Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: H/rImxq5FrKzQPqRmxqakHB5wj2SB4VBBdgb5/wU3vY=
Subject key identifier: 62:94:7B:5C:7E:AE:2E:63:90:28:E3:BE:A9:5D:44:8B:AE:9E:BE:C9
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 0199FD6B757EB1170AD5FB1E380CCE2F1B28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 109E
Signing time: Sun 19 Oct 2025 17:01:42 +0000
Manifest this update: Sun 19 Oct 2025 17:01:42 +0000
Manifest next update: Mon 20 Oct 2025 17:01:42 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: gbMgGS4yVw9pOcAguBYGXDLDCVe5/W8Cil1u2wB/aSI=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:75:7e:b1:17:0a:d5:fb:1e:38:0c:ce:2f:1b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Oct 19 17:01:42 2025 GMT
Not After : Oct 20 17:01:42 2025 GMT
Subject: CN=62947b5c7eae2e639028e3bea95d448bae9ebec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:13:b6:ff:cc:1d:d7:0c:8f:2c:d2:27:5c:8f:
6d:cf:38:01:79:fe:1c:32:4d:1a:41:c5:46:58:69:
73:62:49:ec:1a:45:41:70:67:de:36:3a:d9:d2:69:
e1:36:55:04:81:10:19:be:df:f6:fe:37:a7:af:14:
5f:58:0c:ba:46:a8:da:2a:d7:ee:3e:06:a5:84:62:
57:36:99:d0:3b:56:17:45:f3:ed:a9:7d:91:8a:40:
43:88:ef:c5:b0:ed:4e:00:6c:ec:69:bf:f5:23:70:
ed:83:95:2a:72:13:f8:59:44:a2:fc:8f:a4:b8:52:
49:79:be:6b:1c:8c:47:4b:76:da:e3:51:4f:ee:10:
b5:f2:b0:67:e8:05:86:b6:3f:ac:0e:cb:63:a4:1d:
9b:f3:13:d9:00:04:2c:50:c6:be:53:b4:e0:22:8a:
a3:0d:a6:c5:f4:df:a5:bd:bf:11:ba:c9:1d:5a:ba:
8c:58:91:6b:e8:af:cb:35:7a:ab:d9:b3:1e:be:58:
19:6f:08:80:95:26:a4:89:27:65:b9:f4:81:e1:17:
bf:fe:9c:a0:08:20:c7:e2:4f:0a:9e:3f:93:eb:7a:
06:cd:94:4e:1b:40:89:d9:d3:e1:91:e6:79:63:6a:
6c:80:60:4f:80:fa:5c:d4:9e:61:44:92:6b:fa:cb:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:7B:5C:7E:AE:2E:63:90:28:E3:BE:A9:5D:44:8B:AE:9E:BE:C9
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:c8:33:9d:4b:53:14:a4:ca:70:05:6f:55:51:fe:b3:f5:
1e:42:40:7a:31:10:10:c7:a8:ab:df:16:54:f9:83:4e:99:b3:
1b:e4:b2:c5:85:9b:a1:8e:45:5a:0a:13:c6:ac:81:3f:62:e2:
0d:ab:8c:9b:a5:99:d7:d3:ed:b5:a7:bc:6f:ef:89:e6:9b:eb:
f4:b2:c3:ed:32:72:13:48:57:4c:cd:ba:7a:cb:77:8c:5b:b7:
93:35:f1:44:44:2c:fb:d4:e2:26:ef:99:38:a7:f5:08:fb:3f:
a3:35:5b:e1:61:72:30:df:a0:07:d1:0b:ac:27:39:cf:58:d3:
0b:4f:b3:cb:30:16:16:cb:7e:88:29:4e:02:6c:f0:87:9b:38:
7f:b2:0f:8c:9f:1c:91:9f:fd:bf:e3:1d:7f:9b:75:0f:5a:56:
73:c2:ff:b5:36:5c:6a:ce:9d:fa:30:b3:fe:b6:5e:2c:b9:54:
7a:53:e2:c8:4e:94:92:d0:b6:b4:a3:82:36:66:3e:65:1d:bb:
3f:98:77:ce:e1:b2:f5:6c:cb:e4:6d:b2:62:fe:b9:cb:4e:a8:
49:1c:49:b5:af:48:1b:46:50:3c:c4:b8:da:5b:51:5a:e0:29:
0d:57:ed:27:05:10:7b:e0:67:90:7e:f0:67:ae:92:f3:de:0e:
2c:72:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:29 2025 by rpki-client