Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: dYEQq9mvoEiYcazlVAZ29UR1bubeydZSWhifynxNtp4=
Subject key identifier: 39:D8:E2:FD:4F:A5:45:42:C9:95:A3:A2:8C:67:38:96:45:73:0C:DD
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019A54C0ED33D07DD1F203B8B6EC879E3E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 1725
Signing time: Wed 05 Nov 2025 16:02:01 +0000
Manifest this update: Wed 05 Nov 2025 16:02:01 +0000
Manifest next update: Thu 06 Nov 2025 16:02:01 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: IbpKv/cxT99wnE3jXac6dOD7oIRKvbJz/Q3n87vkhYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:ed:33:d0:7d:d1:f2:03:b8:b6:ec:87:9e:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Nov 5 16:02:01 2025 GMT
Not After : Nov 6 16:02:01 2025 GMT
Subject: CN=39d8e2fd4fa54542c995a3a28c67389645730cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:f4:5a:a8:24:5d:2b:c5:9e:cb:df:5a:bf:
3e:85:21:6e:dc:3f:25:60:4f:f8:41:38:5a:7a:ae:
66:86:12:c6:a9:cd:bc:2b:51:86:66:3b:68:0f:9e:
38:a7:39:a9:6e:0b:7c:fb:c8:86:3a:de:db:79:ba:
cf:27:7a:9c:60:9c:81:6f:30:ae:f2:43:29:f9:74:
f0:eb:e4:86:74:89:75:42:9c:23:fd:a3:85:ff:eb:
68:df:c6:02:96:ca:4e:c5:e5:e3:5e:df:c4:26:fe:
25:fc:8c:5d:bc:36:f1:02:06:21:18:df:00:73:63:
f2:a7:3b:1a:52:c1:b2:34:b1:93:52:7f:64:6b:10:
13:42:20:3f:4b:ec:b9:25:d7:a9:25:b4:cc:c4:0b:
e0:73:71:f9:f5:26:16:32:9b:c6:34:b5:46:88:10:
3f:b5:9f:76:10:ea:6c:c3:93:bd:9d:80:b6:22:f8:
7a:5c:a0:36:fc:3a:69:dd:8a:d6:e1:5c:1b:0b:4e:
51:54:81:2e:a5:d9:62:b3:01:fc:56:76:1c:84:cd:
fe:ec:93:ae:14:2a:70:69:3c:97:85:bd:d9:fb:9d:
2b:c5:ba:ed:e7:e7:54:58:75:aa:0d:7f:7d:39:b2:
1b:9c:5d:9a:c6:f7:4c:e2:44:75:d3:2a:31:24:af:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:E2:FD:4F:A5:45:42:C9:95:A3:A2:8C:67:38:96:45:73:0C:DD
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:66:9f:f4:7d:c7:7b:89:01:de:e9:f4:84:cd:db:37:f0:9f:
79:76:3c:91:4c:59:b0:99:70:1e:7a:99:08:a2:ed:3d:8c:7b:
c0:ae:d1:47:55:00:d0:a0:43:64:b0:c7:2e:f2:be:67:0f:14:
08:61:3c:65:c2:62:9f:e5:2a:33:9b:a4:c2:62:55:87:47:5a:
b6:b3:7c:61:00:60:5b:00:5a:50:8b:ae:9b:eb:38:f8:4f:9c:
e0:17:e0:de:51:81:1a:6f:30:12:b6:80:c3:2a:96:07:23:4c:
e8:c6:74:44:f5:df:ce:af:55:22:48:7e:7c:48:f7:f5:7e:f0:
e2:35:61:34:c4:9c:a4:54:8b:0d:fa:06:cc:59:12:be:db:b0:
a8:ca:86:5f:f3:32:0b:e2:bb:75:42:fc:e3:4e:bb:f5:ff:46:
b4:df:48:29:31:56:72:6d:61:ba:48:41:66:30:ff:58:29:88:
1a:74:88:bc:8f:49:36:de:53:d5:a5:11:e5:8d:b3:b4:6a:65:
8f:75:18:22:06:ab:03:47:08:9e:d0:28:39:12:45:17:fc:75:
19:46:76:08:82:2c:cd:73:43:15:59:32:81:42:07:4f:de:f4:
06:7a:b3:b2:dc:13:e1:7e:52:82:f2:5e:f9:0d:3e:dd:5a:13:
1c:9e:1c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:23:52 2025 by rpki-client