Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File: sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier: idS72oZEWbu0MobfPpaXMgbMrY/QAd9tPDVU4i+Q1v0=
Subject key identifier: 50:43:22:3F:73:F3:0A:19:B4:66:E9:0B:2C:14:2A:80:97:43:4D:16
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer: /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial: 019896A4A3F32ABA4B8BC9B37E63AB602D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number: 163E
Signing time: Mon 11 Aug 2025 01:00:28 +0000
Manifest this update: Mon 11 Aug 2025 01:00:28 +0000
Manifest next update: Tue 12 Aug 2025 01:00:28 +0000
Files and hashes: 1: FbIoob4iTw44eH-Dt8h61MoAIPY.roa (hash: 7Jgl5oeZbwQ2DvaEShI936iS6DHQaWaMAl7kfq1Du28=)
2: sQw889xTylScA-T19G2RzpC44HA.crl (hash: fZtQj4z6BjlesKs7wWgtABdZrGITI0D7tSLo8YHVcTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:a3:f3:2a:ba:4b:8b:c9:b3:7e:63:ab:60:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Validity
Not Before: Aug 11 01:00:28 2025 GMT
Not After : Aug 12 01:00:28 2025 GMT
Subject: CN=5043223f73f30a19b466e90b2c142a8097434d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a7:b8:7f:74:df:7e:b5:93:55:76:0f:46:da:
83:f6:d5:5d:ac:a8:25:5d:7e:6d:a9:ee:6b:e3:67:
58:1c:d2:64:2c:b6:91:66:5c:8b:8e:fa:c8:82:89:
60:6d:75:31:fa:06:f3:38:0b:08:90:f2:3c:4b:c5:
ff:3e:35:82:6e:26:4c:80:2a:c5:b8:fa:ca:bb:60:
fa:90:09:9f:88:c0:1b:ad:31:dc:b9:b4:c5:4a:b2:
9a:84:58:17:91:1f:49:a7:ff:54:1d:62:93:71:75:
78:45:3c:e0:82:20:6e:71:a9:52:e7:de:e4:cd:37:
06:fc:81:25:15:54:7c:c0:65:39:1f:bf:f1:c1:12:
94:a0:e0:b2:89:ea:5d:85:ad:5a:64:1c:6d:d8:0a:
b7:86:32:a5:be:d0:c5:c7:e7:4a:d6:bc:aa:d3:fa:
ca:cc:01:3c:0c:d1:b9:60:f3:ba:e7:f4:4f:ee:3c:
99:7d:09:c8:e6:99:31:d1:e3:22:18:c4:9b:ab:3a:
3c:8b:70:8c:f0:7c:2a:7a:62:13:2e:f8:6a:7b:ae:
6a:dc:35:85:42:d7:3d:dc:31:40:4f:da:49:2c:00:
66:8c:9f:62:b2:e3:e9:eb:ab:c7:9f:04:6e:a1:57:
bf:5d:65:dd:7b:45:9a:db:76:af:b8:15:51:d7:56:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:22:3F:73:F3:0A:19:B4:66:E9:0B:2C:14:2A:80:97:43:4D:16
X509v3 Authority Key Identifier:
keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:bc:8f:d5:b7:dd:09:b9:f9:7e:a0:1f:7a:8c:a7:ef:9f:
5e:ff:25:c3:0e:d9:96:97:4e:6b:7e:09:34:e4:c2:a1:94:90:
75:85:f5:9d:85:02:de:59:aa:49:08:1d:b4:8d:6b:49:70:ab:
d5:68:ef:1f:fb:d5:54:0e:17:5c:bc:84:40:ba:e6:4c:db:b8:
d7:27:4c:e6:47:bf:78:c5:c9:e9:77:9f:58:10:40:e5:6c:8c:
52:92:01:4b:56:72:99:37:c2:b0:ae:16:b4:a3:c3:dc:30:1d:
97:c5:78:fc:91:9b:97:82:ff:4c:7e:15:3e:fd:05:75:e0:46:
a1:54:c1:87:55:e9:b3:72:61:7e:a6:6c:24:b5:c1:51:77:91:
a9:21:05:5e:67:a9:44:f5:3b:11:13:03:58:dd:74:1d:d6:22:
fa:de:44:20:dc:28:09:bc:a2:19:d8:22:46:37:10:bd:13:53:
5d:a0:72:ea:f9:78:9a:93:1c:00:72:d6:19:f6:ed:b0:02:1f:
9f:a7:77:17:43:c8:b6:b9:2d:6b:4d:fa:26:22:4c:45:b6:9f:
c6:56:10:f9:bc:85:a7:33:41:f2:ea:69:ee:da:34:89:64:a0:
24:51:0d:02:d8:2d:48:29:77:ed:1b:59:b8:da:8e:c7:71:fb:
e2:2a:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:56:07 2025 by rpki-client