
30:5d:36:e5:ff:43:2a:69:0c:05:68:b7:9c:89:5b:13:10:37:
2b:0e:f8:ec:0f:5b:80:5f:cf:fe:e3:ad:cc:98:05:06:0f:d5:
40:5a:27:55:85:5b:78:d2:c5:8a:f8:2f:c1:f4:23:9b:e7:cd:
cc:a9:12:56:bf:9d:d2:68:1f:a3:17:63:5c:3c:d8:21:dd:f0:
fd:bc:57:e2:30:b9:e4:d7:83:ee:db:0e:95:22:3e:95:e4:84:
24:61:d2:75:a0:fe:94:55:66:53:5c:3e:9a:cc:82:53:60:1b:
30:be:5c:78:c4:f9:2d:d0:c6:2a:b8:0b:4a:92:9a:ef:ce:0f:
4a:c2:46:79:e9:16:f3:4c:0e:5b:9e:8a:91:ea:b8:d3:95:1c:
98:dd:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:08 2025 by rpki-client