Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
File: Sq5Con57wsw1B--n48vCnTLuoTM.mft (raw, json)
Hash identifier: X79MqpFiUDCDpb+EBjK1u67OW5eO/WIvYMxtcCMSaWA=
Subject key identifier: DE:A1:A7:D1:D6:A2:1B:3F:C9:43:AE:4C:C4:71:37:A7:FA:7A:C5:0C
Authority key identifier: 4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
Certificate issuer: /CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Certificate serial: 019A4F625EF3588F0BC0556150D2FE63B768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
Manifest number: 1464
Signing time: Tue 04 Nov 2025 15:00:38 +0000
Manifest this update: Tue 04 Nov 2025 15:00:38 +0000
Manifest next update: Wed 05 Nov 2025 15:00:38 +0000
Files and hashes: 1: 6rSD7g_qe8K6KqZqqkL-N5Tz2Po.roa (hash: f+qXxbPCW54Fvdn+IqLViujGUR732uBcWtFNMxPAlWo=)
2: Sq5Con57wsw1B--n48vCnTLuoTM.crl (hash: gJZ33H9113gAOt9614zhRUcZuF15d6v6jPpjUKCImK0=)
3: ppQ6By3CT5q_MfQmc3W2cOrYYME.roa (hash: 4gJ96x0hdM1YSAgq0bPa2tEWjzZ2Ifp4c6peJQDYI0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:5e:f3:58:8f:0b:c0:55:61:50:d2:fe:63:b7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aae42a27e7bc2cc3507efa7e3cbc29d32eea133
Validity
Not Before: Nov 4 15:00:38 2025 GMT
Not After : Nov 5 15:00:38 2025 GMT
Subject: CN=dea1a7d1d6a21b3fc943ae4cc47137a7fa7ac50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:85:59:f1:74:34:32:4d:e7:22:ac:25:a3:4a:
82:4a:77:61:e0:0c:07:97:48:75:e5:4d:13:42:8f:
b5:a6:7a:52:a1:ec:9a:25:4d:ce:8b:33:db:14:bf:
fd:61:21:d9:89:78:e1:a2:2f:a7:bb:63:02:f3:8f:
bb:64:9a:cd:cc:d7:ec:c9:e9:ab:55:43:ba:2c:a4:
9c:97:48:d3:50:76:81:96:11:49:39:47:bf:45:93:
ba:04:ef:de:d6:14:b7:4b:2a:7f:33:ce:55:4b:0f:
90:6b:18:fc:13:4c:2b:68:26:dd:28:ac:07:b0:3d:
9a:f1:94:15:2a:96:96:a4:32:b2:d6:01:21:bb:67:
39:d4:ae:e8:a1:aa:16:4e:e5:37:94:55:9a:e1:b3:
34:84:41:54:09:9d:52:64:04:73:37:1b:fe:65:f6:
be:29:3b:ad:86:19:a0:16:02:e4:30:4f:8e:4e:ed:
69:47:82:65:1f:00:8f:4d:f3:d2:25:92:8e:ac:1d:
cb:72:3f:0b:3f:48:38:d8:08:7c:34:f7:26:ea:99:
69:48:ee:71:7f:cd:c9:a6:be:67:f0:44:1e:15:d1:
6d:7c:e2:28:74:a4:e8:33:f0:c6:21:a6:7a:ae:d8:
8e:30:76:37:31:34:6c:dc:7c:ba:fd:f0:67:2b:2c:
68:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A1:A7:D1:D6:A2:1B:3F:C9:43:AE:4C:C4:71:37:A7:FA:7A:C5:0C
X509v3 Authority Key Identifier:
keyid:4A:AE:42:A2:7E:7B:C2:CC:35:07:EF:A7:E3:CB:C2:9D:32:EE:A1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq5Con57wsw1B--n48vCnTLuoTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/62f25f-8b1b-415b-9fc8-cc935cd73632/1/Sq5Con57wsw1B--n48vCnTLuoTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a3:9f:0a:bd:52:d7:f8:d9:25:23:83:1b:9a:76:96:e7:1b:
86:14:b1:0d:53:e5:1b:81:f8:02:3e:aa:4e:7b:00:61:03:fe:
bb:68:ed:ad:f6:d4:c1:7c:b4:60:32:b3:b0:cc:26:c5:d4:46:
11:98:bb:6a:02:db:f4:6a:d5:8c:59:28:de:75:f6:be:3a:ca:
89:50:10:d7:7b:42:28:1f:92:fc:31:f4:6c:c7:bd:4c:99:1b:
0d:3a:26:bd:89:30:47:c7:70:dc:c8:6b:76:c1:41:cd:44:37:
d5:d9:a4:ed:76:a1:5e:24:49:99:b2:09:7c:a6:c3:a5:e7:5a:
51:16:c5:b1:f1:56:1b:3c:71:7c:9d:1d:5c:74:7f:45:c2:b9:
e0:ba:de:00:12:16:3a:b6:54:5c:0e:04:15:96:65:5e:4b:54:
8a:a1:c1:45:62:4b:d2:2b:bc:38:aa:e9:56:cf:e9:30:49:8c:
3a:0c:0e:2b:3d:75:f9:f6:e6:8b:ba:71:52:f6:ac:fa:d0:bc:
6e:cc:3d:3f:bb:9c:93:72:d0:50:43:61:e4:b3:4d:05:73:71:
c6:2b:53:17:99:af:5f:35:ce:85:17:74:85:12:54:83:f8:cd:
2c:42:d3:19:9a:e2:ff:ed:2d:e3:b8:ff:6b:d6:1a:75:a3:d0:
e9:39:ff:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:07 2025 by rpki-client