Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: JSFdk1dvVBFbPsfieh9w6bCqmN4IkegbfQcTnvgqAYM=
Subject key identifier: 4E:13:25:36:76:91:EF:21:87:5F:99:A1:A9:D6:52:F1:59:F5:3B:CA
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 0198D54DC229F1A32F0D9E925508234AB9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: uXBO3ZkjIzrazFqRrIEbyLWsc0JpNF3wO/wDc92qj9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c2:29:f1:a3:2f:0d:9e:92:55:08:23:4a:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=4e1325367691ef21875f99a1a9d652f159f53bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0f:94:a8:fe:13:5a:99:36:22:a2:84:d2:18:
30:c1:9e:3e:96:46:59:69:8d:db:be:40:a4:b2:7b:
a9:7e:15:a9:e3:c9:38:04:01:13:00:35:2e:bc:c9:
c1:6f:7e:c5:4c:4c:93:5c:f5:e0:56:7f:15:c0:3a:
ac:69:de:2b:70:92:32:fe:eb:e6:71:ac:22:67:cd:
6b:c5:97:66:73:65:ef:00:b1:49:19:a8:b4:0e:85:
00:5d:45:00:34:98:33:c7:fb:87:20:52:ab:c0:7d:
29:b9:f2:1f:2a:78:71:91:f2:ba:fd:3a:58:ee:69:
88:06:32:28:1a:f1:fd:9e:e4:6e:bf:bc:9e:3c:a6:
b6:d8:98:6d:51:2d:60:25:41:4f:1f:32:e6:2b:8b:
3c:a0:e4:88:c8:98:b4:d0:2b:52:15:9a:63:b1:93:
a7:4a:01:23:78:83:ef:17:52:9c:98:d4:4b:45:3b:
e8:18:69:f7:79:89:68:c5:52:07:f7:19:a6:24:59:
29:49:5d:92:6e:ec:26:19:07:db:15:ae:1b:8f:9f:
88:84:32:73:a6:d2:ec:bd:ad:95:ed:cd:58:d3:16:
34:43:09:73:83:33:f3:1c:e4:91:40:24:61:1d:10:
23:05:0c:c6:c7:ab:ff:8d:3f:b2:94:0c:45:fa:7c:
47:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:13:25:36:76:91:EF:21:87:5F:99:A1:A9:D6:52:F1:59:F5:3B:CA
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:1c:96:0f:05:4b:28:3f:67:51:23:a2:2f:f1:30:5c:e0:
af:01:d3:92:f8:16:57:71:89:af:c1:6a:92:9f:29:a7:26:9b:
07:09:16:09:05:f4:93:f8:30:a5:66:bd:2a:7b:da:e2:c2:90:
04:00:75:7f:7f:e4:ed:82:a1:07:33:bd:ac:d8:d9:fd:f9:cd:
ad:49:e2:0f:81:aa:46:0b:80:b7:3c:82:3f:90:1e:63:86:4c:
d9:ba:b8:d8:68:d8:09:42:61:40:2f:05:54:ac:dc:cf:2a:f5:
48:d0:29:a3:e3:4f:03:5a:01:77:3a:f1:67:f8:21:33:4d:3f:
e3:aa:6b:6a:85:51:98:f0:35:34:27:7e:0e:28:fe:d9:9d:0b:
00:03:15:49:65:26:be:53:76:a6:00:c2:c3:23:2f:fc:96:67:
41:b8:a9:d2:29:46:82:57:8a:6d:c1:ce:94:85:4c:ad:f5:59:
78:0e:56:06:90:94:a0:4b:a0:6c:a9:a0:25:df:80:70:3d:2a:
68:c5:b2:dd:5d:5c:17:98:2b:c7:82:00:e3:d5:08:36:6b:b7:
f3:70:3d:24:5a:67:09:f8:f2:9c:cc:9d:dd:60:97:b7:f0:34:
0a:44:d2:86:5e:35:bd:bc:1c:b3:6a:e5:c6:4c:aa:87:d7:ff:
c3:c3:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:15 2025 by rpki-client