Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: 44iC2x+zCEt1JrIiBXpkMAqEQ507NdLd+tEtOrzJMEw=
Subject key identifier: 85:2F:78:1B:B3:32:A6:58:02:F4:AD:5B:01:F8:99:6A:9B:2A:44:77
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0197504572CD20C58E9CD30164BB29A58752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0C63
Signing time: Sun 08 Jun 2025 16:00:17 +0000
Manifest this update: Sun 08 Jun 2025 16:00:17 +0000
Manifest next update: Mon 09 Jun 2025 16:00:17 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: QBTVFFKSd8ey96SIqsZrPpK+YI6k+MgnJ6SGZul51wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:72:cd:20:c5:8e:9c:d3:01:64:bb:29:a5:87:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Jun 8 16:00:17 2025 GMT
Not After : Jun 9 16:00:17 2025 GMT
Subject: CN=852f781bb332a65802f4ad5b01f8996a9b2a4477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:95:1d:8b:4e:ae:8b:07:2c:d4:ee:40:9a:8d:
59:74:dd:26:74:48:f0:55:01:8d:ca:4a:d2:13:f0:
76:4d:6c:01:1e:54:09:2d:e4:3c:16:60:4c:c6:3d:
fa:95:a4:67:56:e2:ad:86:7b:70:98:00:1b:00:ea:
02:5e:ee:62:c8:2c:e6:40:dc:82:1d:b8:a1:53:42:
d7:30:b9:66:53:19:20:20:41:fa:39:75:55:ea:d2:
5e:a7:af:3b:e7:cd:e1:71:ef:b1:78:d7:c2:11:ff:
68:0a:3b:f8:a8:34:cc:42:e1:29:dd:d5:2d:83:db:
49:1b:c8:72:29:ca:cf:26:ce:b0:e4:3f:43:ca:06:
f0:6f:63:41:30:42:69:62:4b:17:20:26:08:36:8a:
1a:dd:ee:2b:c7:b3:3b:a5:3f:53:df:6f:5e:d3:b0:
cc:4e:e9:6c:0e:9a:7c:05:94:c1:02:76:46:20:8f:
3a:d1:f8:5e:8b:fe:c1:a6:51:1f:d5:95:05:0e:64:
17:1c:a2:25:58:24:3d:f8:73:dd:06:a3:f0:8a:a7:
9b:88:a3:02:8e:cf:03:cd:eb:d4:c6:06:d0:6e:42:
6c:e8:d8:82:e7:5e:ef:53:9c:e6:ea:a0:6a:57:85:
17:35:ed:3b:67:e7:82:ab:cc:7c:97:b5:6f:35:2b:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:78:1B:B3:32:A6:58:02:F4:AD:5B:01:F8:99:6A:9B:2A:44:77
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ee:f3:47:cc:a4:fa:2b:e7:35:e2:44:78:57:4a:6f:33:1a:
60:be:17:a3:39:ba:49:50:85:24:91:e4:87:13:f7:0c:37:c3:
0f:8a:b6:49:90:16:8d:18:27:6c:96:73:f6:85:08:cd:9a:d4:
47:3b:b0:9e:7e:5b:71:8b:6b:85:a5:1d:8d:ab:00:5e:3c:46:
d9:de:d7:7d:06:b4:3f:10:0f:d5:38:ba:7a:50:67:b9:87:5e:
f1:88:28:a7:30:06:39:2f:32:e2:f9:7c:00:49:70:d7:a8:e9:
75:85:36:0c:f7:07:b5:bf:9e:49:5f:48:53:4c:44:14:5b:f5:
7f:3e:76:a9:00:b9:ba:48:f9:e3:ef:fb:1c:89:64:7b:f6:7c:
19:85:ff:46:01:7d:fc:7f:b2:1a:92:d3:f7:75:fa:1a:5a:45:
96:6b:78:5f:69:cd:cf:cb:a8:95:f8:d5:a9:3e:cb:63:43:93:
7a:c9:b6:38:83:d7:a6:e3:e8:63:01:53:e0:ea:3c:15:cb:62:
58:54:1f:5d:3a:e2:2c:6b:e1:ab:34:a8:d1:8b:8f:a8:8a:ad:
bd:47:07:32:45:61:61:07:f0:d6:b4:6f:b0:19:e1:5f:f5:5f:
55:0d:12:e5:02:46:9a:a0:a1:2d:cb:d0:ca:e4:7d:09:62:c4:
1d:48:ae:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:51 2025 by rpki-client