Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
File: sq89ZYtJTLFxUgbFzXbnkuckfvc.mft (raw, json)
Hash identifier: +nkrftUd9cw2U4c6Z9aHj0EvkgM31oWF4ljSKiWp8Uk=
Subject key identifier: 58:13:64:46:AF:BB:54:5F:ED:9C:1F:3C:81:D6:02:1F:5A:A7:FC:0D
Authority key identifier: B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
Certificate issuer: /CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Certificate serial: 019846D1EE344B86F90C80DC7861F2AB956D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
Manifest number: 048D
Signing time: Sat 26 Jul 2025 13:00:19 +0000
Manifest this update: Sat 26 Jul 2025 13:00:19 +0000
Manifest next update: Sun 27 Jul 2025 13:00:19 +0000
Files and hashes: 1: 53_H80-AjcuM7a-7V7Ni8CDVxmc.roa (hash: TnMZlgDSn2wGls3cni5JDswiMtfBk15EprIHZOUPW18=)
2: sq89ZYtJTLFxUgbFzXbnkuckfvc.crl (hash: Tj67t38J6SBHwOx8sqLFbJrLDGeFu08ccGGs7nfJ5IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:ee:34:4b:86:f9:0c:80:dc:78:61:f2:ab:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af3d658b494cb1715206c5cd76e792e7247ef7
Validity
Not Before: Jul 26 13:00:19 2025 GMT
Not After : Jul 27 13:00:19 2025 GMT
Subject: CN=58136446afbb545fed9c1f3c81d6021f5aa7fc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:88:e9:21:d8:7c:5e:67:97:5c:eb:03:4d:5e:
9c:a5:76:1c:34:aa:6b:02:c1:9c:a7:8f:e6:68:e5:
c5:57:78:0c:fd:a4:6d:a4:2b:d6:4f:51:32:68:f2:
43:27:2f:83:e7:8f:da:5e:05:0e:39:7b:a6:9a:67:
d0:02:76:48:93:22:bb:d2:2a:5e:71:fb:e0:72:14:
9c:3e:bc:49:4d:13:71:ef:12:5e:e6:6c:c7:57:53:
b7:98:7a:e1:07:93:ed:d0:81:06:a6:ac:d4:1b:b3:
69:26:e6:7f:7a:72:2f:62:e0:93:1f:b2:77:4d:c0:
21:cd:ab:b9:23:f0:82:ce:e3:57:d1:7e:ea:f0:30:
1e:f5:71:c0:02:04:8a:a6:9b:eb:08:14:53:c0:1a:
ed:e7:fd:22:9c:b4:53:51:f1:a1:8d:3f:f2:36:08:
83:d2:36:77:e4:e2:dd:fd:6a:f7:b0:a4:87:b0:4e:
7a:2d:b9:12:e7:d2:2c:d8:2b:31:ef:dc:05:d3:da:
c6:17:52:d6:ba:b1:fb:08:47:b8:46:fc:3c:ad:cd:
f8:0b:1d:0d:72:85:12:43:ff:2f:95:47:fe:b3:81:
6e:f0:61:9c:5e:8c:3c:49:06:61:e2:26:72:bc:e4:
b9:f0:4f:51:2c:ef:65:8e:7e:5f:ee:c6:74:f8:a4:
53:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:64:46:AF:BB:54:5F:ED:9C:1F:3C:81:D6:02:1F:5A:A7:FC:0D
X509v3 Authority Key Identifier:
keyid:B2:AF:3D:65:8B:49:4C:B1:71:52:06:C5:CD:76:E7:92:E7:24:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq89ZYtJTLFxUgbFzXbnkuckfvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/48b42c-c9ef-4e0e-86b4-a2eebb166fc8/1/sq89ZYtJTLFxUgbFzXbnkuckfvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6f:97:52:6a:ad:df:11:29:91:2a:45:5b:02:57:f4:c2:dc:
55:6e:c6:e7:b1:d8:c1:f8:5a:a9:ff:67:81:ef:cf:55:ed:ca:
a2:85:a8:12:0c:95:73:31:e1:f8:73:91:45:55:a7:05:e8:70:
9b:1b:22:e1:88:ff:8d:ff:ae:b7:8c:3c:e7:72:34:e8:03:50:
d1:9b:84:5a:77:11:0f:57:ca:6b:f0:13:5c:91:47:b1:1b:eb:
3b:2a:08:78:58:32:5c:a7:51:c9:c5:89:d0:b9:be:06:4a:fd:
37:4c:16:b6:d9:15:23:9b:ed:d9:33:6d:49:f9:0b:88:3b:9f:
3d:04:09:48:d1:25:a2:2b:2b:1f:42:fb:56:9c:c7:79:a5:3e:
61:f3:87:fc:66:ff:be:01:cf:b1:29:f3:16:b7:52:49:fd:9a:
d1:4b:a7:7c:e6:a2:13:e6:99:d0:b8:c3:a1:87:c7:9f:84:5c:
8a:7b:a5:a4:1c:4f:54:bf:50:2f:0b:64:b9:42:61:7d:a6:4b:
71:08:e6:b4:fb:4d:66:ba:54:c6:e4:16:70:72:30:31:7b:ff:
38:a0:b9:30:38:14:6b:1b:a7:59:ba:3a:08:e8:5c:4c:75:60:
d4:3f:74:0e:48:c3:b2:85:89:36:67:23:6a:10:fa:ab:04:3f:
b7:0c:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:52 2025 by rpki-client