Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
File: SqXjXAXCq1S-dYtshnGGzuFZvWM.mft (raw, json)
Hash identifier: DoRqLSWKufFmcBrMRg5ErhzIpn6oUuxE4YU57GS85bE=
Subject key identifier: 8D:EA:6B:9A:E5:8B:11:60:79:0C:9E:E4:65:78:BB:DB:53:70:A7:66
Authority key identifier: 4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
Certificate issuer: /CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Certificate serial: 01987486A355DC1F7F59EA449A09389E32D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
Manifest number: 1012
Signing time: Mon 04 Aug 2025 10:00:37 +0000
Manifest this update: Mon 04 Aug 2025 10:00:37 +0000
Manifest next update: Tue 05 Aug 2025 10:00:37 +0000
Files and hashes: 1: 0giOT2-cspinjb0AYnQ0xR7oe3s.roa (hash: JsKfvRyfvFNiFnymkkC31pksnK2WhZYhTKOkR+nS9d4=)
2: SqXjXAXCq1S-dYtshnGGzuFZvWM.crl (hash: tVXXcjgN25bw/8zBdrGPaUiW0pJ3MHKMxAWNFHyxlDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:a3:55:dc:1f:7f:59:ea:44:9a:09:38:9e:32:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa5e35c05c2ab54be758b6c867186cee159bd63
Validity
Not Before: Aug 4 10:00:37 2025 GMT
Not After : Aug 5 10:00:37 2025 GMT
Subject: CN=8dea6b9ae58b1160790c9ee46578bbdb5370a766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:40:6a:18:3c:03:78:8e:61:e7:48:7b:71:1b:
16:d6:39:d2:8f:e5:4a:15:8f:ba:1d:c8:f3:5c:07:
9b:07:4c:dd:d6:77:e8:7e:8b:08:b3:32:56:5b:bb:
19:4d:f2:7b:aa:9f:24:af:35:92:b4:b7:bd:2b:dc:
38:fb:dc:5a:e4:c6:e7:15:2f:49:c2:da:e8:2d:4b:
94:c8:c1:ef:83:a3:db:c8:67:8c:48:88:d1:db:e4:
51:ff:3c:2a:01:0d:9a:fa:d1:ba:ee:df:ab:32:e2:
69:65:39:6f:0e:9a:f9:50:8e:c3:f8:6a:b9:ba:0a:
08:50:22:70:65:50:cf:57:62:19:e1:99:67:56:b7:
1c:07:d9:fa:af:f8:e8:8a:62:51:52:a8:e4:79:f1:
ea:84:aa:92:19:dc:34:ab:37:39:7b:fd:4a:b4:f9:
5e:88:7d:b5:f0:60:89:fa:72:9a:53:84:bf:f0:80:
27:a7:de:03:3c:12:5e:12:15:22:65:8f:09:b2:b4:
52:c6:1a:ec:58:c9:13:ca:43:29:e8:1f:64:60:87:
bb:71:87:8f:9d:cf:cd:6c:d8:6b:8a:c4:e5:c6:1f:
12:7a:1a:3e:e0:0a:c9:ae:ab:13:91:75:5f:74:6a:
b8:7e:7c:a6:89:f8:88:aa:23:76:43:9e:52:80:af:
df:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:6B:9A:E5:8B:11:60:79:0C:9E:E4:65:78:BB:DB:53:70:A7:66
X509v3 Authority Key Identifier:
keyid:4A:A5:E3:5C:05:C2:AB:54:BE:75:8B:6C:86:71:86:CE:E1:59:BD:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqXjXAXCq1S-dYtshnGGzuFZvWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7b67fb-c8ba-462c-b064-7c65aec6f2bd/1/SqXjXAXCq1S-dYtshnGGzuFZvWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:2f:5d:10:a0:42:30:e0:f1:0f:3b:12:0b:07:7a:98:d0:7e:
34:d9:a5:9a:c0:81:c1:12:ad:d7:f7:f2:41:18:cd:7d:db:fe:
95:b7:75:81:c1:89:56:60:41:df:e3:53:e6:4f:c9:5b:80:a3:
2e:69:9c:88:14:2b:8d:24:7c:b2:75:4b:9a:94:d4:a2:be:24:
41:c4:48:cc:f6:81:48:04:5f:c4:01:21:1c:23:3d:fa:43:24:
ed:84:bf:72:84:93:fd:ed:84:58:bc:89:62:df:5c:d9:12:2f:
53:24:06:0e:4b:f3:1f:8d:3a:ab:9c:b8:4d:a7:e2:9b:47:c8:
15:0a:23:6b:ab:fc:3c:d2:13:8c:38:e2:79:48:80:86:ee:26:
7f:f0:05:5e:13:4b:45:de:8c:d8:cc:1c:0e:26:ca:13:29:db:
5b:0c:e2:5a:b0:79:00:0b:20:c3:46:49:ba:1c:2f:f8:44:2d:
9c:65:33:db:f1:b6:50:86:11:aa:21:5f:cd:ac:d5:b9:88:0f:
ba:b1:87:fd:ba:90:0a:af:33:ee:37:a7:34:c0:df:6c:19:bc:
b8:6a:ce:ab:4a:cb:bc:47:55:f6:e6:2d:09:b5:ce:78:29:62:
4e:4c:a0:79:33:8f:ab:b3:70:b8:a8:c3:29:16:1b:ed:ec:96:
e5:d9:ce:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:57:53 2025 by rpki-client