
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
File: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft (raw, json)
Hash identifier: H+aVLmQHRbSFo1b18tQhgmdwHuiYm9iRsKQKonaeC6k=
Subject key identifier: 66:EE:CA:7B:93:7F:55:E8:21:7F:A6:24:15:EB:88:7C:06:8C:A7:95
Authority key identifier: B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
Certificate issuer: /CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Certificate serial: 0199FB45A19E7823021493B3EEE6BF14C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
Manifest number: 1114
Signing time: Sun 19 Oct 2025 07:01:08 +0000
Manifest this update: Sun 19 Oct 2025 07:01:08 +0000
Manifest next update: Mon 20 Oct 2025 07:01:08 +0000
Files and hashes: 1: snSOZMPfK49AItHHPweedqu08i4.roa (hash: pOp6DYxwdd50QS7EO4q/xTqIWe4F0C/r3RXRy+6+GXo=)
2: sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl (hash: +FbS5RHOTR6C9rD47BYZ5rghM3yV76iP1Dc+S6AB9Vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:a1:9e:78:23:02:14:93:b3:ee:e6:bf:14:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a48af3d96931bd90c3bfd55f1fa3047b356014
Validity
Not Before: Oct 19 07:01:08 2025 GMT
Not After : Oct 20 07:01:08 2025 GMT
Subject: CN=66eeca7b937f55e8217fa62415eb887c068ca795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:59:c6:2c:32:15:bd:ee:4b:1e:b4:c5:65:
8b:b0:aa:0f:08:c2:ab:97:52:a4:77:06:0c:e8:9f:
59:f2:d9:2f:db:a2:45:ca:02:77:2e:09:e8:00:5d:
47:bc:88:b9:8a:30:c4:15:55:da:38:68:5d:b4:b2:
f7:07:29:cf:77:41:05:32:e1:75:20:7d:21:7f:78:
df:eb:f4:2b:e0:cc:ff:0e:a2:e0:7e:7a:f4:46:18:
cd:5a:62:24:af:52:1c:cb:9c:b1:c1:4e:66:54:a0:
55:ae:11:e4:03:66:aa:fc:28:fb:c1:28:d4:8e:a1:
7d:ac:0d:6c:9c:60:a1:c6:12:ff:43:62:41:fc:b6:
2a:a2:03:97:5f:d3:27:f8:12:80:ad:c4:7f:6f:a7:
6e:03:01:6f:b7:87:31:1a:17:b7:7c:0d:40:2b:70:
88:0a:cc:5e:d6:30:8d:31:6c:bd:9c:86:4c:ac:a9:
98:19:7f:d4:1d:6c:8e:42:7c:9a:f6:8c:a6:b2:94:
ef:bd:79:f0:75:53:06:46:58:fb:d5:88:d3:8a:4b:
dd:88:3c:b3:85:e6:c8:39:71:8d:f2:9b:20:dd:c7:
37:c4:e1:70:38:06:88:90:e2:ec:ab:1b:8b:3f:bd:
d9:69:e2:28:29:24:bf:f7:3e:c0:41:a9:97:fd:79:
cf:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EE:CA:7B:93:7F:55:E8:21:7F:A6:24:15:EB:88:7C:06:8C:A7:95
X509v3 Authority Key Identifier:
keyid:B2:A4:8A:F3:D9:69:31:BD:90:C3:BF:D5:5F:1F:A3:04:7B:35:60:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d51adf-1492-4c14-8821-b9bd0659483a/1/sqSK89lpMb2Qw7_VXx-jBHs1YBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:59:bf:8d:8b:85:79:8d:e0:eb:5c:32:c5:38:3a:29:a5:8f:
6f:3c:84:f0:6b:33:c2:7f:e4:fc:c2:c1:05:0c:3a:c0:8e:4a:
9e:e0:52:b2:30:79:27:78:74:29:a4:48:e7:7c:f2:ca:e7:ea:
97:12:b9:df:ad:a5:9e:4f:a0:5c:af:00:8b:a7:b0:8c:cd:e3:
e1:71:f4:b5:f8:ff:49:da:18:e7:1a:db:d8:7d:42:08:01:6c:
66:3d:3a:d4:fd:ca:e6:00:d9:97:10:2b:6f:45:92:75:78:10:
52:d9:87:55:18:b8:b3:db:31:e4:6b:4d:ab:e0:5a:98:f5:76:
f8:26:61:59:47:76:f7:f9:db:5a:92:b1:a3:fa:95:d0:bf:aa:
20:b8:3d:30:cd:80:f1:a2:d0:fe:ae:1c:e4:7a:2e:a5:3c:6e:
0e:43:93:76:66:77:63:82:57:6b:7e:29:82:d1:8e:2a:55:3e:
39:d9:df:6d:65:d6:72:79:16:ea:f3:e8:27:57:6f:39:32:6e:
07:9d:22:99:4e:0d:f5:97:4f:9b:7f:72:a7:20:29:c7:da:2c:
44:03:6f:23:d5:62:5f:5f:59:84:f1:35:a5:a4:22:3a:99:38:
d5:a8:a6:a8:e2:86:f0:0d:50:2a:99:cc:36:b3:fa:17:4b:24:
63:49:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:51 2025 by rpki-client