Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: uCMklAfJiVajVTs3SMQeLPHXL13FhA8qktv4Mx5PySQ=
Subject key identifier: 0C:6D:FA:C3:80:6F:F4:E6:4C:02:A8:23:70:22:19:62:0C:3E:EE:13
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 01984A77BC022C5E74F8CCA59D59A1D924B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:17 +0000
Manifest this update: Sun 27 Jul 2025 06:00:17 +0000
Manifest next update: Mon 28 Jul 2025 06:00:17 +0000
Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=)
2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: F4HNKPaqQxGFU8tUrVlkyFiF6Uuh1Zw4MvLtjAOxF3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:bc:02:2c:5e:74:f8:cc:a5:9d:59:a1:d9:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Jul 27 06:00:17 2025 GMT
Not After : Jul 28 06:00:17 2025 GMT
Subject: CN=0c6dfac3806ff4e64c02a823702219620c3eee13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:94:51:76:7b:97:bf:bf:36:3a:5e:d6:e6:6b:
5e:ba:22:8b:26:52:d2:e2:d5:35:04:be:b3:5c:ae:
6f:2b:04:4f:85:27:fb:e0:06:3d:82:10:db:16:79:
40:4b:f1:65:29:e3:72:27:b4:4f:1f:d3:59:71:97:
2f:74:6e:77:0e:3b:2a:57:4d:22:fa:cb:9d:45:00:
52:5d:06:00:ed:77:d4:02:ef:40:f7:b2:6b:68:bf:
4c:94:52:0b:e0:ba:e2:c8:37:49:fc:12:60:43:29:
b2:5a:b2:53:82:8d:2a:a9:d7:82:51:b8:87:bb:e1:
1e:ea:4a:12:82:f7:50:6f:6f:f2:27:f4:9c:f1:70:
46:68:71:cc:f1:93:15:5b:a7:4e:93:23:a1:e4:00:
d0:ed:41:5b:6d:63:15:8b:38:a1:3d:e8:52:17:f7:
b3:c3:c6:7a:02:d1:4a:cc:0b:b6:e6:54:7e:f4:f1:
70:a7:7e:28:52:04:73:fe:0f:12:a7:c5:e1:41:50:
35:71:5b:0b:19:6d:ff:8a:c9:5f:25:e1:a9:ac:01:
2f:98:53:71:e1:d1:dd:01:39:a2:c5:a3:2a:2a:93:
c9:67:c2:68:52:a7:81:78:65:db:74:a5:ba:6e:72:
d4:bd:6a:10:40:15:d4:a1:90:c2:96:26:60:da:7d:
b2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:FA:C3:80:6F:F4:E6:4C:02:A8:23:70:22:19:62:0C:3E:EE:13
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ed:9f:24:51:43:76:df:c3:87:4f:da:8c:1e:5b:f1:ea:1b:
b6:4e:f1:b6:71:47:ea:f5:1c:47:99:cb:b9:8d:54:88:9a:94:
d7:5b:b8:40:28:b8:ce:64:bc:16:a6:cf:e8:20:74:b9:6a:78:
29:b3:ca:c3:60:e7:5f:c1:a4:ee:18:7b:66:b6:fb:d4:56:e7:
9d:5c:c0:7c:ff:db:5a:e5:72:2d:77:75:41:13:50:dd:3c:d4:
50:68:8a:6c:4c:86:4c:9c:7c:e0:4b:ff:2b:61:29:5a:1b:8b:
f4:d4:f3:4e:e2:48:76:dc:5f:8b:a8:5f:87:ba:30:ce:89:8a:
73:1f:0a:de:6a:81:0d:05:d3:ea:c8:c2:ce:7b:df:8d:a7:b0:
65:6b:2f:9c:17:65:f9:10:bd:11:6e:75:50:ab:ac:04:72:b0:
d8:89:19:5f:0a:5e:6e:29:ba:f4:06:39:77:6a:06:53:4b:bc:
ba:10:18:ff:cb:c9:0f:a0:ca:5e:2b:4e:2d:91:37:7e:14:a3:
15:c4:ce:e0:7e:66:e9:62:9e:46:76:1f:f4:33:26:2b:75:f0:
6c:8b:ed:0e:48:22:ec:02:3e:a2:df:92:85:cc:74:70:70:b0:
ea:64:eb:15:11:82:7f:2c:b3:62:9b:65:20:82:f7:06:8c:b8:
8a:83:b8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKd7wCLF50+MylnVmh2SS4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MGRiOTk5Y2E0Y2UyODdjNWM5MmFiMTY3YTUwMDkwMjI1
OWJiMDUwHhcNMjUwNzI3MDYwMDE3WhcNMjUwNzI4MDYwMDE3WjAzMTEwLwYDVQQD
EygwYzZkZmFjMzgwNmZmNGU2NGMwMmE4MjM3MDIyMTk2MjBjM2VlZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpRRdnuXv782Ol7W5mteuiKLJlLS
4tU1BL6zXK5vKwRPhSf74AY9ghDbFnlAS/FlKeNyJ7RPH9NZcZcvdG53DjsqV00i
+sudRQBSXQYA7XfUAu9A97JraL9MlFIL4LriyDdJ/BJgQymyWrJTgo0qqdeCUbiH
u+Ee6koSgvdQb2/yJ/Sc8XBGaHHM8ZMVW6dOkyOh5ADQ7UFbbWMVizihPehSF/ez
w8Z6AtFKzAu25lR+9PFwp34oUgRz/g8Sp8XhQVA1cVsLGW3/islfJeGprAEvmFNx
4dHdATmixaMqKpPJZ8JoUqeBeGXbdKW6bnLUvWoQQBXUoZDCliZg2n2yqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxt+sOAb/TmTAKoI3AiGWIMPu4TMB8GA1UdIwQY
MBaAFEkNuZnKTOKHxckqsWelAJAiWbsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUt
OThlMjVlMDQ2OTA4LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82ZjcxZjMtNjM5OS00OTEzLWI5OGUtOThlMjVlMDQ2OTA4
LzEvU1EyNW1jcE00b2ZGeVNxeFo2VUFrQ0padXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO2fJFFD
dt/Dh0/ajB5b8eobtk7xtnFH6vUcR5nLuY1UiJqU11u4QCi4zmS8FqbP6CB0uWp4
KbPKw2DnX8Gk7hh7Zrb71FbnnVzAfP/bWuVyLXd1QRNQ3TzUUGiKbEyGTJx84Ev/
K2EpWhuL9NTzTuJIdtxfi6hfh7owzomKcx8K3mqBDQXT6sjCznvfjaewZWsvnBdl
+RC9EW51UKusBHKw2IkZXwpebim69AY5d2oGU0u8uhAY/8vJD6DKXitOLZE3fhSj
FcTO4H5m6WKeRnYf9DMmK3XwbIvtDkgi7AI+ot+Shcx0cHCw6mTrFRGCfyyzYptl
IIL3Boy4ioO4VA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:25 2025 by rpki-client