Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: 4+ECh3Mn//y2dHVFeK4SNu3NLn9IGHm3l7EyjQmZFSc=
Subject key identifier: 86:5B:84:B1:14:97:F8:70:9D:24:D6:56:DC:BC:14:48:AB:85:32:5A
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 0198D583B84B6FCA823ED362C1F2A3BEF493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 06:00:35 +0000
Manifest this update: Sat 23 Aug 2025 06:00:35 +0000
Manifest next update: Sun 24 Aug 2025 06:00:35 +0000
Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=)
2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: f3tWnADkCuklqrIE6MY3aVH2UUDCrftPmqoCut4bjTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:b8:4b:6f:ca:82:3e:d3:62:c1:f2:a3:be:f4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Aug 23 06:00:35 2025 GMT
Not After : Aug 24 06:00:35 2025 GMT
Subject: CN=865b84b11497f8709d24d656dcbc1448ab85325a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a1:6c:8a:8b:86:a5:a0:a4:f3:bf:f6:d3:66:
06:60:e1:b8:7c:49:f8:70:90:db:27:4e:ce:4e:48:
bf:b3:08:1a:69:c1:d6:03:20:fb:2a:1e:e4:f9:64:
04:2a:0d:28:28:17:60:a5:08:a6:d7:38:3b:53:11:
ee:46:63:ff:a0:a5:ec:03:49:c1:8d:30:77:52:d1:
6d:da:f2:9e:1e:25:ae:01:d8:65:26:cb:e9:c2:74:
e0:bb:97:5e:fc:e2:68:20:09:c3:e0:d2:ba:c1:de:
9d:83:20:fd:33:19:b1:ab:1e:4c:15:59:f9:37:90:
45:d6:71:63:29:2a:cd:02:07:31:55:1b:55:d7:91:
83:10:8e:73:d2:3c:4a:a6:dc:d2:ee:8c:f7:da:0d:
8f:7b:28:20:32:74:53:02:f9:d7:f9:d4:6c:8d:20:
ef:d9:8d:7e:cf:40:48:df:14:d0:6f:af:c6:7b:4d:
6a:ce:ca:1a:56:32:a8:0d:0d:22:a1:d2:2b:62:0d:
34:a5:fd:2e:8d:f6:55:39:ed:46:49:44:5e:3d:d4:
f6:6a:0f:1f:6d:05:a0:89:76:96:13:26:c2:ef:12:
f9:1e:65:63:b6:d3:53:a2:93:e1:56:62:bc:27:20:
c2:2b:77:ac:fa:9e:a8:c9:9b:91:e3:12:13:f8:64:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5B:84:B1:14:97:F8:70:9D:24:D6:56:DC:BC:14:48:AB:85:32:5A
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:51:73:14:fa:b2:57:8e:20:08:ee:9f:16:1b:44:01:06:92:
51:0a:3d:14:d4:ea:01:58:f7:c0:4a:5e:2c:c3:8e:21:49:bf:
02:f3:b0:8a:10:d0:1a:23:06:4f:38:62:e7:1f:d3:68:c2:9a:
f1:e2:d5:15:f0:3f:96:de:cd:90:5d:91:b2:f4:e1:f8:10:df:
bd:5d:7e:62:4a:cb:9a:a5:55:e1:93:79:c4:60:72:3f:56:f2:
b4:06:1e:6f:41:32:f7:ad:0c:ef:86:12:83:f8:ee:71:53:0a:
c2:9b:89:52:02:4e:4f:8f:0b:e1:e1:47:52:b5:61:b5:c2:a7:
d9:9b:87:27:39:4b:b8:fb:8c:3c:be:29:3e:b7:f1:80:bb:f7:
34:38:20:40:96:b4:e8:47:de:a0:9f:aa:83:a3:ef:85:9a:39:
b6:69:25:ab:49:80:f8:f3:a0:f7:76:8f:57:47:80:49:00:4c:
40:52:84:be:f8:40:bd:c3:8f:d1:08:02:c3:54:28:c7:0b:84:
98:40:7b:c8:b8:be:5a:6f:47:35:0b:79:10:63:56:48:44:7b:
9f:4a:fe:82:9f:09:91:18:b4:2d:44:d2:e1:72:49:a0:21:37:
90:d1:82:19:b5:b1:04:e1:f8:a5:ec:c4:49:81:bb:d5:63:b0:
67:d6:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:37 2025 by rpki-client