Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: 6cmdt5xj3yXzMML3ePQS5XGEJLOX1lxw4IEvrRpgEJY=
Subject key identifier: B0:2A:F8:69:15:4B:EC:94:9D:59:99:B2:76:F1:9E:53:84:2B:6C:2A
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 01983984544EA3F5A7B4EA82C993B495FF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 01AC
Signing time: Wed 23 Jul 2025 23:00:30 +0000
Manifest this update: Wed 23 Jul 2025 23:00:30 +0000
Manifest next update: Thu 24 Jul 2025 23:00:30 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: P8FxgJms2S7WLeiM3s+F9l/ytEApgX+BN8gVRJb17s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:54:4e:a3:f5:a7:b4:ea:82:c9:93:b4:95:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Jul 23 23:00:30 2025 GMT
Not After : Jul 24 23:00:30 2025 GMT
Subject: CN=b02af869154bec949d5999b276f19e53842b6c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:df:7d:f0:56:08:fc:cb:c5:0c:0e:91:a7:
93:bd:f8:83:32:35:14:37:72:12:d6:36:56:c3:fe:
53:a5:a5:9e:e2:16:f4:1a:53:20:40:c5:c6:68:ab:
1e:b1:a9:cd:a2:78:be:98:e1:57:88:34:7c:55:53:
2a:b2:5d:c8:db:84:08:1c:f8:9c:b3:12:27:11:a3:
ea:3b:bc:28:97:4c:bb:e2:20:f6:7e:d9:ab:68:d5:
51:d5:a8:25:53:4f:81:00:fe:e9:dc:90:83:15:e3:
c6:42:61:6d:e2:9b:e2:52:c5:35:e5:e5:74:a3:ee:
4c:9b:1d:f3:74:c9:85:73:56:9a:ab:0a:bb:31:f1:
87:23:70:c4:c9:2a:00:a3:14:63:f4:65:c5:86:f6:
98:90:1b:c1:e6:9d:9e:f6:f4:a5:fb:fb:ef:c3:17:
59:cf:11:51:3a:79:51:e1:1f:82:0f:8c:95:31:73:
d4:94:bb:4d:31:bb:ba:fd:09:70:43:c7:0c:98:c7:
d0:6f:c9:68:b4:40:15:e4:95:a6:bc:4f:e7:94:42:
30:70:1a:f9:e3:29:7c:ad:df:ad:a5:54:cb:9e:bf:
e3:99:34:5a:b8:89:95:9f:a9:af:fd:3a:e0:4c:ae:
74:2c:bd:09:2b:e1:14:6b:ce:11:c9:ab:6b:45:b3:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:F8:69:15:4B:EC:94:9D:59:99:B2:76:F1:9E:53:84:2B:6C:2A
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:a1:8f:8e:47:29:45:22:96:56:b4:9b:db:57:84:9b:a8:
02:8a:b1:7e:4b:ba:5f:1a:71:b0:bd:83:b4:e4:4e:85:5e:4e:
8f:2f:bf:07:86:8a:f1:6a:69:bc:da:61:5e:b8:8a:14:f3:9e:
1e:6e:c1:14:8c:74:32:cf:70:03:57:3e:35:c0:25:3c:5d:a4:
a8:c3:81:b6:09:2f:39:c3:33:72:13:b5:66:fc:dc:09:ca:6e:
e9:30:c5:b8:24:a7:44:b5:a1:fb:0d:05:89:d3:6c:41:e5:8a:
0a:dc:2a:a7:bf:8b:23:7c:fa:69:97:92:70:f6:90:d7:bd:d9:
25:64:38:77:e7:b3:7d:03:50:91:8d:c2:90:ed:24:07:46:c7:
a9:96:1f:19:ae:b7:0c:41:04:25:6a:51:c3:37:c1:a0:08:25:
20:c2:33:05:38:23:9b:3c:59:2f:a2:0e:c1:72:91:2c:11:b3:
7b:86:c7:b5:35:72:22:85:41:ed:12:b0:f4:b3:44:b1:31:eb:
fd:e8:39:97:26:1c:b4:6e:8a:48:90:d3:54:d2:a4:23:4c:b3:
79:a5:56:3c:6d:cd:de:f1:5a:2d:3f:b6:e2:d3:96:71:33:4f:
b5:19:63:19:fa:08:c3:d5:6b:30:2a:fd:ed:a5:24:ec:17:8f:
58:58:22:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 01:20:24 2025 by rpki-client