Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: 53Tc1DGwmDmOQ30BPT7pcsL9qaq2tI9c7ze9dUmP0bw=
Subject key identifier: 1E:55:7E:89:D9:A8:02:8B:B7:F7:6A:12:3A:50:CB:9D:98:F9:50:86
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 019A4DAB050CEE2B118B4A11CBDB40833251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 07:00:44 +0000
Manifest this update: Tue 04 Nov 2025 07:00:44 +0000
Manifest next update: Wed 05 Nov 2025 07:00:44 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: v6eIYjK9BTQfqHeUZMNXTTOYlPm+1/xzjsv3rD2mnYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:05:0c:ee:2b:11:8b:4a:11:cb:db:40:83:32:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Nov 4 07:00:44 2025 GMT
Not After : Nov 5 07:00:44 2025 GMT
Subject: CN=1e557e89d9a8028bb7f76a123a50cb9d98f95086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:6a:30:b7:6e:49:95:fc:32:ba:e7:62:b1:
a8:36:35:61:86:6e:d3:e8:7b:c5:c5:79:73:cb:81:
ef:dc:08:fb:b1:11:eb:93:d9:13:c4:2c:08:c1:65:
17:c1:5e:e7:43:f9:38:ab:68:66:05:19:78:51:e1:
46:58:e6:e0:d2:c7:dd:8b:49:ae:20:b5:7b:5a:af:
4a:5e:39:d2:0f:b2:b6:82:63:4b:49:d9:3f:23:6f:
f0:76:36:b9:61:b9:bd:f5:24:20:d4:5b:94:5a:94:
02:b1:22:1d:97:e1:e0:59:67:cc:8a:06:e2:d5:ff:
2b:28:7d:d9:92:bb:14:c6:ff:1d:4a:0a:44:81:16:
5c:63:5f:2e:a9:2c:ad:ee:90:ae:b8:6d:df:00:60:
06:51:fa:5f:8f:bd:3c:59:05:08:19:b0:c2:de:7b:
14:6c:bf:dc:e5:c6:b7:c1:00:4d:d0:23:ae:a0:70:
34:33:d5:44:c2:d2:2c:c7:4a:21:35:ec:2f:75:7f:
13:34:24:18:b0:93:5c:14:60:61:50:62:18:dc:93:
2c:cd:65:4b:7e:11:15:7c:d0:4d:52:0e:d5:6e:53:
b7:2b:4f:c2:a0:d2:de:4c:c9:1f:9d:74:d3:8e:d7:
71:62:67:98:22:a9:67:94:27:a5:94:b3:d0:e1:01:
3d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:7E:89:D9:A8:02:8B:B7:F7:6A:12:3A:50:CB:9D:98:F9:50:86
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:25:ef:d5:dd:21:90:23:66:a3:e0:8c:d9:d2:ed:fb:a3:0f:
1a:df:0d:82:09:5e:73:c6:d5:5d:b6:9a:9e:cd:51:76:7d:1c:
5b:40:50:29:31:b5:34:8d:32:60:b8:13:b1:63:ec:66:33:ff:
3c:2d:0e:f1:be:e2:23:83:3f:7a:d3:b8:d4:52:24:13:24:67:
4d:b3:66:72:60:e5:cd:5a:d7:e5:52:be:94:ff:c1:db:4c:7c:
32:e3:5f:01:8b:ed:be:38:3b:a9:b6:00:bf:67:a8:10:82:46:
bf:cd:44:ca:db:c0:80:01:4c:22:6d:28:a7:c1:96:49:01:9f:
35:c7:b2:66:eb:17:13:3b:42:84:e2:ed:3c:e9:ee:e1:1d:b1:
9a:77:d8:50:c4:ae:90:d9:a8:4c:eb:0d:ab:c9:17:4b:97:1c:
a7:c4:05:e8:4f:3b:fb:2f:da:56:66:a7:c8:0c:ea:90:4c:ce:
d0:57:fd:7d:c7:61:a4:6c:ce:e9:84:8b:69:0b:58:39:d5:0e:
60:22:0e:f1:d4:6f:1e:45:e9:bf:2a:77:78:e6:f3:60:75:9a:
15:5a:cd:62:40:0e:d6:7e:a3:bd:c6:e8:4b:e4:73:49:11:2a:
27:72:0c:a2:3f:a9:d3:f1:6c:50:d0:f7:4a:0f:ee:1c:b6:1c:
e9:d6:c3:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqwUM7isRi0oRy9tAgzJRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYTVlMzVjMDVjMmFiNTRiZTc1OGI2Yzg2NzE4NmNlZTE1
OWJkNjMwHhcNMjUxMTA0MDcwMDQ0WhcNMjUxMTA1MDcwMDQ0WjAzMTEwLwYDVQQD
EygxZTU1N2U4OWQ5YTgwMjhiYjdmNzZhMTIzYTUwY2I5ZDk4Zjk1MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaRqMLduSZX8MrrnYrGoNjVhhm7T
6HvFxXlzy4Hv3Aj7sRHrk9kTxCwIwWUXwV7nQ/k4q2hmBRl4UeFGWObg0sfdi0mu
ILV7Wq9KXjnSD7K2gmNLSdk/I2/wdja5Ybm99SQg1FuUWpQCsSIdl+HgWWfMigbi
1f8rKH3ZkrsUxv8dSgpEgRZcY18uqSyt7pCuuG3fAGAGUfpfj708WQUIGbDC3nsU
bL/c5ca3wQBN0COuoHA0M9VEwtIsx0ohNewvdX8TNCQYsJNcFGBhUGIY3JMszWVL
fhEVfNBNUg7VblO3K0/CoNLeTMkfnXTTjtdxYmeYIqlnlCellLPQ4QE9QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5VfonZqAKLt/dqEjpQy52Y+VCGMB8GA1UdIwQY
MBaAFEql41wFwqtUvnWLbIZxhs7hWb1jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQt
N2M2NWFlYzZmMmJkLzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83YjY3ZmItYzhiYS00NjJjLWIwNjQtN2M2NWFlYzZmMmJk
LzEvU3FYalhBWENxMVMtZFl0c2huR0d6dUZadldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiXv1d0h
kCNmo+CM2dLt+6MPGt8Ngglec8bVXbaans1Rdn0cW0BQKTG1NI0yYLgTsWPsZjP/
PC0O8b7iI4M/etO41FIkEyRnTbNmcmDlzVrX5VK+lP/B20x8MuNfAYvtvjg7qbYA
v2eoEIJGv81EytvAgAFMIm0op8GWSQGfNceyZusXEztChOLtPOnu4R2xmnfYUMSu
kNmoTOsNq8kXS5ccp8QF6E87+y/aVmanyAzqkEzO0Ff9fcdhpGzO6YSLaQtYOdUO
YCIO8dRvHkXpvyp3eObzYHWaFVrNYkAO1n6jvcboS+RzSREqJ3IMoj+p0/FsUND3
Sg/uHLYc6dbDyA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:32 2025 by rpki-client