Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: O3kRX6AzocWOPBiTHjFm5ix/4uiZd2WdIZmJQQWw+jM=
Subject key identifier: A3:D8:92:36:76:AF:7B:BE:5E:42:3A:14:86:B6:8D:AD:A7:22:79:36
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0198D84F3B9E9B0988BF98E3ADBF8A4CF993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 1660
Signing time: Sat 23 Aug 2025 19:02:07 +0000
Manifest this update: Sat 23 Aug 2025 19:02:07 +0000
Manifest next update: Sun 24 Aug 2025 19:02:07 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: jjOo8Jri4bnASWXzktJCoC7KWHUPatmMRBct/P0ElZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:3b:9e:9b:09:88:bf:98:e3:ad:bf:8a:4c:f9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Aug 23 19:02:07 2025 GMT
Not After : Aug 24 19:02:07 2025 GMT
Subject: CN=a3d8923676af7bbe5e423a1486b68dada7227936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:4b:72:ca:01:af:e1:64:3a:1e:4f:ee:51:
5b:ef:90:ef:fb:32:c1:57:cf:1f:4a:b2:f3:c9:b5:
e3:da:d3:4e:ae:af:56:6a:35:99:ca:44:27:7e:a8:
94:aa:b0:73:49:25:13:cc:9d:20:93:79:77:c9:9e:
95:53:e7:c8:49:44:f6:68:52:90:33:f8:40:f9:58:
62:a7:a8:9c:e5:ab:f1:67:b2:14:03:18:bf:bd:0d:
ee:65:dd:f7:5b:4a:6c:35:5f:36:a5:e4:37:37:32:
08:7d:06:96:bc:2d:e4:32:69:58:86:f1:d3:0c:00:
5f:6a:8a:80:50:42:11:11:31:f2:d4:53:b1:36:22:
7c:61:2f:77:5a:d9:8b:48:56:54:2a:43:89:bb:b5:
bf:80:2b:d0:e5:d9:74:1e:20:d6:d0:a4:b5:da:38:
fa:ce:fe:4d:b2:fc:e8:6e:68:fc:ef:bc:5c:07:72:
3f:96:f4:bb:d7:87:b8:60:41:2e:d9:59:79:18:3c:
a5:9e:dc:38:65:0c:1c:57:8a:59:57:8a:10:8f:be:
ec:7c:2f:4e:d8:e2:d0:0f:a2:57:28:0e:3f:ba:cf:
e8:60:b5:36:4f:5a:26:3b:db:fd:9b:d4:4f:46:f3:
87:91:d7:29:86:45:78:76:f7:77:8c:76:ea:6c:21:
fe:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:92:36:76:AF:7B:BE:5E:42:3A:14:86:B6:8D:AD:A7:22:79:36
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:5b:75:9e:35:cb:fa:05:64:88:f6:3e:6a:17:cd:ec:0d:
67:fc:7a:be:67:d9:be:e0:5e:48:46:7d:cd:56:1d:77:ff:63:
95:f0:c4:45:11:79:fe:0a:e7:09:f9:87:74:d2:07:3f:10:ad:
e8:db:6c:c6:a9:8d:cf:8d:ca:70:41:1f:c7:cc:f8:5e:22:41:
9b:d8:05:ec:da:a3:a2:88:d7:56:4e:50:d9:14:6e:62:17:fe:
03:57:62:e3:d1:f2:54:ba:17:19:c8:11:e8:e8:74:44:62:ba:
84:47:53:82:35:4a:b5:25:be:2d:03:d5:c4:9f:ab:b9:52:a5:
69:4e:62:14:cf:2d:b2:44:25:f4:77:08:4d:26:6c:4b:26:fa:
40:0a:2a:22:5d:3b:4e:d6:e5:42:18:5a:f3:f9:7c:5c:6a:8b:
76:59:83:a6:d7:30:3b:b6:83:18:90:e1:7c:7e:a9:d9:03:00:
40:9e:d9:34:15:91:bc:9d:95:05:bd:6c:1c:68:ff:75:f3:d9:
35:6c:bd:66:ce:a0:70:0f:6f:e4:08:08:2f:4f:c0:d3:15:eb:
47:88:90:06:7f:41:55:d1:ac:dc:14:9a:b4:24:8d:b7:01:b8:
2d:eb:5c:22:99:a8:e7:c6:7f:0c:3d:86:d0:66:f1:34:fb:fa:
b2:27:54:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:27 2025 by rpki-client