Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
File: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft (raw, json)
Hash identifier: HR0o1MhGGrVS0ODGbllpKvuQnM/XTaGFrvdI0z//+rc=
Subject key identifier: CC:F7:ED:53:9A:97:32:F4:B7:69:0C:CD:89:A4:D7:57:23:D9:07:35
Authority key identifier: B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
Certificate issuer: /CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Certificate serial: 019A4F2B06A2D96466C9DB92CA9A04C8C834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
Manifest number: 03AB
Signing time: Tue 04 Nov 2025 14:00:10 +0000
Manifest this update: Tue 04 Nov 2025 14:00:10 +0000
Manifest next update: Wed 05 Nov 2025 14:00:10 +0000
Files and hashes: 1: sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl (hash: 7p3LV1FfxUu8Oc92jcMsXxtC9us3Kfrvov4mpuUsAiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:06:a2:d9:64:66:c9:db:92:ca:9a:04:c8:c8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a85371e92f39a2be424760b04e47ad9da3ed3b
Validity
Not Before: Nov 4 14:00:10 2025 GMT
Not After : Nov 5 14:00:10 2025 GMT
Subject: CN=ccf7ed539a9732f4b7690ccd89a4d75723d90735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:e8:62:0c:9e:62:da:3a:53:91:22:74:66:
eb:73:da:fc:d0:7d:ba:88:b9:66:02:4c:fe:c2:22:
40:ea:8c:fa:18:aa:1c:c0:9b:b6:9a:7b:12:eb:fb:
79:85:cf:ee:35:3c:c9:f8:bb:b1:62:ab:d9:6a:ea:
b2:2c:5b:09:63:59:70:06:d9:36:98:84:64:ef:5f:
19:e6:2a:75:b5:9c:2e:3a:13:91:1e:ae:24:0d:47:
d3:73:e3:f7:28:f3:ff:46:f1:b4:61:e9:11:ae:96:
1f:f8:b7:c8:f3:7c:a5:cf:e6:6f:15:19:a1:97:b7:
6e:0e:6e:2e:79:2e:d6:4c:c5:33:bc:04:35:25:34:
b8:f2:42:dc:e2:60:8f:87:64:cf:b9:93:ef:db:d9:
a1:fe:59:56:b1:fb:0d:05:53:75:e7:41:b4:3c:9d:
3a:d8:04:a6:92:ba:60:68:f3:6c:f5:d6:c2:d4:33:
fa:bd:24:09:ef:f3:02:97:a5:cb:0f:6e:24:5a:42:
f8:9b:b8:ef:36:90:3c:9c:99:bd:80:8d:84:5e:9e:
26:f8:62:36:a5:c4:f8:62:f3:5e:c0:5a:3b:1f:a1:
85:6a:93:fc:33:dd:aa:f3:76:05:26:ab:fa:ec:9f:
f6:42:f3:6d:16:5f:f2:db:81:00:53:6b:39:81:12:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F7:ED:53:9A:97:32:F4:B7:69:0C:CD:89:A4:D7:57:23:D9:07:35
X509v3 Authority Key Identifier:
keyid:B2:A8:53:71:E9:2F:39:A2:BE:42:47:60:B0:4E:47:AD:9D:A3:ED:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f5d730-f8eb-4f80-9a9c-9abe4e6c2be1/1/sqhTcekvOaK-QkdgsE5HrZ2j7Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:a5:56:05:97:e2:5f:57:2a:49:db:f2:24:a0:f4:b6:86:
e5:dd:c5:cc:64:ee:6a:98:ac:4b:0c:22:b1:89:19:a3:2c:e0:
21:2b:52:b1:d5:f3:cf:5d:58:07:fb:d0:62:33:85:be:8d:1f:
a2:87:62:52:a8:4f:36:fa:7e:3a:b7:bb:19:bc:7b:85:92:eb:
28:15:4a:ac:94:56:e8:86:96:2a:55:39:e5:2b:f4:b7:08:03:
65:36:e5:5a:ca:7e:b6:af:fb:91:34:ff:e8:c7:87:f7:1b:64:
bb:03:42:8a:89:56:4a:e3:a3:14:ab:2d:fd:57:fb:dd:33:2b:
9d:c3:af:86:bb:73:10:12:bb:91:e6:70:b7:57:55:3a:08:24:
22:a8:d5:64:5e:4c:70:d5:29:20:ee:31:97:3f:94:41:2a:61:
97:84:01:48:d4:7e:86:26:2a:11:c3:c1:43:a6:a5:fe:8c:65:
d7:19:7e:dc:23:db:ac:42:d7:94:bf:df:34:0f:75:c2:3d:be:
28:7a:bc:d2:f7:19:d6:d3:76:eb:70:68:ab:b0:2d:12:cb:31:
e6:e4:44:5f:a3:5d:e2:10:05:45:1c:e5:a7:7f:30:8c:7f:40:
c0:08:d4:fa:b5:74:54:4d:23:84:10:bb:19:84:f1:a3:61:98:
1a:5f:af:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:56 2025 by rpki-client