Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: 2LqK4LWnOv3WiBFc2E2Ob4FuepU66eyeJFJySN1+1CI=
Subject key identifier: 1C:6E:DE:E2:BF:BF:A8:80:6C:1C:16:CC:09:DE:FB:38:72:A9:CB:44
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019769608BA054DC311B3DEDEA8CAE0FA5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 15A2
Signing time: Fri 13 Jun 2025 13:00:24 +0000
Manifest this update: Fri 13 Jun 2025 13:00:24 +0000
Manifest next update: Sat 14 Jun 2025 13:00:24 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: 4PQ1V1XSmWEk45lz3h0EtAMLoYbde4P8qxS57bz6vDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:8b:a0:54:dc:31:1b:3d:ed:ea:8c:ae:0f:a5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Jun 13 13:00:24 2025 GMT
Not After : Jun 14 13:00:24 2025 GMT
Subject: CN=1c6edee2bfbfa8806c1c16cc09defb3872a9cb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:ae:45:cb:44:1b:e5:16:a3:0a:41:03:32:
e3:69:c2:0d:42:df:8d:5a:ed:b7:89:cf:fc:50:01:
ad:8e:b9:f9:09:bb:bc:51:2f:3b:ed:ea:fa:f0:dc:
37:e2:96:3d:e9:2e:9e:0b:ef:33:8b:50:4d:30:3c:
7f:c7:86:71:92:c3:23:c0:b5:8e:ff:f5:a6:f2:d4:
8e:e7:ea:75:be:c6:df:c2:75:ce:87:89:3d:46:15:
49:42:87:92:cc:aa:c9:e2:61:0b:ff:2d:44:79:b0:
ad:3f:eb:a4:76:77:41:de:10:98:94:fd:ff:f4:4b:
1d:65:51:42:83:e9:a7:92:48:75:88:98:b3:6a:d7:
cf:9e:64:f3:8d:5e:de:27:19:1c:c5:a4:b0:d0:9a:
8a:05:53:6e:a7:a3:3e:84:44:49:79:ee:23:87:5a:
99:a1:54:0c:73:23:79:34:5a:b0:61:d6:fa:04:32:
06:d2:9f:d9:f0:86:30:76:71:e3:85:9c:47:4b:ab:
17:b2:94:4e:06:b0:33:5e:12:93:80:49:8c:f4:62:
e0:5d:49:e7:38:cb:d9:f5:da:4f:32:45:ba:68:ef:
be:74:4b:41:20:10:25:4a:9b:6e:30:00:d8:63:0f:
d2:2e:d7:80:80:1d:43:4b:4f:38:a6:22:f4:7b:5d:
c3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6E:DE:E2:BF:BF:A8:80:6C:1C:16:CC:09:DE:FB:38:72:A9:CB:44
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:fb:6b:52:14:91:c4:76:99:35:7a:11:51:7d:02:d1:02:ce:
a3:5d:cc:9e:00:cb:1f:48:14:0e:31:c0:f0:89:5c:9d:1a:06:
1c:4b:90:a3:38:63:1d:77:6c:36:b6:91:a2:89:de:cb:24:b8:
92:96:aa:fe:8f:5a:98:11:07:70:ff:2c:3c:a6:e6:91:9c:37:
5f:9b:3b:11:b1:ef:43:22:c1:9f:0a:e3:0a:a4:27:65:fd:00:
47:0b:5d:1c:f6:64:bb:a5:38:27:f3:58:9b:c4:86:09:1e:28:
32:81:b6:0c:39:f9:0c:29:a5:71:25:40:7c:29:2e:4b:7b:b1:
14:cc:91:81:c6:8d:10:a9:89:0d:56:b3:3f:4b:01:39:92:47:
6f:ee:cb:80:70:79:86:dc:48:54:ca:11:22:a2:9c:92:96:24:
cd:de:77:95:08:de:45:01:ed:72:fe:52:25:eb:14:8f:89:c1:
d0:df:cd:99:f1:c1:99:46:6f:ba:c0:e6:1e:72:26:b3:41:d3:
36:b0:87:5c:38:bb:ca:bb:70:09:b2:18:5d:a0:a9:bd:5d:bf:
dc:fe:a0:99:5b:ee:f5:5e:a7:e6:21:a1:6e:7f:b3:c7:a0:97:
1e:10:58:af:e0:a7:dc:a4:c9:84:af:e1:0e:58:a9:3f:5d:d7:
28:fb:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:10:02 2025 by rpki-client