Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: CitUotfcoY1bsQTlrPg0japVXAFNWxJDDighDO3V6VU=
Subject key identifier: FB:30:7A:1E:80:04:90:7F:E5:9D:76:80:B5:70:92:5B:CF:0E:E9:24
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 019A51509D504B2BDA72631F0FBDA8780C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 00:00:28 +0000
Manifest this update: Wed 05 Nov 2025 00:00:28 +0000
Manifest next update: Thu 06 Nov 2025 00:00:28 +0000
Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=)
2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: UVW5EGyH4LyOsZrdudqS6chALNF1QTJTzILdQf3N6lE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:9d:50:4b:2b:da:72:63:1f:0f:bd:a8:78:0c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Nov 5 00:00:28 2025 GMT
Not After : Nov 6 00:00:28 2025 GMT
Subject: CN=fb307a1e8004907fe59d7680b570925bcf0ee924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:21:dd:ca:49:c8:1d:0e:d5:28:7c:2a:a8:62:
97:93:c8:75:fb:ca:aa:3e:a6:22:a8:48:cb:50:de:
0b:c3:07:65:77:a6:0e:d4:5f:9e:16:5e:12:28:98:
71:cf:17:b7:78:de:d9:e1:95:11:bb:da:70:32:bf:
41:a6:f2:70:78:dd:b1:b6:06:a7:ac:7e:b9:2e:e3:
a3:7c:46:f3:40:4a:86:59:68:27:19:67:5b:d7:a4:
28:ec:4b:96:fe:29:ab:04:fa:86:dc:5a:dd:01:3f:
7c:c1:b7:66:5d:4b:7c:ec:f9:40:e3:67:fd:c7:f5:
a2:82:fd:2d:6a:06:c7:fe:d9:0d:9f:4b:5c:81:c7:
76:c0:06:f5:b5:85:d2:a9:31:3c:ea:db:00:89:b9:
37:cd:1a:5e:0b:6b:16:e2:99:9f:94:19:ba:6f:bc:
66:08:83:70:7a:a0:aa:64:9b:47:89:51:4b:29:09:
f0:b5:cd:15:35:ea:43:12:d8:a8:56:fe:1d:e6:ab:
13:31:d6:db:94:4c:1b:a8:c5:61:72:91:c5:a7:68:
ab:ea:b9:3a:e8:e0:49:01:c7:14:61:d2:0b:e4:fa:
ee:56:f4:1b:8d:90:01:f0:69:00:a3:1b:4a:51:a9:
34:1b:b3:0a:45:42:c4:5a:b7:47:02:ef:d3:6a:bf:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:30:7A:1E:80:04:90:7F:E5:9D:76:80:B5:70:92:5B:CF:0E:E9:24
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:e5:c7:2b:ef:e5:4b:d6:64:85:c8:8d:bd:0b:85:a0:e5:
3b:b4:1b:f9:7f:85:e3:c1:79:5a:3e:fe:02:10:3b:a5:ae:d8:
11:51:f0:c5:07:f7:c1:fb:02:00:03:5e:a1:ed:da:5d:89:58:
de:14:34:b7:70:d7:05:3c:26:f0:4f:42:9c:0e:a1:88:03:06:
79:d5:df:4c:bc:31:68:76:16:78:57:0c:2c:76:f9:a4:ad:34:
1c:8a:dc:69:f3:86:3b:11:57:ab:c5:16:d5:db:63:f6:dc:6a:
a0:7d:05:84:d5:aa:f4:f7:4e:65:1c:02:f9:38:33:57:18:92:
40:38:eb:67:5f:af:a9:ff:e5:df:7a:0d:4a:32:63:c0:95:20:
67:1a:1c:4c:0c:44:3e:73:40:69:37:0b:10:88:7a:fe:12:38:
2a:0f:ed:da:f3:47:cd:e1:d4:d8:25:bc:2a:f2:75:c2:9b:00:
b4:8c:dd:b6:bf:ff:ab:93:b4:18:51:ae:32:88:5c:2f:1f:00:
4e:97:32:5c:ac:69:af:0a:f3:fc:cf:07:16:ca:f7:b2:88:45:
86:3f:26:08:ed:b4:1b:04:ec:2b:14:22:d7:45:ad:1a:7b:b6:
cd:23:2c:bf:87:aa:e7:ee:fb:44:da:31:7d:ec:9e:f3:77:41:
28:5a:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:11 2025 by rpki-client