Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: qvg1vFVITVW6lsj7e9PnwXA77ED80JQngf79D2JDi7c=
Subject key identifier: F9:B4:DC:F9:94:40:37:9B:41:D5:66:19:3E:98:43:12:EF:37:82:41
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 0198D705C9F83129C3B6EC5872C31C7D38F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 1045
Signing time: Sat 23 Aug 2025 13:02:17 +0000
Manifest this update: Sat 23 Aug 2025 13:02:17 +0000
Manifest next update: Sun 24 Aug 2025 13:02:17 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: 4sNPqpGCu7chH8yG1+N3H0jFD5wYM8Lutx9RAAl9kPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c9:f8:31:29:c3:b6:ec:58:72:c3:1c:7d:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Aug 23 13:02:17 2025 GMT
Not After : Aug 24 13:02:17 2025 GMT
Subject: CN=f9b4dcf99440379b41d566193e984312ef378241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:af:dd:80:df:2f:3f:72:70:bf:56:61:f5:
ea:95:ee:95:a7:f4:ab:79:2f:0d:49:2d:27:6b:05:
c4:79:4a:7c:af:97:bc:ef:88:39:de:69:a1:d4:e2:
75:ff:45:69:9c:3a:77:67:de:b3:4d:93:de:eb:db:
70:10:c4:6a:cc:67:7b:57:a8:56:21:68:9a:76:a0:
da:14:07:90:98:4e:c0:ed:d9:56:2b:2b:2a:d3:51:
fd:dc:68:38:24:45:6b:0c:c7:d1:81:d3:dc:14:e4:
64:24:ec:2a:2b:19:40:72:92:22:91:86:c6:53:6c:
bb:80:a3:d2:cc:47:b4:8c:48:67:06:a4:47:b2:e3:
5b:0b:d8:ed:65:3b:53:6c:83:78:d3:18:7f:dd:d2:
24:5b:38:e5:54:7d:80:9a:19:67:e7:c4:8c:51:20:
44:5c:49:3a:b5:46:fd:3d:1a:03:e4:6e:31:05:5b:
2b:a6:68:c9:c8:2b:9b:be:58:5b:39:c6:4a:5e:d9:
bc:c5:63:eb:76:4e:ee:63:6c:e4:20:34:61:67:cd:
dc:52:b7:bb:be:7c:ec:6c:d8:49:e4:9a:a5:b5:fd:
63:a1:b1:46:b1:3b:a9:84:37:f0:0b:26:87:45:b5:
f8:78:47:15:eb:70:94:b1:d1:4b:eb:ec:0a:90:08:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:DC:F9:94:40:37:9B:41:D5:66:19:3E:98:43:12:EF:37:82:41
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:e9:b2:0f:e4:76:28:24:4b:ed:48:f5:b5:a9:7a:3d:0a:
f4:ea:d4:87:30:d8:cc:7c:d3:8f:21:e0:71:56:06:91:d2:9b:
4f:b8:c6:52:ec:2c:68:db:cd:9e:37:1f:7d:d8:c7:00:14:b5:
98:f9:ef:58:aa:c0:db:c6:33:b7:4e:6d:92:64:65:7f:d7:a4:
37:4d:5f:2c:21:f7:c5:49:44:0f:32:43:c2:78:ab:f3:46:bc:
ae:7e:f1:e1:8d:f4:ca:e2:75:03:e6:fa:ff:b3:c0:7e:35:a2:
f1:b5:e5:89:19:0e:33:0b:65:c7:ac:6a:be:66:17:b1:f9:d1:
84:48:1f:e6:d4:61:ce:ec:e7:f9:ad:d5:d7:78:3d:16:26:bb:
41:89:16:ea:04:8e:23:e6:e9:6a:2a:92:23:0a:56:c9:9d:ba:
bc:af:8b:7d:9d:99:e6:52:02:43:57:86:ce:5d:a9:38:c3:06:
05:4e:53:f1:45:8f:8d:e9:95:43:d9:58:d0:7e:76:d1:25:68:
bd:a1:80:b9:d8:4d:6e:22:3b:08:5f:00:c2:3e:c5:76:e0:71:
f8:52:c3:6c:92:82:25:b5:47:04:b0:49:8d:d7:bc:14:3a:d5:
51:10:8b:ce:2a:00:c6:e6:a6:33:f4:6b:dd:47:5f:8f:6d:8f:
be:a1:65:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:24 2025 by rpki-client