Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: 5J+YxrYNZh2zM8kkphiOCyQGJzrZ8a3mjweHfx+IRxw=
Subject key identifier: 43:AB:EA:6F:84:F6:CC:81:27:34:46:66:8D:47:99:CA:8E:B2:E3:8B
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 0199FDD9DBB16693A33BCEB88D0081C8156E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 19:02:16 +0000
Manifest this update: Sun 19 Oct 2025 19:02:16 +0000
Manifest next update: Mon 20 Oct 2025 19:02:16 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: EPVEA2lvoOuxTui/fvb90jO2jsz0QfimJNF7P1UGJU0=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:db:b1:66:93:a3:3b:ce:b8:8d:00:81:c8:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Oct 19 19:02:16 2025 GMT
Not After : Oct 20 19:02:16 2025 GMT
Subject: CN=43abea6f84f6cc81273446668d4799ca8eb2e38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:7a:6c:e6:18:ff:f9:7b:f2:de:7c:f4:df:
cb:7e:32:e6:42:b8:a6:82:0c:c8:ff:13:e6:15:00:
31:2c:36:88:78:32:ef:5e:c5:8a:34:c8:3c:16:89:
79:5f:4d:c0:3f:8a:8c:e9:fb:22:cf:ad:dc:42:83:
e4:a5:67:81:56:a9:ab:e2:74:16:1f:23:6c:6e:b5:
03:20:e4:7f:96:2c:bb:ed:71:64:b1:eb:6a:bf:30:
a9:70:fe:ff:0e:62:d9:8d:f7:f4:1e:5f:24:2a:da:
dc:13:a9:ca:fb:1e:78:5d:48:c4:e0:86:5f:e6:83:
78:57:21:7a:10:c9:7a:42:94:47:fb:db:75:8d:7c:
9f:c2:3c:25:9b:b5:cc:16:f7:79:36:ca:09:2b:6b:
92:27:29:57:5a:91:0a:8c:40:81:ac:23:e1:d1:c5:
ad:06:d8:ba:f0:ac:8d:81:63:4c:ae:27:97:95:14:
20:9b:55:b9:67:0a:8c:22:d0:ad:ea:a0:f2:23:b0:
f5:cc:ac:88:ca:05:6a:d1:a9:7a:d1:87:1f:39:6c:
84:8a:29:12:70:d8:17:ea:e3:04:de:d7:59:c4:81:
6e:4e:c2:5f:67:28:7c:ff:40:91:c0:48:a8:fe:91:
26:d6:d8:8d:59:70:71:1f:26:e8:60:26:36:49:a8:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:EA:6F:84:F6:CC:81:27:34:46:66:8D:47:99:CA:8E:B2:E3:8B
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:53:9d:e3:4c:0c:1f:8d:77:53:f8:20:75:13:94:ef:f1:
5d:47:23:86:0a:79:aa:68:f3:18:0f:bc:c1:0f:0e:65:aa:80:
7f:86:72:ac:8b:06:c2:56:35:ac:e1:50:db:49:aa:89:c3:cd:
20:f3:a3:8e:65:07:a8:60:10:f4:25:09:8e:96:a2:f4:d3:24:
47:b2:74:87:61:34:26:37:cc:9a:f7:6f:e4:a3:47:6b:e8:ce:
83:9b:f1:e7:27:13:44:ef:37:ed:c8:85:3c:fa:df:bb:62:e0:
2f:ed:00:4d:04:0a:71:e1:ae:20:5c:85:21:ac:10:b7:d9:8e:
1c:82:6b:06:b0:d1:a2:57:0c:23:a3:fc:fd:25:50:d3:3c:90:
a1:ac:60:01:ae:38:8b:04:f0:55:d5:c9:59:a3:71:22:6f:31:
b2:fb:0b:cc:c2:f5:73:d4:4c:03:2d:71:7c:ff:9c:9a:d5:ee:
3f:a6:ca:b6:d9:3c:96:e5:3d:3e:f1:fe:e6:db:5e:e4:40:17:
4e:af:b5:c6:c7:85:30:61:84:cd:57:25:08:6b:59:2e:cd:25:
fc:ae:04:c0:d9:a8:0c:a0:b7:60:9d:34:d8:ce:4f:84:3e:08:
ce:64:cb:cb:12:fe:60:61:93:f7:db:48:8d:e2:e0:ea:77:1c:
2e:e2:30:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92duxZpOjO864jQCByBVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx
OTk1ZGIwHhcNMjUxMDE5MTkwMjE2WhcNMjUxMDIwMTkwMjE2WjAzMTEwLwYDVQQD
Eyg0M2FiZWE2Zjg0ZjZjYzgxMjczNDQ2NjY4ZDQ3OTljYThlYjJlMzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqel6bOYY//l78t589N/LfjLmQrim
ggzI/xPmFQAxLDaIeDLvXsWKNMg8Fol5X03AP4qM6fsiz63cQoPkpWeBVqmr4nQW
HyNsbrUDIOR/liy77XFksetqvzCpcP7/DmLZjff0Hl8kKtrcE6nK+x54XUjE4IZf
5oN4VyF6EMl6QpRH+9t1jXyfwjwlm7XMFvd5NsoJK2uSJylXWpEKjECBrCPh0cWt
Bti68KyNgWNMrieXlRQgm1W5ZwqMItCt6qDyI7D1zKyIygVq0al60YcfOWyEiikS
cNgX6uME3tdZxIFuTsJfZyh8/0CRwEio/pEm1tiNWXBxHyboYCY2SagXbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOr6m+E9syBJzRGZo1HmcqOsuOLMB8GA1UdIwQY
MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt
NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx
LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbRTneNM
DB+Nd1P4IHUTlO/xXUcjhgp5qmjzGA+8wQ8OZaqAf4ZyrIsGwlY1rOFQ20mqicPN
IPOjjmUHqGAQ9CUJjpai9NMkR7J0h2E0JjfMmvdv5KNHa+jOg5vx5ycTRO837ciF
PPrfu2LgL+0ATQQKceGuIFyFIawQt9mOHIJrBrDRolcMI6P8/SVQ0zyQoaxgAa44
iwTwVdXJWaNxIm8xsvsLzML1c9RMAy1xfP+cmtXuP6bKttk8luU9PvH+5tte5EAX
Tq+1xseFMGGEzVclCGtZLs0l/K4EwNmoDKC3YJ002M5PhD4IzmTLyxL+YGGT99tI
jeLg6nccLuIwkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:27 2025 by rpki-client