Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
File: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft (raw, json)
Hash identifier: uAnq+/JfgFCyAtfETwIpT+G++5Ih11YGDc5PTy3BJK0=
Subject key identifier: 83:B6:98:58:E9:55:E3:EC:3A:9E:2C:1C:22:CE:6E:6B:EE:38:A0:1A
Authority key identifier: 49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
Certificate issuer: /CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Certificate serial: 019A503DC7B2C75DBC17FF5316F94376A5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
Manifest number: 1424
Signing time: Tue 04 Nov 2025 19:00:17 +0000
Manifest this update: Tue 04 Nov 2025 19:00:17 +0000
Manifest next update: Wed 05 Nov 2025 19:00:17 +0000
Files and hashes: 1: SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl (hash: WFhAPI7B97Z8krZ1w2tZmb0DkvVXCH9xKp1XPaaZxUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:c7:b2:c7:5d:bc:17:ff:53:16:f9:43:76:a5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490d042cfa766e7e2bb6f0b04c37d603ffa3383e
Validity
Not Before: Nov 4 19:00:17 2025 GMT
Not After : Nov 5 19:00:17 2025 GMT
Subject: CN=83b69858e955e3ec3a9e2c1c22ce6e6bee38a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:89:b6:45:ac:be:e0:21:01:d9:18:72:c5:
3c:a5:7a:65:76:c4:21:2c:e7:2b:d8:a6:d2:5d:cc:
9f:fb:04:22:17:36:63:a0:78:c2:05:7d:67:16:7e:
5b:41:9d:db:0a:69:95:2d:da:e9:ba:94:3f:af:35:
57:ce:43:f4:f9:2d:df:be:4c:99:2d:e5:91:a0:20:
ad:8c:84:f6:1e:93:37:69:cd:c4:15:8e:f1:8d:eb:
2b:41:45:fb:53:50:e6:c6:88:7d:e6:d2:af:6e:32:
1d:fb:2a:13:e6:16:36:eb:9b:0f:d7:16:a8:31:cb:
cd:e6:1c:db:a8:01:df:68:ce:b7:17:db:06:d8:31:
57:6b:d6:8c:7e:41:bc:f1:95:c3:99:a5:80:a8:cb:
40:a6:1c:e0:ad:6a:c1:aa:2b:f1:f9:38:c1:d9:9d:
64:db:ec:aa:23:e6:71:e8:6e:d1:cc:47:79:e6:49:
4a:a0:b3:bc:cf:1f:5a:c9:7c:bb:64:4c:40:71:4d:
28:da:52:08:61:4d:9e:b2:44:38:94:6e:35:06:8f:
32:d8:87:88:28:9e:56:a6:c3:8a:37:a2:23:70:6d:
e8:78:79:44:70:41:34:68:f5:55:40:18:01:8c:96:
f1:0a:6e:90:5b:b4:2c:b9:49:d6:62:b4:cc:d8:c2:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B6:98:58:E9:55:E3:EC:3A:9E:2C:1C:22:CE:6E:6B:EE:38:A0:1A
X509v3 Authority Key Identifier:
keyid:49:0D:04:2C:FA:76:6E:7E:2B:B6:F0:B0:4C:37:D6:03:FF:A3:38:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/dc8778-a570-4e48-ac33-96262c819333/1/SQ0ELPp2bn4rtvCwTDfWA_-jOD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:35:81:af:c2:a5:0b:22:1d:80:bb:8c:b5:04:7f:f6:cf:cd:
a3:0b:19:10:26:07:c5:88:9e:5b:f8:de:52:ca:fd:ae:7d:f3:
8a:ed:c7:0f:6c:2e:92:7e:8d:29:33:02:7f:75:68:1d:0f:ca:
81:94:f6:da:a3:c6:c7:59:d8:fe:a1:aa:1e:3c:fa:18:90:ac:
2f:d4:5a:72:3b:c4:a3:ea:e9:47:92:fb:ba:e7:93:57:12:ca:
f2:ac:b5:7e:f8:2f:9d:c3:8a:61:96:3b:08:be:82:dd:fe:a3:
79:83:a9:46:82:ff:17:20:87:be:a1:1e:c2:4a:9f:dc:4a:5a:
93:c7:5f:fa:08:f7:94:7b:a6:7c:1f:e0:9d:d5:1c:03:69:56:
10:d5:84:1a:7e:d7:51:32:99:c7:b0:b7:0a:ea:25:a4:a3:b9:
3d:73:ba:a7:25:22:04:15:df:01:5c:e9:e0:e8:f3:c1:0b:5d:
f2:eb:f9:0a:53:75:1d:48:92:bc:fa:39:53:03:a2:57:de:79:
c3:f9:1a:df:bb:fa:82:7d:23:b0:07:3e:9d:6f:15:2c:f7:5e:
aa:21:56:46:b7:61:c3:a6:dc:6b:65:1c:23:2c:7b:0f:63:1c:
98:50:7f:4f:39:cb:dd:9a:d9:c3:70:9b:20:fd:09:45:35:bd:
68:4f:fb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:20:53 2025 by rpki-client