
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
File: Sqk04w2mkOdRcTO30hJjJlWnS4c.mft (raw, json)
Hash identifier: 7Un3dXW5ZQBkZJIXSnxeouzibCXaQ2oQNSgZU/1SnL4=
Subject key identifier: 5C:CE:62:CA:57:D1:21:9E:86:29:72:C2:32:11:B5:04:A8:C2:22:77
Authority key identifier: 4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
Certificate issuer: /CN=4aa934e30da690e7517133b7d212632655a74b87
Certificate serial: 01974C6930ECE1D3D3695018BD8817FC04DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
Manifest number: 0E7A
Signing time: Sat 07 Jun 2025 22:00:51 +0000
Manifest this update: Sat 07 Jun 2025 22:00:51 +0000
Manifest next update: Sun 08 Jun 2025 22:00:51 +0000
Files and hashes: 1: Sqk04w2mkOdRcTO30hJjJlWnS4c.crl (hash: k6SmiCfmNP9vEXx2rUvBKAi+G/+a8cluMqlXlYE3KXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:30:ec:e1:d3:d3:69:50:18:bd:88:17:fc:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa934e30da690e7517133b7d212632655a74b87
Validity
Not Before: Jun 7 22:00:51 2025 GMT
Not After : Jun 8 22:00:51 2025 GMT
Subject: CN=5cce62ca57d1219e862972c23211b504a8c22277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:cc:96:96:3a:4a:99:46:78:f0:f4:e5:95:
b6:f0:82:66:67:db:79:dc:60:fb:65:b4:83:b0:c6:
70:df:21:94:56:60:cc:80:92:7c:ad:9d:74:aa:28:
91:e4:51:d8:ea:5f:ce:1e:ed:11:f9:96:04:18:fe:
b0:b9:ab:49:cf:93:28:d7:61:c7:60:6c:11:ef:96:
9c:23:f0:3f:54:0d:3c:ca:a2:c7:e0:bd:58:38:fc:
dd:78:e6:ba:4c:a1:57:9e:cb:48:17:2c:80:8d:dd:
8d:63:08:42:77:5e:e5:4b:04:cd:aa:98:84:9e:10:
2c:80:a7:d0:07:66:eb:03:09:01:80:07:7d:48:c3:
4b:83:07:f7:46:f4:98:72:49:b7:13:97:a0:b9:7f:
0f:b3:0d:fb:84:1f:91:4c:2c:28:36:9d:9a:75:84:
87:65:11:bd:a5:1e:d4:51:24:dd:0e:32:6a:59:2c:
d6:6d:a9:fe:e8:9a:62:87:63:06:66:80:19:60:fc:
db:9e:35:05:67:2a:ee:b2:84:6f:cb:8e:82:72:35:
ba:2c:da:01:4d:7e:d6:73:24:fa:b3:3f:7f:25:c9:
b4:d1:85:0e:c8:33:ae:e3:00:bd:1d:82:26:e1:4b:
15:30:9e:9f:cf:2f:00:30:57:21:5d:af:70:d7:a0:
45:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CE:62:CA:57:D1:21:9E:86:29:72:C2:32:11:B5:04:A8:C2:22:77
X509v3 Authority Key Identifier:
keyid:4A:A9:34:E3:0D:A6:90:E7:51:71:33:B7:D2:12:63:26:55:A7:4B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sqk04w2mkOdRcTO30hJjJlWnS4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea47f3-1172-4001-87c8-b99cdf975eb6/1/Sqk04w2mkOdRcTO30hJjJlWnS4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b6:2e:a9:71:cc:90:e5:cc:6e:5e:db:3f:bb:ff:a6:45:5f:
5b:58:8d:4e:b5:07:71:96:b3:c8:d4:4a:fd:54:8c:af:f1:56:
51:78:fa:f3:55:db:bb:a6:7c:03:8b:25:8b:43:43:1e:0f:ce:
85:6a:62:da:2e:c7:e0:cc:30:20:23:8b:dd:74:37:4a:44:26:
b8:24:e9:19:85:53:78:fd:89:52:7b:57:8c:08:a7:1c:d1:27:
4b:2f:a7:a6:cf:76:2b:71:ce:be:2c:7a:81:2c:82:32:35:7f:
4b:7c:5f:14:ed:04:f4:86:23:5f:b5:9b:38:63:c5:bb:df:19:
df:dd:c8:c9:5e:3e:72:54:a1:e5:a0:e8:53:9a:7f:8b:d9:89:
7c:b8:fd:da:4c:b7:6a:12:05:88:b0:1a:5e:89:4b:22:85:61:
74:40:97:09:e4:57:6f:41:ca:2d:98:ce:43:98:c9:62:dd:6d:
32:d0:fd:93:48:72:a4:1a:5a:67:30:1e:4a:3e:a2:88:82:32:
52:fe:f2:db:2f:8c:5b:fa:a5:bb:4e:c1:60:0c:c8:04:5b:05:
03:f7:45:1a:c9:c5:e6:35:6b:a0:12:fc:94:80:59:b2:5a:33:
d6:ce:ae:e5:1e:d9:de:2c:83:e6:43:e3:25:bd:c8:b9:c0:e5:
1e:a4:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:59:11 2025 by rpki-client