Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
File: SqaReHb9eJJsGSe5_ceWWNdGyEw.mft (raw, json)
Hash identifier: Hbl63W2v22BnOAx1FttaNj0Dar0g1xppRWiauuQHy8o=
Subject key identifier: 35:88:55:2B:7A:E9:6B:3D:FB:D6:50:25:57:FD:BA:9F:13:AF:76:7F
Authority key identifier: 4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
Certificate issuer: /CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Certificate serial: 019A4FD008D94A364A74F13C8C0AC3A3457B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
Manifest number: 146F
Signing time: Tue 04 Nov 2025 17:00:25 +0000
Manifest this update: Tue 04 Nov 2025 17:00:25 +0000
Manifest next update: Wed 05 Nov 2025 17:00:25 +0000
Files and hashes: 1: IbpEEeU88LFNxh5nL5cwRSdFORY.roa (hash: 4vG5HojNCWpZzK5uMY8x1XnpP7QHbyElnVInTc+EUlM=)
2: SqaReHb9eJJsGSe5_ceWWNdGyEw.crl (hash: qmZuaTZM8EqEPU7hkKTVkqSYTq0LUQUtpk2W+DebdRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:08:d9:4a:36:4a:74:f1:3c:8c:0a:c3:a3:45:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa6917876fd78926c1927b9fdc79658d746c84c
Validity
Not Before: Nov 4 17:00:25 2025 GMT
Not After : Nov 5 17:00:25 2025 GMT
Subject: CN=3588552b7ae96b3dfbd6502557fdba9f13af767f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:5d:46:6a:99:82:02:2c:7b:95:5a:87:f1:
88:26:e3:d4:a1:02:8b:69:8b:3a:37:8e:8c:91:9f:
6a:c2:33:f3:d6:6d:db:53:50:76:cd:59:0a:c0:7e:
60:00:0c:46:39:ae:ed:68:9d:8d:dd:cd:fd:3c:be:
bc:c7:a7:3c:59:8e:61:0b:48:44:08:f4:1c:06:e3:
14:73:b3:bc:dc:b8:f8:fa:b0:2e:ef:f7:8b:2c:12:
3c:71:22:60:60:97:7e:99:54:7c:ae:dc:b5:2f:e3:
34:ff:c6:e6:b2:c8:25:0e:3e:58:f4:d1:cc:88:63:
dd:d1:89:eb:59:b8:3c:7e:f3:cf:49:cd:c6:ca:77:
9d:d6:51:00:51:a5:3f:eb:30:b9:3a:4a:a4:79:c2:
b9:14:b0:96:80:ca:06:6f:5a:e3:fd:89:e9:54:b8:
a4:96:8c:2c:50:ca:d7:6b:5f:5b:51:48:b9:26:dc:
ce:eb:e1:d3:7f:dc:8b:0f:97:c9:4f:79:b1:85:76:
d0:bf:7d:b2:62:d5:dc:c7:9e:81:16:35:04:ce:1e:
ca:32:c1:6f:40:60:fc:2d:88:ba:0e:0f:9a:78:8f:
38:b7:63:9f:af:79:f6:7b:0d:dc:a7:e4:01:5b:7f:
61:9a:29:d0:ae:72:aa:c1:9d:7a:0b:d6:3e:e6:66:
bf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:88:55:2B:7A:E9:6B:3D:FB:D6:50:25:57:FD:BA:9F:13:AF:76:7F
X509v3 Authority Key Identifier:
keyid:4A:A6:91:78:76:FD:78:92:6C:19:27:B9:FD:C7:96:58:D7:46:C8:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqaReHb9eJJsGSe5_ceWWNdGyEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e11ea3-8705-40ac-a68d-9ce27c12b2f4/1/SqaReHb9eJJsGSe5_ceWWNdGyEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fd:70:67:77:dc:7f:5c:c0:0c:da:28:26:ac:15:4f:85:cb:
8e:2a:25:1f:2e:18:43:1e:10:4c:99:cb:29:70:4b:50:9d:8c:
0f:ef:4d:ef:da:32:cf:72:09:c7:1d:76:d8:bd:5a:88:87:5f:
3b:50:de:84:dc:d1:fc:d6:58:d3:fa:dc:27:37:5e:81:da:c4:
23:76:a9:d7:02:b7:ab:c6:14:d7:eb:cb:0d:6d:1d:0f:a8:bb:
0f:3a:dc:18:c1:11:06:ed:f9:e6:ab:5f:11:86:8f:4f:2f:49:
64:bf:10:c0:00:fb:69:ee:97:57:93:18:a9:0b:dd:6f:4e:de:
3e:1a:73:af:5a:08:ed:b1:48:7f:99:47:5d:92:5e:58:3b:c3:
98:f6:40:b9:9d:d4:e6:a7:71:55:1d:07:90:c6:b8:6a:96:ad:
66:3b:19:ff:1a:35:88:60:64:19:2f:e8:8e:c0:61:6f:12:49:
92:b2:cf:53:81:f4:e8:cf:ce:91:cb:8b:64:bc:66:09:c6:81:
30:4c:f9:a9:f9:df:00:c4:6b:86:0b:8f:56:79:85:7c:03:b6:
3a:db:3a:cf:0a:42:21:51:59:34:8d:74:89:a6:11:6b:27:0f:
86:f6:4a:3b:60:5e:6d:a9:e7:74:21:18:e5:d7:53:2c:d7:8b:
f7:6e:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:24 2025 by rpki-client