Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
File: sq-PF3TgWSXyTkHe5p5bYj2axj0.mft (raw, json)
Hash identifier: ialMt8zYvAhJb3Se6+DDFOygptFx7H09LgoEZ9/Y2vU=
Subject key identifier: F9:27:2E:21:56:F3:59:F5:99:8E:6C:8C:96:23:E2:A0:8C:41:72:62
Authority key identifier: B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
Certificate issuer: /CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Certificate serial: 01984AE5F236D7EE5E13C0C838D7D2807225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:40 +0000
Manifest this update: Sun 27 Jul 2025 08:00:40 +0000
Manifest next update: Mon 28 Jul 2025 08:00:40 +0000
Files and hashes: 1: dHmQJZqThrz58J_TSvHl_H-39E8.roa (hash: lBrrDh2GaFmnqywSNW3PsD5utU5WNEXu75PvBG3VZjI=)
2: sq-PF3TgWSXyTkHe5p5bYj2axj0.crl (hash: 1O/wcgMsbi5/QRSLWBkCn/UVbIs8e4WHMiYn67G2DAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:f2:36:d7:ee:5e:13:c0:c8:38:d7:d2:80:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af8f1774e05925f24e41dee69e5b623d9ac63d
Validity
Not Before: Jul 27 08:00:40 2025 GMT
Not After : Jul 28 08:00:40 2025 GMT
Subject: CN=f9272e2156f359f5998e6c8c9623e2a08c417262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:eb:9f:81:21:71:b0:ca:69:f9:16:6b:47:
c7:9a:45:58:11:5d:d6:d4:c6:22:c8:d4:17:4e:0d:
65:6c:9f:96:4f:3f:34:bd:d1:6e:2a:59:49:91:b1:
dd:f3:32:1e:ff:dc:a2:59:32:ce:8e:90:7a:63:4a:
43:d6:d0:b9:9b:63:30:5e:ff:39:26:f3:61:c9:85:
c9:2a:9f:4c:07:a9:85:0c:8c:c8:43:19:ed:19:38:
b1:9d:e0:ef:d9:cf:72:51:59:8a:21:e8:b3:7c:e0:
c8:a9:b5:5a:52:c8:d7:7a:c8:3b:03:f8:35:e8:76:
77:24:a8:52:88:54:b8:38:bf:11:81:d4:8c:e9:da:
7e:51:0a:cf:6d:d8:ed:b3:33:42:69:9b:d7:0d:ad:
0c:07:4d:a0:1b:09:4d:c0:3e:69:54:da:45:ca:68:
04:a7:a5:97:19:49:90:54:6e:e6:57:02:aa:46:ef:
61:f6:07:d6:e7:b7:a8:c9:79:43:00:83:ad:56:c9:
50:e0:fd:4d:58:ea:b0:fd:cc:49:46:0f:9f:ad:55:
54:d6:07:fd:c3:a5:51:7c:98:a3:ed:01:95:58:10:
36:e3:e6:2c:1e:d1:0d:12:91:50:8e:d3:3a:10:e0:
64:41:5f:83:0a:8b:01:77:01:f7:b0:14:b9:f2:fd:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:2E:21:56:F3:59:F5:99:8E:6C:8C:96:23:E2:A0:8C:41:72:62
X509v3 Authority Key Identifier:
keyid:B2:AF:8F:17:74:E0:59:25:F2:4E:41:DE:E6:9E:5B:62:3D:9A:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq-PF3TgWSXyTkHe5p5bYj2axj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/c15671-ba1b-48f2-b691-fa57c126bc2a/1/sq-PF3TgWSXyTkHe5p5bYj2axj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:65:0b:b7:06:3d:ce:9d:34:b8:c7:39:0e:88:77:70:1f:29:
28:25:86:bb:f2:d2:d5:13:69:a5:8a:24:88:a5:e1:36:4f:03:
d8:a2:35:96:61:eb:68:6b:c7:8f:71:85:24:09:bb:4a:07:bc:
2d:6b:39:01:29:03:0d:8d:bd:8a:70:0a:41:e2:c5:21:68:ba:
c9:5a:5f:09:b0:02:c8:55:8d:5c:58:02:5b:17:d4:fb:30:85:
cf:00:15:a2:c9:32:8c:6d:eb:c9:51:21:27:80:f8:03:8f:5a:
77:48:84:50:05:44:82:88:e7:ff:13:70:8a:bb:b6:0e:30:15:
58:59:67:cd:07:08:9b:7b:fb:50:a4:81:e5:ae:74:d0:d4:1c:
b1:51:9c:b9:40:ff:71:20:22:0f:ad:d0:13:0b:23:20:37:46:
be:f8:7e:c2:0a:81:67:96:c7:7c:b8:e9:41:bf:b9:49:20:b6:
f5:10:66:92:d7:73:9c:a1:5f:91:d5:27:b7:b0:14:67:a7:07:
8c:c3:dd:45:e1:96:36:4b:2c:8b:95:e2:05:7f:94:18:31:c0:
4e:ac:a8:03:a1:a7:1d:63:25:62:67:6f:c7:35:41:d2:9a:3e:
c2:cb:43:c2:2b:78:54:ef:04:b1:13:a7:f7:45:be:75:4c:2f:
3d:45:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:47:56 2025 by rpki-client