Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: DEvLxt2Aea1ZR8vfO6GkJDtbOOFIUKVXu70X1KA7Bok=
Subject key identifier: 80:E7:30:A4:02:9D:46:B1:C1:3A:87:98:E0:0A:A3:B9:35:B7:F5:42
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 0198D404903AAF765B8CD36EBC3DA57207B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 1004
Signing time: Fri 22 Aug 2025 23:02:05 +0000
Manifest this update: Fri 22 Aug 2025 23:02:05 +0000
Manifest next update: Sat 23 Aug 2025 23:02:05 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: UqU8YVzW7VBnj463iMuMDMvkmGu/NbTpWYBHEQ+PONA=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:90:3a:af:76:5b:8c:d3:6e:bc:3d:a5:72:07:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Aug 22 23:02:05 2025 GMT
Not After : Aug 23 23:02:05 2025 GMT
Subject: CN=80e730a4029d46b1c13a8798e00aa3b935b7f542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:1e:ff:ee:a2:cc:71:0f:3b:7f:4f:41:e0:
12:0f:25:e8:41:16:f1:c0:52:b7:42:22:d9:c9:fd:
b1:43:22:b3:4c:b9:cf:39:d6:06:fc:54:d5:8a:18:
c5:d3:cf:2a:6a:24:5f:d2:ac:a1:69:df:55:b2:1d:
75:97:fc:d5:46:cd:52:b5:24:aa:fb:dc:a0:be:2a:
53:7e:81:07:be:d8:1d:d8:40:0f:d4:de:2c:0f:9d:
33:28:87:b2:5c:db:3c:c9:05:19:97:8b:fa:0f:3d:
b5:c0:05:50:bd:29:e3:56:07:6a:d8:25:a8:d4:70:
27:67:7f:10:11:8e:10:38:ec:ca:5d:48:66:39:5a:
02:de:57:ed:dc:c9:15:53:c9:1f:1c:aa:ed:5d:fc:
81:11:8f:a8:88:d0:45:6f:63:f1:73:87:c4:a7:76:
16:44:a5:ad:5a:4d:bf:aa:50:32:3e:f3:96:45:24:
06:20:d2:e7:34:a8:ce:87:94:a3:bf:78:a3:28:74:
0e:2d:77:d4:6b:de:db:85:46:0d:36:b1:5d:16:7c:
e9:44:2f:2c:09:f5:26:3c:e8:6c:5f:cd:f6:e9:7e:
4b:d9:1a:2e:62:52:60:d5:e5:4c:8d:d3:24:13:50:
65:88:f8:b3:ca:78:a1:39:d1:da:9b:49:bf:eb:df:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:30:A4:02:9D:46:B1:C1:3A:87:98:E0:0A:A3:B9:35:B7:F5:42
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a1:ac:dc:ec:8a:e0:57:f1:76:84:24:7f:3b:63:db:ae:d5:
b7:8e:39:a0:9f:4f:a1:24:9c:b7:b0:36:dd:37:5b:5d:eb:96:
37:77:3b:d8:6c:47:c2:57:eb:75:f7:1f:67:fa:5a:fd:23:67:
ea:f3:3e:f3:f3:39:0f:f0:ad:15:fd:20:ac:c6:45:2c:a5:65:
92:64:47:89:eb:a9:8e:af:3c:51:dd:d5:26:0b:96:ac:0d:27:
5d:97:58:ed:06:27:01:a3:b9:89:69:6f:1f:52:90:7f:0b:65:
b6:4d:e0:fc:a7:f5:ab:1d:a3:b1:7f:93:eb:fd:c7:a4:5b:99:
8f:00:83:9d:62:5e:73:d5:c6:ae:ea:03:46:fb:1c:dd:84:34:
69:c1:bb:a6:82:6d:f3:57:fa:b0:d8:91:4a:5d:b4:97:ed:5a:
60:c4:1c:2c:46:88:ca:f6:d5:ca:43:b7:32:1b:b7:79:fd:12:
39:08:5a:34:39:25:d3:aa:2e:15:f6:3f:3c:87:2a:c7:7d:17:
1c:95:cf:a0:3a:70:12:84:1f:a1:ab:3d:b3:c1:ca:59:57:05:
1b:ce:00:76:05:bd:18:11:6c:6b:15:30:4b:7a:fb:32:65:6a:
b1:93:34:e2:59:aa:84:44:0c:7b:a5:3d:14:14:ff:9a:ee:2f:
a7:ad:e3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:30 2025 by rpki-client