Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: KYUfz+PivNOVKHjH86ALeCODUNUoySyfBpyYaUB9hVU=
Subject key identifier: E5:AA:5A:70:11:AE:89:58:7F:05:38:26:D1:3D:50:65:70:60:E1:43
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 019A5263271CF6FF6259212BAC5795BC49CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 02C2
Signing time: Wed 05 Nov 2025 05:00:21 +0000
Manifest this update: Wed 05 Nov 2025 05:00:21 +0000
Manifest next update: Thu 06 Nov 2025 05:00:21 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: uw5fXIPWuL7IsJm9Yp3ZcueKGVAMyH2jGDLn68x0AF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:27:1c:f6:ff:62:59:21:2b:ac:57:95:bc:49:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Nov 5 05:00:21 2025 GMT
Not After : Nov 6 05:00:21 2025 GMT
Subject: CN=e5aa5a7011ae89587f053826d13d50657060e143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c3:d1:5e:d6:94:33:9e:a4:4d:c7:89:38:
cb:49:b0:4e:b5:b8:18:ad:61:b7:81:17:46:c6:5a:
05:1c:56:13:2e:cc:48:54:84:45:26:51:43:7f:a9:
56:9e:ef:19:ce:81:ea:45:61:02:8a:01:7f:f3:b5:
cf:33:93:19:93:dd:b6:9f:80:a9:26:c9:f1:7f:b6:
73:2b:f7:b5:32:dc:fa:c5:4a:0f:c8:29:7a:b2:2e:
7e:84:b4:ed:65:6a:c5:91:58:bc:98:4b:28:58:4f:
d2:8c:9b:fc:e2:41:2e:8c:e4:5a:f6:05:25:18:e6:
5c:e1:94:c2:b1:58:c3:59:bd:df:87:38:40:c7:30:
63:81:60:79:2b:18:42:e3:4c:7e:42:82:27:93:df:
be:d6:34:4b:b6:de:80:95:72:4c:f5:83:90:63:36:
e9:fe:e5:6c:b2:76:89:2e:a8:c2:91:45:1f:56:d5:
de:30:37:52:d0:84:fb:3d:e3:da:a4:fa:c3:f4:1e:
35:e9:28:36:3c:d8:df:97:08:0d:3d:fc:a1:54:25:
f5:cc:8e:5c:e7:2c:f9:b7:b3:4d:c4:b7:af:1c:0d:
8c:0e:09:2e:bf:1f:b3:3c:84:6b:ac:42:e3:e7:37:
d8:38:92:82:c5:3f:08:d8:6e:a1:2a:cd:e0:dd:6a:
a1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:5A:70:11:AE:89:58:7F:05:38:26:D1:3D:50:65:70:60:E1:43
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:9f:92:86:43:11:c4:71:6d:3d:10:a3:98:7d:5c:cf:6f:
83:47:d8:97:60:82:71:bb:ce:e6:e5:9e:25:81:ec:ef:f8:c7:
f1:90:56:40:55:16:cb:1a:95:21:e8:57:6b:09:4f:c3:a5:49:
63:d5:cd:9c:d6:12:b8:7f:15:81:7e:1d:88:b2:ca:3f:0d:72:
b6:99:0f:43:9d:41:f5:ef:24:19:29:e6:7c:9a:fc:93:1a:d5:
61:f2:63:09:1e:e2:3a:b4:b1:cb:ef:1e:5e:d0:76:5a:c9:0e:
51:41:7d:2c:35:86:ae:20:ea:9c:49:3b:17:b9:7e:8e:39:f9:
8c:ea:68:06:5f:5d:a9:bc:bc:24:b9:12:81:fe:45:65:82:fc:
52:1e:45:bc:f0:5d:b1:84:09:ec:fb:e6:65:bc:3f:4a:10:87:
01:4c:4b:82:9c:4e:fa:a8:2b:66:c7:be:e0:cd:91:30:bb:4c:
a4:0d:8a:1b:cc:da:6c:8d:a7:43:bf:4e:84:71:c8:88:70:ca:
8c:89:dc:99:69:9a:46:fe:36:dd:e4:9e:c3:a4:ef:18:99:50:
18:d6:13:8c:6e:b0:0b:f8:a3:28:98:bb:88:b1:d1:4c:6e:d4:
fa:4e:e2:1d:53:e5:f4:c5:9f:3b:e8:ca:7a:3f:e0:c3:fe:eb:
a6:d3:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:11:35 2025 by rpki-client