Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: twoljOEecsOq7AXFelyJZf5RlL7LTwdZjzaXvbfreQg=
Subject key identifier: B4:A6:26:66:3D:D4:24:B2:D9:31:AB:27:1E:0A:25:DA:98:ED:9E:8A
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 019880F8EC3C06C662544ECA45B9474E766B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 161F
Signing time: Wed 06 Aug 2025 20:00:53 +0000
Manifest this update: Wed 06 Aug 2025 20:00:53 +0000
Manifest next update: Thu 07 Aug 2025 20:00:53 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: MEUn/0LcBcVDMD7ZYUCG++qBogjkcNjHFdR65TEQjTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:f8:ec:3c:06:c6:62:54:4e:ca:45:b9:47:4e:76:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Aug 6 20:00:53 2025 GMT
Not After : Aug 7 20:00:53 2025 GMT
Subject: CN=b4a626663dd424b2d931ab271e0a25da98ed9e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:ec:f4:8e:da:72:3b:ae:23:9b:6a:d6:5c:
9b:6c:8f:0d:0a:00:6f:40:51:05:91:7f:54:f3:73:
16:95:1f:34:4d:8a:c6:93:96:98:cd:69:12:b0:6f:
3f:6b:b3:c0:37:f7:48:d8:d5:db:fa:19:b3:b1:27:
69:d7:15:3a:09:77:81:5a:50:5c:b8:74:dd:35:62:
69:34:a5:91:99:81:eb:d4:df:2f:a3:95:dc:32:9c:
6a:3b:89:1b:63:86:cd:3f:2d:36:3e:e7:bb:ee:ff:
72:bf:1c:d7:6b:30:ff:65:85:db:15:dd:2c:d4:33:
1e:c7:d9:a0:23:19:1a:37:fe:41:e9:1b:21:fe:0c:
25:32:96:54:0f:ac:f3:9c:43:59:92:e8:ad:f2:d0:
09:03:22:dc:8f:ab:bd:f9:d6:4a:8c:2f:23:1e:6c:
3e:d1:3c:bf:92:7a:90:38:0f:e2:c6:d4:df:5b:7d:
8d:4b:42:e3:f6:59:57:2a:42:d6:33:48:6e:05:03:
f2:86:fb:d6:1c:ee:f8:a5:33:a8:69:e2:51:ad:14:
5d:b0:1e:9b:8a:20:cd:fe:8a:cb:77:31:91:31:2d:
63:86:ef:11:07:0e:e0:0e:73:3a:1f:30:5e:9e:75:
a5:22:44:9d:5c:5a:64:e9:5b:44:f6:1b:60:9f:0e:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:26:66:3D:D4:24:B2:D9:31:AB:27:1E:0A:25:DA:98:ED:9E:8A
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c1:3c:27:ca:1f:de:69:61:6d:01:31:1d:80:8c:47:8c:63:
f7:fa:46:96:9e:dc:83:1e:62:a7:e0:f1:a6:c2:40:52:c4:a3:
03:fd:56:c8:f2:f3:8a:3a:37:cd:be:9b:d9:cb:ea:ec:38:74:
85:35:6a:be:12:26:6d:3a:e3:71:cd:89:ff:5e:28:8a:30:4a:
4e:a3:a0:01:96:63:3b:d6:20:2c:28:87:27:88:26:07:f9:70:
29:ba:75:4c:46:2e:a6:01:41:93:41:f3:9c:88:78:c1:53:20:
1e:b6:e4:f1:dc:4d:bd:cb:05:7f:7e:f1:25:d6:26:da:90:ee:
3a:6b:79:0f:9e:42:1f:71:a9:53:69:fa:df:bc:2a:fb:14:53:
23:97:f8:11:21:f9:65:17:7b:b5:bc:91:8b:c3:e8:03:e6:57:
65:c1:ca:e1:c1:0e:d4:db:c3:d2:e1:37:0c:d9:e2:66:f6:c6:
23:51:b2:21:55:35:3c:5d:10:0d:b8:92:60:c6:23:5a:22:3e:
a8:68:8f:ca:52:f4:f5:41:c5:b3:40:a8:ac:a1:e8:0f:88:56:
4e:a1:c8:95:ca:40:0c:70:71:22:71:3b:9e:83:38:9c:1a:1e:
05:d9:fd:0a:3e:aa:b4:8b:6f:66:f5:22:50:1a:a3:64:8d:14:
b0:a8:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:27:03 2025 by rpki-client