Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: t2PWZLF/X+2Jj6vqEqNbmUrP00WYqabSsVqnME0uvAk=
Subject key identifier: FC:C5:D6:E0:B0:63:D8:60:76:99:AB:DD:7A:FA:14:30:DF:D6:E6:77
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 0199FBEBC92B84EF6B3EB5D96AA076848EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 16F7
Signing time: Sun 19 Oct 2025 10:02:37 +0000
Manifest this update: Sun 19 Oct 2025 10:02:37 +0000
Manifest next update: Mon 20 Oct 2025 10:02:37 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: 1HfWLblJD2m93hkDBmv5YzRCIAneDTbcLTOR/pOh9Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c9:2b:84:ef:6b:3e:b5:d9:6a:a0:76:84:8e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Oct 19 10:02:37 2025 GMT
Not After : Oct 20 10:02:37 2025 GMT
Subject: CN=fcc5d6e0b063d8607699abdd7afa1430dfd6e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:9c:19:b9:71:d5:cf:db:5e:91:5d:f3:03:
67:e1:36:c9:91:81:e9:de:75:b5:e9:df:a1:a8:3a:
14:c6:39:2b:ad:fd:31:43:c8:57:5e:2d:5b:70:1f:
75:ba:5a:8c:19:d9:97:7b:be:4a:67:9d:7f:6e:5e:
b7:92:8c:fd:57:3e:f0:19:f7:d0:c4:b2:cb:29:7d:
d9:f5:85:4e:a0:24:74:a2:5c:db:12:90:fd:54:55:
87:99:a8:5e:c9:4b:15:f5:d8:1f:84:58:21:10:a0:
ba:24:1f:c2:90:0c:81:40:a9:4b:21:a4:0f:14:e3:
c0:eb:78:a0:c2:a0:e4:47:95:ad:fe:f8:c2:08:7e:
dd:94:37:8b:77:c9:c4:f5:23:d6:a6:59:5e:34:77:
14:6d:14:a5:21:61:48:8b:df:8f:01:f4:b2:48:a1:
4e:0b:97:e4:46:c2:78:40:2b:bd:6c:c3:68:68:88:
2a:4f:cb:77:ee:ee:aa:a1:da:de:51:20:9e:fc:bb:
a7:3f:a7:b8:cf:29:79:7b:2e:c9:38:ed:c7:44:ff:
e8:04:89:9b:ed:14:0f:af:fa:84:52:92:ae:e8:90:
1d:21:60:c6:a3:af:79:a6:30:90:84:f7:67:77:5b:
6f:fe:ee:e0:ec:d7:3e:62:0b:68:ca:3a:84:fb:a6:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C5:D6:E0:B0:63:D8:60:76:99:AB:DD:7A:FA:14:30:DF:D6:E6:77
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:82:0e:7b:34:5e:91:ef:7f:f3:d2:e2:0e:e5:c1:f8:61:c1:
a0:a1:13:48:96:00:6d:f4:bb:15:e9:c3:ac:4e:7a:4d:5b:8d:
fc:54:ea:e3:30:89:75:af:b1:16:eb:53:fd:c8:8e:80:cd:fb:
4c:63:04:95:5a:b6:76:af:35:27:67:4a:5b:a2:ca:72:3f:f0:
42:b2:ef:a0:81:76:11:00:97:4e:ed:c0:df:3d:61:2b:c2:4b:
26:51:56:b8:47:8d:13:34:10:68:73:b4:14:c3:b8:7b:22:36:
05:15:ab:dc:68:a4:2f:f6:97:4a:35:47:0d:a0:2f:89:86:e3:
f0:a1:ea:e0:82:75:b2:54:4f:2f:55:09:32:41:15:39:e3:f2:
c2:32:53:2b:0c:54:41:7c:0e:60:be:b4:5f:d4:66:d5:5e:af:
79:15:dc:72:dc:90:f6:62:51:ac:05:e2:53:0b:33:6c:1d:a3:
6c:d9:50:46:e5:24:d2:ec:c7:e7:9b:b4:e0:ec:47:68:f3:10:
98:96:9d:0b:9c:87:5e:ab:b7:0a:1f:87:a0:ed:dc:56:fd:e1:
1c:68:0c:f2:0d:16:49:7f:d5:bd:25:ae:e7:e3:40:db:35:d7:
35:3f:5e:a6:0d:dd:b7:5a:92:06:00:09:70:76:ce:9a:01:5c:
8b:2c:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:36 2025 by rpki-client