Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier: MfkpgHZK5+z3MAyp3IfPsCSS29rrCh0FICc3U+ltMVE=
Subject key identifier: CA:EF:9B:B9:A0:2D:AF:C2:0A:F9:E4:D2:DF:59:40:5B:FC:F2:C1:6B
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial: 0198D5BB893A2E93167CEB9E4657C6F37917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number: 04D7
Signing time: Sat 23 Aug 2025 07:01:33 +0000
Manifest this update: Sat 23 Aug 2025 07:01:33 +0000
Manifest next update: Sun 24 Aug 2025 07:01:33 +0000
Files and hashes: 1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=)
2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: 4wOYhx/JLzdVFBcblwiKVgSO6s3rNHbjRzXjUXt/bls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:89:3a:2e:93:16:7c:eb:9e:46:57:c6:f3:79:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Validity
Not Before: Aug 23 07:01:33 2025 GMT
Not After : Aug 24 07:01:33 2025 GMT
Subject: CN=caef9bb9a02dafc20af9e4d2df59405bfcf2c16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b6:66:2d:dd:ce:31:70:09:4e:a3:19:f2:7c:
8e:26:a3:f8:b9:61:cd:c4:5a:77:70:85:a7:0f:78:
a3:fc:83:82:8c:b6:d3:34:cd:03:0b:06:65:8b:c9:
b3:37:9d:36:3c:b7:24:c0:b7:7e:9a:1d:2c:7b:a5:
64:10:32:a0:31:c9:b0:96:a2:a7:85:87:5e:42:34:
93:ea:c9:85:3f:92:e0:da:72:84:56:92:e1:38:20:
5a:97:f1:8b:c0:c4:45:45:c3:49:e6:ba:82:0c:72:
a3:b3:4b:ac:93:28:c0:23:1f:84:d4:c4:a6:ad:43:
c6:93:3c:e3:27:01:e5:75:ad:be:0c:4c:c3:9b:a2:
7e:5d:d1:35:63:03:9a:78:c6:95:84:60:47:b9:f1:
6c:22:3b:1d:13:ad:89:87:ab:92:76:7d:a7:aa:5a:
c8:62:50:43:8b:75:f2:9e:c3:87:cc:fa:47:ee:39:
7c:d9:ba:17:68:43:e9:bc:58:ae:8f:f3:7d:25:cf:
66:ed:3b:70:62:57:0b:10:ef:13:e1:4a:e9:d6:56:
e9:20:75:74:e5:89:18:a5:3c:35:70:b1:f3:b8:ed:
f2:ef:8a:b1:90:af:c3:d2:d1:cb:35:aa:8a:58:77:
41:df:7e:57:5a:4b:14:43:2a:90:f1:59:a6:34:4e:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:9B:B9:A0:2D:AF:C2:0A:F9:E4:D2:DF:59:40:5B:FC:F2:C1:6B
X509v3 Authority Key Identifier:
keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0c:11:5e:87:35:63:1e:7f:97:dd:41:07:03:49:53:2e:e4:
08:cb:e6:1d:fb:24:8c:7e:9a:82:d6:76:a7:be:06:a1:c1:54:
ff:e0:d7:c2:98:22:60:db:a7:48:26:da:75:08:a4:8f:56:4a:
13:85:1e:d9:87:70:b5:78:dc:10:11:e5:f5:27:cc:fe:61:ef:
b4:1f:3d:11:62:01:9a:2e:61:5c:02:5a:16:8b:30:26:85:26:
48:6a:42:b2:b1:1e:59:77:9a:c5:6e:ae:2c:f1:e1:8b:a8:75:
bb:5e:b2:38:a9:11:54:21:f9:fa:aa:40:f9:91:d6:6f:68:cd:
c1:26:39:52:62:3f:11:97:ac:70:9e:8b:ba:f8:b9:f5:c3:9f:
bc:01:ab:fa:40:fa:2a:92:77:2f:3a:ff:5f:7e:03:74:df:06:
6f:61:a5:ce:a2:15:f7:dc:6b:f0:48:95:9e:2f:bb:ed:c8:05:
b3:0c:9f:44:da:1e:66:55:ba:82:d5:15:44:40:5b:7f:0a:e4:
59:5f:b1:0d:c3:53:93:8f:50:15:7a:3c:29:ef:98:74:a9:ec:
59:ef:82:1f:e8:71:40:ea:68:5d:97:8a:59:ce:91:5b:4a:b9:
5b:0a:f1:cd:f5:83:50:19:93:ef:d7:6b:a8:aa:43:3e:0e:7c:
55:e1:4c:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu4k6LpMWfOueRlfG83kXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYzZDY1OGI0OTRjYjE3MTUyMDZjNWNkNzZlNzkyZTcy
NDdlZjcwHhcNMjUwODIzMDcwMTMzWhcNMjUwODI0MDcwMTMzWjAzMTEwLwYDVQQD
EyhjYWVmOWJiOWEwMmRhZmMyMGFmOWU0ZDJkZjU5NDA1YmZjZjJjMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LZmLd3OMXAJTqMZ8nyOJqP4uWHN
xFp3cIWnD3ij/IOCjLbTNM0DCwZli8mzN502PLckwLd+mh0se6VkEDKgMcmwlqKn
hYdeQjST6smFP5Lg2nKEVpLhOCBal/GLwMRFRcNJ5rqCDHKjs0uskyjAIx+E1MSm
rUPGkzzjJwHlda2+DEzDm6J+XdE1YwOaeMaVhGBHufFsIjsdE62Jh6uSdn2nqlrI
YlBDi3XynsOHzPpH7jl82boXaEPpvFiuj/N9Jc9m7TtwYlcLEO8T4Urp1lbpIHV0
5YkYpTw1cLHzuO3y74qxkK/D0tHLNaqKWHdB335XWksUQyqQ8VmmNE5j4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrvm7mgLa/CCvnk0t9ZQFv88sFrMB8GA1UdIwQY
MBaAFLKvPWWLSUyxcVIGxc1255LnJH73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQt
YTJlZWJiMTY2ZmM4LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80OGI0MmMtYzllZi00ZTBlLTg2YjQtYTJlZWJiMTY2ZmM4
LzEvc3E4OVpZdEpUTEZ4VWdiRnpYYm5rdWNrZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApQwRXoc1
Yx5/l91BBwNJUy7kCMvmHfskjH6agtZ2p74GocFU/+DXwpgiYNunSCbadQikj1ZK
E4Ue2YdwtXjcEBHl9SfM/mHvtB89EWIBmi5hXAJaFoswJoUmSGpCsrEeWXeaxW6u
LPHhi6h1u16yOKkRVCH5+qpA+ZHWb2jNwSY5UmI/EZescJ6Luvi59cOfvAGr+kD6
KpJ3Lzr/X34DdN8Gb2GlzqIV99xr8EiVni+77cgFswyfRNoeZlW6gtUVREBbfwrk
WV+xDcNTk49QFXo8Ke+YdKnsWe+CH+hxQOpoXZeKWc6RW0q5WwrxzfWDUBmT79dr
qKpDPg58VeFMxw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:21 2025 by rpki-client