Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: 6XEuj1WNrIAOcM1xVbIQ6bcA+73I5olkmhovVCbPe9g=
Subject key identifier: C2:4B:CC:81:CC:69:5C:1B:F6:05:26:D5:F3:83:A4:84:22:7C:B1:46
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019749D5EE8611F0D1E6331B2106833BF4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 12A6
Signing time: Sat 07 Jun 2025 10:00:46 +0000
Manifest this update: Sat 07 Jun 2025 10:00:46 +0000
Manifest next update: Sun 08 Jun 2025 10:00:46 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: FWsn/eddAN4Tzcc3OGHT1I8GAZ8b4RUzali3AlJv/wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:ee:86:11:f0:d1:e6:33:1b:21:06:83:3b:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Jun 7 10:00:46 2025 GMT
Not After : Jun 8 10:00:46 2025 GMT
Subject: CN=c24bcc81cc695c1bf60526d5f383a484227cb146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:34:a3:5f:b6:7c:38:5d:ef:ac:36:08:ae:
ab:80:ce:5c:dd:ab:e3:b0:b2:ca:d0:64:91:c0:6c:
91:1c:f7:79:2d:1a:36:fa:5e:07:81:9a:d6:1a:e0:
c1:95:88:3e:f8:49:7a:1f:95:5b:77:1b:0a:0b:97:
cd:cc:0b:60:bb:35:22:5b:54:1c:28:24:21:f7:ec:
d9:68:e9:4b:ed:91:85:1b:2b:56:10:dc:0c:b0:4d:
6f:aa:30:7a:94:d1:31:d2:11:c7:ea:26:b4:20:79:
81:03:0a:2b:f2:1f:64:ee:4d:65:c6:b2:e3:5d:14:
71:3b:22:f9:c9:aa:c7:bf:85:ad:09:21:ad:5b:0c:
f4:60:37:7e:3e:7c:43:b6:26:f8:bc:e5:9a:3b:79:
25:b1:26:7d:46:b7:a2:88:23:34:10:8c:7f:7c:7b:
4a:d7:a6:e0:21:2d:83:0e:0d:d6:0a:6f:99:bc:82:
a9:79:08:1f:19:10:d6:ec:9c:82:51:2f:65:84:dd:
66:74:c0:cc:a2:f5:fc:65:86:29:d7:40:af:4d:11:
e9:c0:e5:43:15:9b:78:54:ad:bc:42:10:72:d3:c4:
10:dc:32:50:4d:e4:56:72:3f:20:86:f1:2e:23:b7:
63:ad:21:5f:2d:e4:3d:48:18:8e:e1:07:d3:4a:80:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:CC:81:CC:69:5C:1B:F6:05:26:D5:F3:83:A4:84:22:7C:B1:46
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:49:44:c1:d8:43:51:1a:68:a5:08:fe:e4:e9:db:29:3e:5a:
bd:77:cd:46:eb:d8:ec:0e:58:26:51:bb:6d:ac:f3:30:2a:fb:
29:3d:ac:7d:eb:67:13:18:d5:fb:af:55:2f:92:48:3e:9e:91:
2b:27:28:ad:f9:39:00:6e:2b:6f:94:f2:65:cb:46:e5:83:f3:
57:1d:29:f8:61:f6:54:f8:c2:7e:88:ac:44:25:57:5b:46:e4:
94:9c:51:51:d3:1f:83:0c:e3:f1:47:c8:76:a0:6f:e4:c5:22:
5f:84:dc:64:c6:03:93:ef:38:16:0f:3e:54:58:32:ca:d9:c6:
ef:2e:86:1e:12:3f:ba:75:5b:5e:20:b2:98:a1:21:3c:6d:fc:
dc:fe:38:05:b9:1b:83:c7:84:41:33:32:f7:68:f6:41:f8:81:
05:c4:bb:24:da:2c:44:52:2d:9e:d0:39:19:c5:0b:01:5a:7a:
b0:9d:51:c5:75:d9:81:73:3b:6f:e5:e2:9d:6c:17:0f:2a:12:
9c:5e:de:47:39:15:7b:e6:8e:6b:9b:8b:dc:be:7d:f0:be:3f:
63:05:cd:1b:cb:33:1f:60:b2:eb:63:54:ee:49:82:95:0a:d0:
79:5f:be:8d:f8:93:6b:5f:21:9d:12:47:4c:6e:66:95:9c:a1:
ff:61:e1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:06 2025 by rpki-client