Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
File: Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft (raw, json)
Hash identifier: hufK9OYFWStatvOwNiJYjzvtDq/F3Ypm8+lWLs+l12c=
Subject key identifier: F0:3F:09:E8:E0:72:DA:C8:7C:E9:89:E0:BA:1D:C4:BE:44:C0:15:48
Authority key identifier: 4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
Certificate issuer: /CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Certificate serial: 019A7225C165A2D11D8FAA9B43A9497E06D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 09:01:08 +0000
Manifest this update: Tue 11 Nov 2025 09:01:08 +0000
Manifest next update: Wed 12 Nov 2025 09:01:08 +0000
Files and hashes: 1: 9jNi3XWKVAeYgvXNk0P0T-yhT_A.roa (hash: r6wD0yfA7SejIQA44lGGyfTLE1iB9zVRdLay3h3WMPk=)
2: Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl (hash: Z9GHQDQJTepXPWLarwESkJqGenG6knvxPpexFhddfkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c1:65:a2:d1:1d:8f:aa:9b:43:a9:49:7e:06:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aafe45b30fa7f594925dd395ba14cefb673e2c0
Validity
Not Before: Nov 11 09:01:08 2025 GMT
Not After : Nov 12 09:01:08 2025 GMT
Subject: CN=f03f09e8e072dac87ce989e0ba1dc4be44c01548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:f3:35:9c:2b:07:62:e2:35:ad:af:1e:17:
98:b1:91:36:4f:fd:ca:90:f0:95:c0:2b:82:8b:b2:
c8:76:88:b4:3b:62:5b:93:e5:e1:d6:96:bb:9c:cc:
c1:d1:62:01:da:33:13:e7:ea:e5:89:28:08:26:a8:
d1:e7:40:1a:f9:19:96:a2:88:4e:36:f6:6b:0f:57:
c7:6d:ed:c2:34:02:09:b9:09:4e:e1:73:6d:fc:b8:
9f:ca:9e:c9:c8:90:10:5d:ed:64:8e:3d:2f:14:4d:
e1:7a:12:7e:30:f6:f2:06:8a:e4:d9:13:87:ec:33:
dc:e6:f3:e2:3f:2c:4e:5e:42:a5:9d:d8:8f:4f:87:
b8:6b:8c:b2:c2:6d:81:d3:ad:e3:0b:f5:ac:0e:07:
6f:ee:12:6d:f5:e8:60:29:89:c6:8f:6d:7b:7a:1b:
13:c9:85:2e:48:8a:cf:6a:1f:ee:57:13:f7:56:3c:
54:da:40:b7:d6:e9:e1:15:f4:cf:07:94:d2:7c:df:
7f:83:f9:5a:db:c0:6f:04:00:18:1c:9d:b1:a7:4c:
e5:5d:64:a4:8f:1a:0e:81:2c:95:b3:41:15:4c:9f:
25:47:b3:91:b5:26:7c:9f:ec:b5:ad:85:38:1a:af:
5f:bd:77:45:8b:70:65:77:a9:ac:41:d7:8b:b1:64:
84:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3F:09:E8:E0:72:DA:C8:7C:E9:89:E0:BA:1D:C4:BE:44:C0:15:48
X509v3 Authority Key Identifier:
keyid:4A:AF:E4:5B:30:FA:7F:59:49:25:DD:39:5B:A1:4C:EF:B6:73:E2:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sq_kWzD6f1lJJd05W6FM77Zz4sA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ae09fb-f536-47a1-9787-f1f603f91971/1/Sq_kWzD6f1lJJd05W6FM77Zz4sA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d5:1a:27:3d:7e:9d:24:71:35:da:56:e9:83:b9:8b:e4:fa:
