Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
File: SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft (raw, json)
Hash identifier: lkGajncMLh7mJ15Ae/l0loDYkRlKL1IbWzkh/yczbHk=
Subject key identifier: 98:6A:7E:D6:9E:4D:64:60:74:FB:B7:09:7A:EE:E9:4C:41:ED:B8:70
Authority key identifier: 49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
Certificate issuer: /CN=490957f79e6c28146643f49d9fe17fc4f163776c
Certificate serial: 0196572601D10C6129002740CA289ACF7DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
Manifest number: 0BE2
Signing time: Mon 21 Apr 2025 07:00:30 +0000
Manifest this update: Mon 21 Apr 2025 07:00:30 +0000
Manifest next update: Tue 22 Apr 2025 07:00:30 +0000
Files and hashes: 1: SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl (hash: R6p0Hom4z0c2ar7XXWb3zMmIqal2l7OQ7+GMTNA8e0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:01:d1:0c:61:29:00:27:40:ca:28:9a:cf:7d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490957f79e6c28146643f49d9fe17fc4f163776c
Validity
Not Before: Apr 21 07:00:30 2025 GMT
Not After : Apr 22 07:00:30 2025 GMT
Subject: CN=986a7ed69e4d646074fbb7097aeee94c41edb870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:1e:86:97:78:50:68:c3:f6:b5:7a:0c:86:
35:f0:0e:53:51:dd:fd:90:18:5a:ee:9b:bd:2a:8a:
40:05:dc:d3:b3:86:8a:14:6a:f5:d8:29:24:43:2a:
87:fe:b4:35:da:ca:42:c6:18:11:34:1f:4a:2c:66:
ce:58:5d:40:b2:88:d2:49:ab:c6:b6:27:50:9b:f7:
3b:04:45:63:7d:7c:01:b2:e5:49:51:75:a2:65:e9:
57:ff:4e:fd:32:da:6c:bc:21:90:c7:2b:85:3c:b2:
51:cc:04:3b:8d:bb:cc:8d:9c:c5:98:a0:23:5a:55:
24:e9:e1:a4:d1:00:b3:56:24:7b:c6:78:0b:c3:c8:
62:0e:38:8e:a0:d0:1f:a7:e6:42:2b:8d:03:b4:55:
ad:e2:61:a0:da:75:64:b8:0c:7e:98:39:d8:e5:bb:
fa:50:5f:61:38:db:e1:38:65:7f:e7:68:f6:d3:d1:
8d:28:8a:1c:23:55:12:20:bc:dd:df:b8:fc:f3:ab:
4b:73:e5:0f:60:bb:9e:da:12:ec:3a:61:2d:3e:6c:
ce:46:f8:2c:ea:37:23:5d:26:84:be:8d:60:19:ed:
a2:52:ad:c6:cc:55:36:41:46:9d:79:98:b5:6a:47:
16:08:0a:42:39:fa:39:72:d2:04:1a:15:c3:0f:b1:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:7E:D6:9E:4D:64:60:74:FB:B7:09:7A:EE:E9:4C:41:ED:B8:70
X509v3 Authority Key Identifier:
keyid:49:09:57:F7:9E:6C:28:14:66:43:F4:9D:9F:E1:7F:C4:F1:63:77:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQlX955sKBRmQ_Sdn-F_xPFjd2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/58fc37-5738-44f3-bdd5-6743e5026240/1/SQlX955sKBRmQ_Sdn-F_xPFjd2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:93:ca:7e:1b:13:ba:66:5c:19:39:a3:11:29:3c:f5:0a:26:
84:a1:c9:66:71:b9:a5:3e:6b:66:72:21:ca:48:4b:6e:f9:b0:
f9:f3:c1:d6:07:f6:fc:da:44:c4:12:b8:e8:cd:1b:b1:94:d9:
ed:1a:e7:b2:19:5f:b4:af:db:b2:41:24:9c:50:36:ef:39:ca:
da:74:83:04:5f:8d:89:29:a9:ac:e1:5c:b5:80:9a:b3:d9:2d:
ff:ce:55:51:eb:cb:ea:cd:dd:21:0a:3b:6f:72:bf:1f:a8:61:
9d:a1:5c:35:69:31:63:dd:1b:0e:66:ad:2a:79:2e:29:12:99:
9b:1f:ab:77:fe:82:d5:cd:b6:de:0f:3b:2e:fa:aa:04:bc:61:
8c:f5:d4:bb:e4:50:03:af:86:d0:f3:63:0b:3f:d0:9b:0b:49:
13:a1:64:e7:91:29:32:1d:79:73:29:bc:31:d3:c2:ec:5e:9b:
86:63:38:66:37:7b:7c:c6:b0:a1:33:89:2a:e3:64:64:44:e1:
23:21:14:b4:ce:9d:60:34:a6:15:9a:c0:78:d1:4b:df:f5:da:
3e:87:19:b7:71:cf:7f:96:c9:14:3e:40:c4:c3:e7:14:77:99:
06:fa:8c:c4:5c:f2:b3:a8:26:aa:54:a0:6e:e2:c3:ee:e7:b0:
4c:d1:28:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:18:48 2025 by rpki-client