Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: HQB8SEDKtymGKF+aDM09k6k46TmcN6dqgdirircsz8E=
Subject key identifier: D1:55:59:6B:4E:FC:C0:FD:B7:F3:A9:63:BD:30:EF:1B:F5:7F:1F:A3
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 0199FAD83B105C0E4902B1BC2460082C0327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0EF9
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: hyyvm1+/pG5sbXXeUmGjgkYnX7+MFcfOvwAToJvxcDc=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:3b:10:5c:0e:49:02:b1:bc:24:60:08:2c:03:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=d155596b4efcc0fdb7f3a963bd30ef1bf57f1fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b8:73:a4:fc:28:c5:dc:dd:05:65:25:92:87:
bd:e3:d2:d0:40:28:f5:85:3a:06:2a:2c:a9:aa:0b:
c0:a4:be:e3:62:59:b6:fb:9d:3d:62:29:97:d5:a1:
84:0c:d7:ee:e9:20:26:22:69:9d:44:82:da:1f:4b:
c9:ed:cc:b0:41:cd:27:fa:73:aa:51:dd:8c:41:25:
67:67:a1:81:c9:f2:32:d1:ec:8a:32:9a:ad:68:34:
f6:41:e3:98:0c:ec:06:2f:b2:4c:15:fa:91:1d:c7:
7d:55:4c:0c:79:f0:d8:83:40:20:62:fe:74:06:8d:
fe:c6:1e:22:02:e6:51:44:16:90:33:1d:ba:7e:61:
b1:0b:a7:fe:27:10:7e:53:70:21:a8:ce:f7:a8:cd:
d6:b0:9e:b9:63:6c:24:4b:dd:71:bf:22:8d:a6:8d:
d0:1d:19:83:80:1c:a5:ae:6c:22:c2:63:34:92:a2:
22:82:f8:64:32:84:f8:92:18:7a:9d:ff:6b:c1:7c:
1b:ee:17:c3:a7:31:60:c7:fa:84:8b:f4:63:f8:4f:
85:97:8a:13:76:0e:55:76:a0:48:d7:cc:ae:90:33:
06:13:2c:1f:97:b2:a0:b6:d9:a8:0b:44:f1:cb:08:
82:38:4a:38:0d:4a:06:3e:23:c5:91:80:e2:9d:e9:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:55:59:6B:4E:FC:C0:FD:B7:F3:A9:63:BD:30:EF:1B:F5:7F:1F:A3
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:87:41:03:70:78:f7:6c:b7:87:73:e5:90:f6:39:a7:4b:
3c:fd:d0:66:54:37:d8:9d:bf:99:f7:a5:07:5f:a7:77:1a:7a:
8e:f2:5d:a8:d6:cc:71:1b:60:a0:20:fc:c3:9d:0f:92:12:fe:
bb:49:43:f4:a9:af:e6:1b:68:23:d5:d4:56:8b:bc:fb:34:57:
b3:68:92:4e:4f:4e:af:ee:69:4a:c9:79:2c:a7:85:d1:8b:49:
5f:0c:d5:91:e4:4b:26:c7:d8:5a:08:b7:5e:95:a0:cb:cf:8e:
0e:cf:6e:4c:4c:e0:28:97:96:bb:76:db:66:e5:24:49:60:5c:
c9:af:17:08:e7:a7:21:20:07:8a:8f:cf:74:75:ab:da:7a:ad:
74:24:f7:45:0e:18:2c:fb:fe:9c:d3:5f:16:b2:3d:02:27:41:
6e:44:ed:4b:f1:0e:2b:27:fd:c5:f5:79:81:7e:66:78:c6:ba:
bc:03:63:93:9d:2b:7c:8c:1d:dd:4b:c5:ea:23:08:7b:59:06:
69:71:f6:3d:be:e4:05:6a:5f:1e:f0:4d:5c:d1:86:57:6a:68:
5a:6f:bd:e4:9d:1b:72:bd:f1:98:55:e5:90:d4:c6:94:19:9d:
ee:bf:83:38:b3:e0:ee:6f:f7:64:dd:b1:f2:db:1a:58:d2:6c:
90:05:53:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn62DsQXA5JArG8JGAILAMnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2
MmY3MDkwHhcNMjUxMDE5MDUwMTM4WhcNMjUxMDIwMDUwMTM4WjAzMTEwLwYDVQQD
EyhkMTU1NTk2YjRlZmNjMGZkYjdmM2E5NjNiZDMwZWYxYmY1N2YxZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rhzpPwoxdzdBWUlkoe949LQQCj1
hToGKiypqgvApL7jYlm2+509YimX1aGEDNfu6SAmImmdRILaH0vJ7cywQc0n+nOq
Ud2MQSVnZ6GByfIy0eyKMpqtaDT2QeOYDOwGL7JMFfqRHcd9VUwMefDYg0AgYv50
Bo3+xh4iAuZRRBaQMx26fmGxC6f+JxB+U3AhqM73qM3WsJ65Y2wkS91xvyKNpo3Q
HRmDgBylrmwiwmM0kqIigvhkMoT4khh6nf9rwXwb7hfDpzFgx/qEi/Rj+E+Fl4oT
dg5VdqBI18yukDMGEywfl7KgttmoC0TxywiCOEo4DUoGPiPFkYDinenN3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFVWWtO/MD9t/OpY70w7xv1fx+jMB8GA1UdIwQY
MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt
ZjNlYWFlNjMzYTFlLzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl
LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0mHQQNw
ePdst4dz5ZD2OadLPP3QZlQ32J2/mfelB1+ndxp6jvJdqNbMcRtgoCD8w50PkhL+
u0lD9Kmv5htoI9XUVou8+zRXs2iSTk9Or+5pSsl5LKeF0YtJXwzVkeRLJsfYWgi3
XpWgy8+ODs9uTEzgKJeWu3bbZuUkSWBcya8XCOenISAHio/PdHWr2nqtdCT3RQ4Y
LPv+nNNfFrI9AidBbkTtS/EOKyf9xfV5gX5meMa6vANjk50rfIwd3UvF6iMIe1kG
aXH2Pb7kBWpfHvBNXNGGV2poWm+95J0bcr3xmFXlkNTGlBmd7r+DOLPg7m/3ZN2x
8tsaWNJskAVTdA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:24 2025 by rpki-client