Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
File: SqvRp2WuXL4dyT2vAk06R-cqyRg.mft (raw, json)
Hash identifier: KRYQ0rW09aqNcuT3OlUnSA/uXoXZSQ1ZCugh/BKLUFw=
Subject key identifier: 59:55:0A:72:E3:3E:1A:B2:20:12:EA:4B:54:53:A1:1F:BB:7A:9D:A0
Authority key identifier: 4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
Certificate issuer: /CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Certificate serial: 019A50752D0656FE1432A47E7FF1FD9E63CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
Manifest number: 10C9
Signing time: Tue 04 Nov 2025 20:00:47 +0000
Manifest this update: Tue 04 Nov 2025 20:00:47 +0000
Manifest next update: Wed 05 Nov 2025 20:00:47 +0000
Files and hashes: 1: SqvRp2WuXL4dyT2vAk06R-cqyRg.crl (hash: buzdBN2X0p2RnPqCQPhhFC1lpWWWbMgQolHYRN1Jbp0=)
2: tmx5LjQV62XIOiTTxX3EbhTuW90.roa (hash: ONvGVTfcwoaLd5CXPlp64qPMMnmfgrXhtwa7DXeFCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:2d:06:56:fe:14:32:a4:7e:7f:f1:fd:9e:63:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aabd1a765ae5cbe1dc93daf024d3a47e72ac918
Validity
Not Before: Nov 4 20:00:47 2025 GMT
Not After : Nov 5 20:00:47 2025 GMT
Subject: CN=59550a72e33e1ab22012ea4b5453a11fbb7a9da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:49:14:dc:6b:d7:76:61:1e:6d:a9:dc:ba:e5:
c1:f1:ec:da:11:6a:2b:58:72:8e:b2:99:64:29:49:
b6:39:1f:20:da:ae:b6:b2:6f:16:d4:02:d0:a7:38:
7c:6e:77:36:f3:d3:a2:5d:6f:18:3a:44:64:6a:ef:
0e:71:08:cc:6b:19:bd:58:80:9b:13:1e:46:cc:e9:
84:7a:b2:a7:83:da:a2:42:35:2a:91:2c:45:4c:26:
6e:87:eb:c3:d5:9a:af:06:c2:3e:80:b8:08:d1:9e:
0c:7c:c8:49:60:64:d2:bf:62:83:f9:35:48:6e:e5:
f2:36:1d:da:8b:d0:1c:d9:b5:17:25:9f:83:f9:6f:
b5:0a:fd:7b:35:d1:21:26:22:80:9f:d8:20:e7:86:
a1:4b:22:09:77:cf:17:00:41:68:d9:9c:e1:56:88:
2f:d3:29:15:87:42:60:20:89:2e:f1:14:aa:16:31:
a8:85:6a:a6:d1:81:59:ce:a3:60:8b:9b:e0:ff:f9:
42:71:00:56:d5:e6:5e:70:d8:b7:b5:89:bf:3e:c3:
8d:3a:2b:b6:c8:54:44:c6:22:12:4f:b2:59:e6:39:
9c:62:fe:66:3a:2a:ea:ae:e6:fc:c4:d2:ce:6e:63:
3a:eb:c8:51:6a:6f:6a:66:c9:35:91:41:86:84:4e:
0a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:0A:72:E3:3E:1A:B2:20:12:EA:4B:54:53:A1:1F:BB:7A:9D:A0
X509v3 Authority Key Identifier:
keyid:4A:AB:D1:A7:65:AE:5C:BE:1D:C9:3D:AF:02:4D:3A:47:E7:2A:C9:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqvRp2WuXL4dyT2vAk06R-cqyRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/fbf239-5f8a-4d6a-a0cb-44ac6adb3a49/1/SqvRp2WuXL4dyT2vAk06R-cqyRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:27:67:07:90:20:d7:b4:3f:78:bf:b6:be:cb:a3:ef:1e:45:
49:cf:50:17:5e:27:94:3c:ae:c1:8f:45:bd:c9:6d:22:5a:d7:
9f:f5:b1:82:18:6a:63:18:bf:2e:a2:52:61:90:9c:5b:42:3f:
62:99:c8:70:30:3a:46:7a:1a:72:ab:54:7a:9f:ab:cf:7a:7e:
48:9c:f2:4e:47:28:da:f5:71:26:7e:c7:03:9f:66:65:05:b4:
97:2a:a1:5d:0f:a0:fe:00:51:58:91:d5:fb:30:3f:dd:3d:c3:
ae:4e:fd:f3:0e:36:46:2a:b8:9c:c0:b3:b8:81:5e:11:90:9f:
bc:a9:95:cf:9b:44:1d:c3:b8:84:f2:ec:aa:d2:85:55:f3:c1:
c8:84:d4:04:84:d7:44:4f:af:ae:1b:a3:e2:3a:e8:03:53:68:
59:5d:17:0d:b8:bb:69:34:97:78:61:f1:75:26:cd:52:13:a5:
d6:e8:44:57:08:69:2c:21:be:36:56:f5:d1:a8:e1:26:71:9c:
a1:71:02:e3:55:01:3d:60:76:f7:7d:2c:b7:5e:6a:aa:6b:62:
ca:9e:b6:0a:59:91:92:2a:1b:c6:99:1c:51:53:f4:24:c9:74:
6e:50:70:2d:85:06:8f:d5:c4:44:4e:33:e0:e2:07:39:43:eb:
41:ab:9b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:52:38 2025 by rpki-client