Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: x2qlfM4C72ckUHvH5Atad2mS2gG67pH2aMtt+FxXrno=
Subject key identifier: C8:8F:D8:00:16:F7:1B:56:2C:30:09:29:AC:86:8D:90:D3:C7:5C:BB
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 019A73A79B321B76B735D0ED097AAD0FF61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0E03
Signing time: Tue 11 Nov 2025 16:02:35 +0000
Manifest this update: Tue 11 Nov 2025 16:02:35 +0000
Manifest next update: Wed 12 Nov 2025 16:02:35 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: IpfgLHv7AF/w1GmIHi9VF7ywYuk1Qt2impgqWBkR9qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a7:9b:32:1b:76:b7:35:d0:ed:09:7a:ad:0f:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Nov 11 16:02:35 2025 GMT
Not After : Nov 12 16:02:35 2025 GMT
Subject: CN=c88fd80016f71b562c300929ac868d90d3c75cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:46:c2:78:51:5a:72:50:70:59:4e:42:99:
d3:5b:eb:fe:ef:b4:b8:3c:c2:cf:90:d5:a8:7e:2d:
0e:25:de:f5:43:76:ec:f6:be:a9:8d:d5:f0:c5:02:
10:0a:2c:0f:4c:fb:9f:59:a6:f0:0d:70:23:73:c5:
b0:b3:87:00:cc:33:c8:d8:ba:d2:3e:a0:29:f8:d3:
db:15:6d:d2:0d:e6:d1:2d:40:a7:e5:58:61:5e:61:
88:35:c1:f1:2b:48:49:10:ed:32:c7:25:2a:26:f5:
1a:b7:71:5c:1b:b6:ce:52:b2:74:d5:31:80:4a:66:
90:10:5e:55:bc:e5:55:75:f6:11:2c:f7:1c:d9:cb:
1c:70:a8:95:93:6e:6b:9f:2a:36:bd:04:b0:ec:79:
8a:71:f3:53:cb:40:96:4b:86:c3:5a:af:65:bc:78:
64:d7:a4:e1:9e:23:e2:1e:91:9c:6d:83:be:3f:98:
1c:c7:ae:02:9b:f6:45:78:15:a1:9e:be:7f:08:4d:
3d:89:91:33:e6:d1:c4:6f:35:a0:5e:3a:64:92:d9:
5f:6d:e0:a3:c1:c7:51:0a:63:33:00:a1:ec:4b:fe:
16:45:15:60:40:38:b0:c2:42:9d:96:f8:72:65:ea:
23:e0:24:ca:4c:6d:d3:5e:2e:30:c5:ff:06:c8:24:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:D8:00:16:F7:1B:56:2C:30:09:29:AC:86:8D:90:D3:C7:5C:BB
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5b:ce:c5:62:e7:eb:de:1b:83:da:cf:86:34:d4:80:f5:34:
1a:bc:e3:b0:7a:a8:95:43:73:82:54:ed:8b:d7:0a:9a:18:6f:
65:e7:bf:be:4a:df:54:80:d5:cf:6a:8c:42:f5:77:fc:3f:21:
c8:bb:88:0a:a7:38:75:ea:e6:55:c1:30:f1:fc:6f:3f:d9:7f:
be:f4:1d:44:72:c5:9e:9f:39:2b:31:44:c5:72:b3:c6:7d:6b:
30:f7:a5:6f:27:cd:77:b1:51:3b:51:e5:3c:b1:67:85:13:e2:
a8:94:3d:4b:2b:6a:81:1f:47:cc:88:40:0e:b7:01:52:96:53:
23:da:05:14:fc:46:67:a5:8c:c3:15:61:ee:40:ca:fe:34:9c:
c0:48:c4:eb:f1:f3:bf:ae:71:df:d1:e8:06:c8:cf:4e:c9:3f:
2a:11:95:6c:ee:ea:a1:d3:68:5d:4d:10:36:af:2b:62:4b:aa:
ac:48:09:49:ca:33:e4:b6:cc:f5:72:78:68:5b:d6:39:ce:2c:
40:a1:79:a3:f8:81:7a:03:48:e8:c7:16:4c:a7:41:60:1e:e8:
20:91:33:f8:bb:55:56:23:ff:95:69:ad:3f:ce:98:63:e0:0c:
f7:8f:f0:a1:b5:c7:c0:8b:ee:b8:b6:6a:2b:cd:ad:8b:57:52:
e9:74:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:17 2025 by rpki-client