f3:6a:16:35:39:64:f3:4a:20:ad:3d:f2:62:18:a5:78:62:e1:
6c:64:e8:b5:5d:11:65:4e:56:01:e1:be:f9:d9:6f:46:21:df:
6c:93:29:b1:ed:92:d5:d5:4f:77:dd:52:c3:0a:56:de:13:39:
45:f0:55:43:1e:97:32:bc:8d:ce:c6:f5:0f:d4:d8:15:21:20:
a4:02:ec:b8:55:27:49:25:17:bf:db:23:10:70:ac:c5:88:92:
19:6f:86:6d:9d:11:35:34:67:86:1e:e8:cc:fc:9d:3b:d2:f1:
9a:34:c1:84:c4:23:95:3f:1e:ec:18:e7:0f:ec:83:6f:a3:8c:
61:0f:d4:8e:1a:e5:e6:f1:05:c1:60:60:2a:a5:45:13:32:c1:
86:1c:67:3d:a0:74:cf:47:75:54:d5:10:57:24:85:11:ba:fc:
1a:91:e0:73:75:0c:f1:e0:17:15:bc:27:dc:2a:1b:89:3a:e1:
42:9d:f9:a2:fa:55:b4:29:59:d1:ad:1f:2a:48:22:3c:2c:41:
43:d0:df:8b:0e:b3:bd:8d:05:cc:3c:ad:92:fe:07:8d:0b:57:
51:28:f6:d1:c5:76:6b:24:c8:b9:e0:b5:20:c0:d2:31:5d:ed:
2e:fe:ea:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJcFlotEdj6qbQ6lJfgbXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhYWZlNDViMzBmYTdmNTk0OTI1ZGQzOTViYTE0Y2VmYjY3
M2UyYzAwHhcNMjUxMTExMDkwMTA4WhcNMjUxMTEyMDkwMTA4WjAzMTEwLwYDVQQD
EyhmMDNmMDllOGUwNzJkYWM4N2NlOTg5ZTBiYTFkYzRiZTQ0YzAxNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldrzNZwrB2LiNa2vHheYsZE2T/3K
kPCVwCuCi7LIdoi0O2Jbk+Xh1pa7nMzB0WIB2jMT5+rliSgIJqjR50Aa+RmWoohO
NvZrD1fHbe3CNAIJuQlO4XNt/Lifyp7JyJAQXe1kjj0vFE3hehJ+MPbyBork2ROH
7DPc5vPiPyxOXkKlndiPT4e4a4yywm2B063jC/WsDgdv7hJt9ehgKYnGj217ehsT
yYUuSIrPah/uVxP3VjxU2kC31unhFfTPB5TSfN9/g/la28BvBAAYHJ2xp0zlXWSk
jxoOgSyVs0EVTJ8lR7ORtSZ8n+y1rYU4Gq9fvXdFi3Bld6msQdeLsWSE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA/CejgctrIfOmJ4LodxL5EwBVIMB8GA1UdIwQY
MBaAFEqv5Fsw+n9ZSSXdOVuhTO+2c+LAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODct
ZjFmNjAzZjkxOTcxLzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZTA5ZmItZjUzNi00N2ExLTk3ODctZjFmNjAzZjkxOTcx
LzEvU3Ffa1d6RDZmMWxKSmQwNVc2Rk03N1p6NHNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedUaJz1+
nSRxNdpW6YO5i+T682oWNTlk80ogrT3yYhileGLhbGTotV0RZU5WAeG++dlvRiHf
bJMpse2S1dVPd91SwwpW3hM5RfBVQx6XMryNzsb1D9TYFSEgpALsuFUnSSUXv9sj
EHCsxYiSGW+GbZ0RNTRnhh7ozPydO9LxmjTBhMQjlT8e7BjnD+yDb6OMYQ/Ujhrl
5vEFwWBgKqVFEzLBhhxnPaB0z0d1VNUQVySFEbr8GpHgc3UM8eAXFbwn3CobiTrh
Qp35ovpVtClZ0a0fKkgiPCxBQ9Dfiw6zvY0FzDytkv4HjQtXUSj20cV2ayTIueC1
IMDSMV3tLv7qmA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:17 2025 by rpki-client