Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
File: sqvUconMbNnByAJ0KiztUMY0vTs.mft (raw, json)
Hash identifier: RS5DoZWEa8hz1olpjVKCq9HJkxObIOpxSCpircZa67k=
Subject key identifier: 15:3A:70:06:7D:9C:C6:2F:53:70:DA:F7:E6:7E:8E:29:27:F9:7A:C5
Authority key identifier: B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
Certificate issuer: /CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Certificate serial: 019A72933E2D7B775EE2D129460D0C2B984D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
Manifest number: 08F3
Signing time: Tue 11 Nov 2025 11:00:43 +0000
Manifest this update: Tue 11 Nov 2025 11:00:43 +0000
Manifest next update: Wed 12 Nov 2025 11:00:43 +0000
Files and hashes: 1: sqvUconMbNnByAJ0KiztUMY0vTs.crl (hash: n8kk7z2CkBevhSYvjyQMMheoWg0g0EGp3FdIcwlUGoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:3e:2d:7b:77:5e:e2:d1:29:46:0d:0c:2b:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2abd47289cc6cd9c1c802742a2ced50c634bd3b
Validity
Not Before: Nov 11 11:00:43 2025 GMT
Not After : Nov 12 11:00:43 2025 GMT
Subject: CN=153a70067d9cc62f5370daf7e67e8e2927f97ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:f2:7d:ec:c3:1f:c7:ab:bd:ac:67:58:01:
89:1d:a3:6d:37:e4:04:a6:2b:64:d6:37:47:36:ba:
7e:d9:df:22:c2:49:85:dd:1c:1b:0b:b3:c0:c9:7a:
34:2f:ef:c2:34:a9:84:c8:cf:2d:71:bc:a8:04:74:
54:b3:d5:7e:24:de:d1:3c:7d:1f:b0:41:95:82:68:
68:05:47:63:f8:a9:66:b5:7f:7c:09:18:11:cb:d8:
76:f4:7d:6e:34:f4:73:5e:28:6f:6e:49:df:03:6e:
68:52:81:a9:28:64:c6:43:dc:b9:3c:f1:24:91:44:
d5:45:24:92:28:8d:8c:74:ce:21:1e:89:e9:cd:3c:
b2:61:23:0d:61:04:44:71:fd:1c:8c:32:2b:6e:19:
83:4f:8f:6e:05:35:54:84:c7:4a:9b:5a:21:c2:28:
be:f0:ba:22:ef:fc:dd:33:1c:21:8f:57:59:84:19:
2f:3d:1c:51:fa:e1:68:ff:df:62:bc:73:93:b1:04:
bc:7c:96:df:5e:90:4c:a7:dd:07:73:55:c1:cc:41:
17:25:23:20:ae:5b:06:9c:f2:da:59:3e:25:fa:b7:
07:b8:b9:d2:e1:55:53:67:f5:7f:63:d9:56:d6:fc:
fe:06:ab:88:2c:2f:13:1e:5e:ad:d1:03:04:69:94:
e5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:70:06:7D:9C:C6:2F:53:70:DA:F7:E6:7E:8E:29:27:F9:7A:C5
X509v3 Authority Key Identifier:
keyid:B2:AB:D4:72:89:CC:6C:D9:C1:C8:02:74:2A:2C:ED:50:C6:34:BD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqvUconMbNnByAJ0KiztUMY0vTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4bf4c5-02ac-4346-afbc-e879a6027907/1/sqvUconMbNnByAJ0KiztUMY0vTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:24:31:5f:8c:bd:2b:8a:0b:f1:db:2e:6b:8a:1e:98:1f:47:
ea:ff:73:78:69:c9:b0:1e:cf:95:d1:6c:61:59:e6:ca:a2:46:
3d:29:72:14:3b:2e:ab:ea:33:3b:7e:0e:2d:0a:fa:c2:8c:28:
dc:63:c1:48:1d:43:90:d1:90:29:a6:c9:e9:ee:c2:51:97:fc:
3c:01:0c:54:48:a0:ae:c9:1f:60:e0:33:7d:4a:7b:6d:ad:58:
b7:96:f6:61:d0:48:23:9e:91:28:54:7a:99:87:2e:db:76:20:
13:b1:8a:d9:07:41:00:98:50:37:1a:4a:d5:20:77:c4:33:0c:
4f:91:a8:95:b3:9e:b8:07:13:29:fb:ad:75:2d:f0:15:62:93:
ca:bc:d0:d7:ac:aa:e2:4a:50:8a:ea:67:ed:2c:21:1d:be:00:
f5:c0:37:7b:56:1d:d4:9c:6a:20:f9:f4:71:05:7b:4d:13:ce:
88:01:1b:35:a4:75:13:61:15:bd:7e:f8:3a:09:ca:cc:dd:42:
2d:a1:b6:84:d1:f1:9e:b8:01:cb:31:62:a7:83:46:3e:af:e0:
50:61:66:bf:0a:1a:bd:bd:e5:0c:06:e1:16:f2:88:39:4c:3f:
07:82:b4:7f:d9:11:5f:50:5d:ad:e8:49:13:4f:a7:ae:11:ea:
7d:01:3f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:08 2025 by rpki-client