Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: v0PXjo2KUkYH8meDw8B3F6uf9gALNZhJ/ERkjFJDZDo=
Subject key identifier: EF:50:D5:46:76:AC:46:97:C4:4B:08:62:B8:DB:B6:4C:F7:33:B4:09
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0198D73B3493CCD7DB8D6279C916719B2C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0E62
Signing time: Sat 23 Aug 2025 14:00:38 +0000
Manifest this update: Sat 23 Aug 2025 14:00:38 +0000
Manifest next update: Sun 24 Aug 2025 14:00:38 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: L5e2jSaQn0PKd+3m8ktf7D3zr2r+zBEEL8c/osFmlRY=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:34:93:cc:d7:db:8d:62:79:c9:16:71:9b:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Aug 23 14:00:38 2025 GMT
Not After : Aug 24 14:00:38 2025 GMT
Subject: CN=ef50d54676ac4697c44b0862b8dbb64cf733b409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e9:1f:58:fd:17:50:b0:6d:e0:70:a9:c5:cb:
12:07:40:95:14:75:60:58:9e:3a:ab:d8:81:5c:67:
21:56:ad:3b:b1:a1:51:ba:44:81:e5:32:8c:69:be:
4a:aa:93:1c:ab:98:42:23:09:62:be:b3:2a:a7:69:
17:81:98:93:bf:11:78:a5:38:77:bf:79:01:33:65:
de:5c:ff:2e:c4:07:cc:57:f8:16:79:fc:3a:c1:9d:
16:2d:51:32:c9:19:d8:67:d0:30:a6:3e:90:d5:87:
8d:5f:c0:e1:ea:af:f8:40:6c:b6:9e:04:df:4e:15:
3f:ca:24:ee:6e:82:28:21:75:78:87:c7:f5:05:29:
81:cb:c9:3f:5e:f7:98:ee:2e:a5:e5:6a:d9:cc:f0:
78:41:fd:85:41:b2:dc:58:b3:a4:fa:eb:44:99:03:
8c:8d:f8:c9:c1:07:b4:73:b5:5c:df:68:c4:72:e9:
de:aa:29:75:99:54:4c:b5:fb:bb:84:9c:82:91:99:
66:8f:55:4f:c5:f6:71:c0:eb:0b:2f:a5:ec:d1:42:
08:f3:49:98:69:70:f4:ff:1d:7d:04:da:05:26:ab:
51:55:a8:48:e7:69:61:a0:5a:32:d3:34:ee:fa:1c:
ca:22:f3:ac:9b:81:9b:66:7d:98:5d:93:8b:8a:eb:
f9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:50:D5:46:76:AC:46:97:C4:4B:08:62:B8:DB:B6:4C:F7:33:B4:09
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:c1:25:34:cc:92:b1:41:1f:cc:7c:0f:51:80:82:39:87:
05:2d:94:08:e5:c7:72:2b:46:db:56:82:85:06:72:15:13:ed:
1f:f6:65:93:68:1b:c9:f5:45:b4:78:fb:c3:e1:8d:20:65:a1:
ea:9c:85:28:76:8c:9f:99:a2:7a:1d:e4:7b:ec:6b:b5:17:dd:
9e:a6:e9:ea:48:32:78:f3:21:cf:6b:19:13:c2:4d:73:1b:74:
85:12:81:37:a5:f6:b8:d1:26:f9:37:af:70:33:56:16:dd:1e:
92:bc:d7:fd:68:60:c8:88:16:04:71:cc:bb:b9:a6:df:a4:c8:
a1:1f:11:1f:68:6f:e4:a7:60:f3:45:db:df:7d:31:f8:84:17:
67:2a:8a:4d:ec:c3:3b:e6:6c:ca:8c:75:d6:37:5b:11:04:8a:
e8:bf:b9:3c:2e:76:4c:3f:69:5f:6a:ab:92:e5:42:32:85:a8:
6d:cd:21:a1:7b:5f:b3:fe:6f:b1:bd:ec:fb:2a:6c:8a:eb:e2:
16:fd:d4:b2:f7:2a:19:37:94:ce:d1:2a:54:12:88:d6:3c:48:
79:7a:37:a2:9d:11:b5:e9:8a:a9:59:9c:5d:81:41:b1:01:92:
3d:d9:e1:7a:41:6d:69:0f:f6:3e:89:59:53:00:9d:13:0d:38:
b0:d2:c5:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXOzSTzNfbjWJ5yRZxmyx4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2
MmY3MDkwHhcNMjUwODIzMTQwMDM4WhcNMjUwODI0MTQwMDM4WjAzMTEwLwYDVQQD
EyhlZjUwZDU0Njc2YWM0Njk3YzQ0YjA4NjJiOGRiYjY0Y2Y3MzNiNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+kfWP0XULBt4HCpxcsSB0CVFHVg
WJ46q9iBXGchVq07saFRukSB5TKMab5KqpMcq5hCIwlivrMqp2kXgZiTvxF4pTh3
v3kBM2XeXP8uxAfMV/gWefw6wZ0WLVEyyRnYZ9Awpj6Q1YeNX8Dh6q/4QGy2ngTf
ThU/yiTuboIoIXV4h8f1BSmBy8k/XveY7i6l5WrZzPB4Qf2FQbLcWLOk+utEmQOM
jfjJwQe0c7Vc32jEcuneqil1mVRMtfu7hJyCkZlmj1VPxfZxwOsLL6Xs0UII80mY
aXD0/x19BNoFJqtRVahI52lhoFoy0zTu+hzKIvOsm4GbZn2YXZOLiuv5yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO9Q1UZ2rEaXxEsIYrjbtkz3M7QJMB8GA1UdIwQY
MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt
ZjNlYWFlNjMzYTFlLzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl
LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt7BJTTM
krFBH8x8D1GAgjmHBS2UCOXHcitG21aChQZyFRPtH/Zlk2gbyfVFtHj7w+GNIGWh
6pyFKHaMn5mieh3ke+xrtRfdnqbp6kgyePMhz2sZE8JNcxt0hRKBN6X2uNEm+Tev
cDNWFt0ekrzX/WhgyIgWBHHMu7mm36TIoR8RH2hv5Kdg80Xb330x+IQXZyqKTezD
O+Zsyox11jdbEQSK6L+5PC52TD9pX2qrkuVCMoWobc0hoXtfs/5vsb3s+ypsiuvi
Fv3UsvcqGTeUztEqVBKI1jxIeXo3op0RtemKqVmcXYFBsQGSPdnhekFtaQ/2PolZ
UwCdEw04sNLF/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:28 2025 by rpki-client