Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: MwL6yx6sxd0/aKi8iIlwdgxT5WQlJiDDOGGcuxfX3A0=
Subject key identifier: C9:D6:72:12:50:82:58:20:8A:8F:8B:8C:CE:2B:45:8D:65:FE:5F:64
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019A52D2351CD0758E39884F00844AAD9FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 07:01:39 +0000
Manifest this update: Wed 05 Nov 2025 07:01:39 +0000
Manifest next update: Thu 06 Nov 2025 07:01:39 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: eb/XQ184bQx0HNwpYHhk+Defq4VoRPJVRiUTMk0uq4k=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:35:1c:d0:75:8e:39:88:4f:00:84:4a:ad:9f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Nov 5 07:01:39 2025 GMT
Not After : Nov 6 07:01:39 2025 GMT
Subject: CN=c9d67212508258208a8f8b8cce2b458d65fe5f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:da:43:e5:d6:0f:ba:a7:34:af:92:e1:6e:
77:e0:66:f2:f5:48:9a:ff:18:86:e9:b1:ba:21:e8:
11:5f:00:e4:b8:d5:89:30:94:03:16:1e:f5:cc:8a:
1b:0e:4a:5a:29:fa:f7:2a:91:51:e2:cb:9e:3f:63:
0d:50:04:01:08:31:67:4d:53:58:2b:07:9d:86:1a:
1d:90:ec:ab:01:e5:76:88:97:af:0e:57:4a:69:d4:
fd:b2:ef:28:ed:3c:63:d6:ce:e6:0b:d7:02:b8:d1:
6c:51:1a:b9:a9:f1:62:f4:8d:af:5a:63:e4:0d:23:
aa:9a:f7:c8:27:e5:51:3b:0b:a5:f1:ee:35:0c:90:
bb:06:7b:91:f2:be:5a:0d:cf:68:fa:4c:f5:20:49:
ce:f0:d4:c9:d9:97:8f:7a:84:40:5c:2f:ff:47:c3:
e7:75:cb:de:53:26:6b:19:1d:29:da:c2:0a:3d:b3:
5e:62:16:87:c5:71:ca:0c:65:5d:6b:57:1d:ad:9f:
24:83:1b:d9:c4:9c:d0:da:82:68:9f:7a:8d:f4:82:
1f:2a:56:b8:33:f7:6e:de:05:e9:38:3c:4f:c8:19:
83:24:a0:3f:79:d1:05:75:d7:88:11:5c:2c:f4:fa:
14:0b:a5:ac:76:5e:fe:d6:56:87:ad:13:4d:8a:fa:
87:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D6:72:12:50:82:58:20:8A:8F:8B:8C:CE:2B:45:8D:65:FE:5F:64
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:2b:ad:a3:bb:e4:75:9f:ad:dd:d6:8c:85:db:9b:df:0e:
c8:f5:93:c3:94:8d:07:e1:43:c7:e5:4d:37:7a:5f:a6:03:68:
5b:a6:0a:3e:ce:1f:b0:2b:b7:45:8b:1d:ad:10:92:f8:77:70:
a5:b1:fc:e1:a0:b3:19:34:cb:0b:d1:dd:0d:c4:19:79:02:81:
c6:15:fa:8a:32:90:5d:64:d2:3f:2e:df:75:02:79:5b:a1:e9:
2a:ed:90:e4:38:a2:47:f0:0d:3d:4c:9b:83:d7:b7:17:c6:3c:
37:8d:9f:b5:e3:cf:62:75:5a:f3:b6:eb:52:57:ef:41:86:13:
f9:fa:81:f8:57:42:6b:b9:93:ca:4f:24:4a:77:cf:f7:0b:48:
7c:51:72:bd:50:f1:ae:a3:15:b9:0c:2d:9b:70:56:0b:33:c7:
f7:28:8d:b7:f8:81:91:8c:84:a5:d6:77:6f:95:37:7b:d4:be:
4c:2f:21:17:bc:42:88:e1:a0:4f:fc:2c:5b:e1:43:15:d5:40:
d4:ab:96:f6:61:e0:a7:27:e2:8c:d0:0b:aa:75:45:fd:4b:18:
30:8f:fc:34:28:08:ee:f8:54:e5:68:84:90:85:4e:68:2e:46:
77:cf:b2:5c:58:32:db:2c:8c:5b:33:2b:37:a8:07:22:59:b1:
01:64:60:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0jUc0HWOOYhPAIRKrZ/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGIyMWY3OWI5ZWEyZjNkMDQyMzc0NzE0ODY3ZDEyNDAx
OTk1ZGIwHhcNMjUxMTA1MDcwMTM5WhcNMjUxMTA2MDcwMTM5WjAzMTEwLwYDVQQD
EyhjOWQ2NzIxMjUwODI1ODIwOGE4ZjhiOGNjZTJiNDU4ZDY1ZmU1ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspraQ+XWD7qnNK+S4W534Gby9Uia
/xiG6bG6IegRXwDkuNWJMJQDFh71zIobDkpaKfr3KpFR4sueP2MNUAQBCDFnTVNY
KwedhhodkOyrAeV2iJevDldKadT9su8o7Txj1s7mC9cCuNFsURq5qfFi9I2vWmPk
DSOqmvfIJ+VROwul8e41DJC7BnuR8r5aDc9o+kz1IEnO8NTJ2ZePeoRAXC//R8Pn
dcveUyZrGR0p2sIKPbNeYhaHxXHKDGVda1cdrZ8kgxvZxJzQ2oJon3qN9IIfKla4
M/du3gXpODxPyBmDJKA/edEFddeIEVws9PoUC6Wsdl7+1laHrRNNivqHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnWchJQglggio+LjM4rRY1l/l9kMB8GA1UdIwQY
MBaAFEkLIfebnqLz0EI3RxSGfRJAGZXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2Mt
NDgwYzMyZjQwMGUxLzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lMTAxNjUtYjRjZC00MzIxLWJmM2MtNDgwYzMyZjQwMGUx
LzEvU1FzaDk1dWVvdlBRUWpkSEZJWjlFa0FabGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+ErraO7
5HWfrd3WjIXbm98OyPWTw5SNB+FDx+VNN3pfpgNoW6YKPs4fsCu3RYsdrRCS+Hdw
pbH84aCzGTTLC9HdDcQZeQKBxhX6ijKQXWTSPy7fdQJ5W6HpKu2Q5DiiR/ANPUyb
g9e3F8Y8N42ftePPYnVa87brUlfvQYYT+fqB+FdCa7mTyk8kSnfP9wtIfFFyvVDx
rqMVuQwtm3BWCzPH9yiNt/iBkYyEpdZ3b5U3e9S+TC8hF7xCiOGgT/wsW+FDFdVA
1KuW9mHgpyfijNALqnVF/UsYMI/8NCgI7vhU5WiEkIVOaC5Gd8+yXFgy2yyMWzMr
N6gHIlmxAWRgkw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:41 2025 by rpki-client