Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
File: SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft (raw, json)
Hash identifier: D00MP2MRlibCAZYWO35DZarOtetA3ycExSkBWqg0QoY=
Subject key identifier: 00:62:D5:5F:2E:11:F2:29:6B:C0:CF:8F:9B:95:1F:C3:5A:10:65:78
Authority key identifier: 49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
Certificate issuer: /CN=490db999ca4ce287c5c92ab167a500902259bb05
Certificate serial: 019A70DC4D0CF9A61B2A11D20D922F1FF6A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:17 +0000
Manifest this update: Tue 11 Nov 2025 03:01:17 +0000
Manifest next update: Wed 12 Nov 2025 03:01:17 +0000
Files and hashes: 1: CqiCeQuNX5qYQWUphyM9iUBKOh4.roa (hash: RxNADbHHkDaXqyxPAae3UN8wvqfkoDaWlyxd0mzE4zw=)
2: SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl (hash: iwiZMl/xHIBq9wJ6d2vSl/Qc206zAXmMcT8/21Irjmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:4d:0c:f9:a6:1b:2a:11:d2:0d:92:2f:1f:f6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490db999ca4ce287c5c92ab167a500902259bb05
Validity
Not Before: Nov 11 03:01:17 2025 GMT
Not After : Nov 12 03:01:17 2025 GMT
Subject: CN=0062d55f2e11f2296bc0cf8f9b951fc35a106578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6c:4d:63:d3:13:2d:cd:83:8d:17:f7:38:0e:
15:c2:c9:57:0d:a7:e8:02:f7:19:d1:ac:b1:bb:90:
58:29:70:2a:77:0c:ff:e0:f8:89:7e:4e:c4:9f:b5:
94:df:cf:e6:94:91:ef:fb:23:69:38:d6:ce:3e:d4:
09:52:0f:22:b7:e0:ca:2b:30:63:5c:cf:6b:18:f3:
12:f8:b9:2f:66:0d:75:86:01:55:e0:a7:ca:02:0d:
b4:68:7f:82:ba:23:7b:1f:bd:a8:bd:b6:f3:60:7b:
29:1e:68:fc:7f:04:f5:62:e3:34:ed:22:43:ae:a0:
1a:f2:a3:18:87:29:20:58:01:37:15:5a:c4:c8:de:
13:04:79:20:bd:54:2e:89:5c:bf:23:83:83:2a:95:
15:7e:f1:f2:d9:d3:ee:7d:64:7e:95:f3:25:c3:bd:
e0:c9:5e:a2:cf:3f:0e:a8:df:9e:fc:39:44:bb:cb:
46:4e:76:17:aa:14:bc:cd:de:42:e4:b4:8e:c3:5e:
f8:8c:fb:40:8f:8e:38:df:d8:7f:d0:5f:68:cd:4d:
72:91:e6:f7:e2:d3:3c:8d:72:32:c4:fc:53:9e:b5:
ff:f2:52:5f:92:a0:4b:62:1a:79:d9:c5:a4:a0:74:
7f:55:87:bf:d2:c8:6b:34:91:42:56:ce:50:9f:9d:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:62:D5:5F:2E:11:F2:29:6B:C0:CF:8F:9B:95:1F:C3:5A:10:65:78
X509v3 Authority Key Identifier:
keyid:49:0D:B9:99:CA:4C:E2:87:C5:C9:2A:B1:67:A5:00:90:22:59:BB:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQ25mcpM4ofFySqxZ6UAkCJZuwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6f71f3-6399-4913-b98e-98e25e046908/1/SQ25mcpM4ofFySqxZ6UAkCJZuwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:84:5e:e2:1b:6a:5a:19:41:95:e2:ae:1c:31:ed:d8:72:90:
59:be:f2:68:d4:d9:1e:7d:45:8f:dc:0c:13:40:18:40:5d:e1:
d8:dc:26:39:dd:d7:2f:72:e1:b4:19:bc:6e:f8:c9:df:d3:cb:
55:45:e3:16:b7:1e:7b:d2:d5:ad:17:e1:28:eb:d4:17:61:89:
c6:6f:09:63:03:ea:d5:00:75:33:50:dd:91:48:74:b5:89:a3:
b9:24:10:25:a1:a1:56:a7:f1:68:05:26:d7:f1:68:04:d6:3f:
e0:6f:8d:b1:a3:68:ae:ff:00:fb:dd:73:d8:3f:b5:57:65:e0:
06:3b:4c:5c:7a:0e:2f:2b:36:93:eb:4d:30:38:ee:74:00:ef:
39:81:18:bf:40:5e:c9:b0:46:b9:47:dc:cd:d3:10:1b:3b:07:
43:4a:a3:d6:1b:d1:24:a6:11:be:ac:4a:1d:ad:45:ee:49:66:
81:f6:da:85:a5:db:eb:6b:9a:81:cb:ef:43:fe:2b:3c:10:02:
56:05:28:7f:cd:4a:16:30:08:4e:08:57:c2:34:22:fd:df:4c:
c6:7e:b7:69:70:b0:69:ec:8e:69:92:1a:14:29:c4:79:c1:ba:
e1:f6:bd:f8:00:13:18:48:26:71:e5:e4:75:26:39:cd:10:24:
93:7b:3f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:31 2025 by rpki-client