Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
File: SqbchPRraQchSFpEBb_JOdolSWk.mft (raw, json)
Hash identifier: PT1ZPWwvaTYi1wyZzrUePHplGdg3tc7+1xNzV3849+g=
Subject key identifier: C9:88:11:1B:95:AA:8E:D7:10:18:0D:58:06:83:67:0B:09:D9:78:51
Authority key identifier: 4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
Certificate issuer: /CN=4aa6dc84f46b690721485a4405bfc939da254969
Certificate serial: 0199FF59494DC3846D5C8D18EA5300F98461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
Manifest number: 0239
Signing time: Mon 20 Oct 2025 02:01:05 +0000
Manifest this update: Mon 20 Oct 2025 02:01:05 +0000
Manifest next update: Tue 21 Oct 2025 02:01:05 +0000
Files and hashes: 1: SqbchPRraQchSFpEBb_JOdolSWk.crl (hash: xA5Jnps1HM9dEXvk0NxCcST+jCVNf/7xcl4/lBM+jMw=)
2: b__HqKu-AMKs2UTm6p-v2OEs7OA.roa (hash: f7396FR/6MUlNoG4o7cmoviarkI5X6EgtZeJr/g+J2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:49:4d:c3:84:6d:5c:8d:18:ea:53:00:f9:84:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6dc84f46b690721485a4405bfc939da254969
Validity
Not Before: Oct 20 02:01:05 2025 GMT
Not After : Oct 21 02:01:05 2025 GMT
Subject: CN=c988111b95aa8ed710180d580683670b09d97851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:d0:7d:59:d9:68:2e:56:57:d3:fa:a3:9a:
03:d2:2a:c4:90:3d:c9:dd:34:1b:6d:09:1f:df:98:
35:8d:cc:09:69:f3:e1:8e:b2:80:29:ea:61:73:6b:
a3:dc:ec:a3:9b:51:88:cd:7b:03:0f:42:7e:16:e9:
28:dd:02:8d:47:b7:1b:64:26:80:aa:97:85:36:6a:
53:bd:46:83:4d:4e:9f:b7:ef:91:27:83:07:1e:a1:
7b:09:33:53:49:c2:18:cd:b2:8e:98:16:f1:6e:71:
88:f5:93:5f:45:48:95:34:a7:33:e8:6b:ee:9c:cd:
35:dc:39:72:47:ae:52:ae:4c:36:9a:99:cf:d2:89:
26:59:5a:6c:de:08:8b:02:0b:08:13:79:69:62:84:
ad:06:69:04:b7:30:2b:50:ed:ad:1c:2d:df:21:f7:
5b:cc:84:78:a0:c3:d5:6f:83:0b:33:97:ca:bd:3b:
85:6c:f3:57:2f:73:b2:44:0a:9f:bb:85:04:99:b0:
70:b9:d7:41:96:13:45:fb:10:f2:9b:38:1d:b5:c7:
31:50:27:43:e7:21:82:0b:cc:7e:8b:17:0b:b7:c4:
98:05:62:ad:f4:ba:21:b9:91:86:14:7b:bd:94:14:
cb:0a:79:3c:d3:54:de:08:86:d6:32:f0:3b:a5:ec:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:88:11:1B:95:AA:8E:D7:10:18:0D:58:06:83:67:0B:09:D9:78:51
X509v3 Authority Key Identifier:
keyid:4A:A6:DC:84:F4:6B:69:07:21:48:5A:44:05:BF:C9:39:DA:25:49:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqbchPRraQchSFpEBb_JOdolSWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/57377a-1a7b-4e84-a244-09fc9bb34b9d/1/SqbchPRraQchSFpEBb_JOdolSWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0a:33:bb:cc:6a:d8:9e:c6:dd:ab:72:52:8c:83:99:a0:11:
1f:73:00:8e:62:3f:ea:fb:3f:c6:6f:92:23:2f:fc:33:ed:31:
a6:c3:7b:c6:40:53:c8:e4:97:ff:d1:fb:68:11:8d:f7:ce:6b:
8f:72:24:65:0d:08:08:07:d0:a5:18:f5:af:e0:83:8e:4e:ba:
47:de:22:62:72:6d:1a:88:84:a5:d5:30:5d:ba:9e:65:c0:2e:
5c:5e:e8:8d:59:c7:39:97:ad:2e:46:11:94:80:26:cf:96:89:
75:7b:7a:10:38:29:a4:c0:4d:c1:e4:26:26:d3:73:06:8e:5f:
8b:2c:52:bb:fc:d4:e7:48:9f:03:d8:62:30:7b:65:3f:d6:30:
41:e2:92:fc:18:55:0e:17:3c:b7:8f:10:69:a5:53:8d:05:c9:
4e:3e:72:00:c5:cf:81:dd:33:b9:d9:6b:79:88:d6:9d:bb:92:
aa:7a:52:1e:c8:87:73:61:09:77:74:e4:79:0b:8c:28:fb:36:
e8:6e:80:e9:32:eb:8c:a6:94:fd:b4:02:8c:8a:09:39:85:af:
06:66:23:23:72:3c:e1:9e:7b:60:af:a1:52:cd:40:1a:48:46:
83:0a:fe:d0:dd:36:44:bc:0c:f7:50:72:3c:13:5b:80:2c:ae:
9a:4c:f0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:09:24 2025 by rpki-client