Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: Z/DKaPvhf7CqsE8ZS4Yq4UWxCfz4sPRWPGuG+9NEM3E=
Subject key identifier: DB:3D:2A:64:D7:E1:07:5F:8C:E8:4E:9C:37:95:BA:0C:BA:1C:31:7E
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 019928FC3B117CC545E2BBEE6A7C73793EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 0228
Signing time: Mon 08 Sep 2025 11:00:42 +0000
Manifest this update: Mon 08 Sep 2025 11:00:42 +0000
Manifest next update: Tue 09 Sep 2025 11:00:42 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: zwiNWgtQ+KoOTedlYKd1VIu9zG0tYurabU89UtPVVz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:fc:3b:11:7c:c5:45:e2:bb:ee:6a:7c:73:79:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Sep 8 11:00:42 2025 GMT
Not After : Sep 9 11:00:42 2025 GMT
Subject: CN=db3d2a64d7e1075f8ce84e9c3795ba0cba1c317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:20:73:81:55:fa:54:35:66:24:6d:82:62:
c6:3e:80:ab:4a:50:72:fe:38:21:b9:ec:14:fd:7d:
62:04:8a:46:80:bf:c4:f8:51:4a:e7:f3:0e:0a:f1:
99:5c:37:60:a3:66:87:9e:81:00:46:8d:b6:15:8e:
00:5c:4f:f1:c9:7f:b8:cc:cb:6a:46:35:2b:df:d6:
d0:a2:49:2d:cd:15:b6:cf:76:79:f8:f0:04:fb:ee:
c2:04:87:12:58:3f:36:16:5d:97:b5:52:bf:0c:94:
a3:c5:3b:f0:50:ed:28:6e:b9:13:ec:f6:08:1b:87:
a0:e5:e2:e9:32:33:c3:86:41:41:7d:7a:5e:9c:1b:
12:fe:08:2a:53:52:e1:11:60:1a:d1:8a:9d:42:52:
6c:09:ba:55:a5:ee:67:96:01:6e:e7:ba:83:40:16:
bc:be:9c:79:f6:3e:05:e8:e2:39:af:98:c0:07:a8:
36:33:dd:a2:d3:2f:7f:fe:a2:58:eb:0d:4d:89:a6:
cf:10:9d:5d:43:df:62:c1:f1:cc:f1:49:5d:34:c5:
8c:7c:25:c4:e9:f1:7f:4e:d6:7c:ea:46:3e:30:84:
c9:a8:85:39:b4:95:bf:20:1f:b4:72:fb:b5:45:d6:
cc:d1:11:c4:aa:b6:ab:f3:47:cf:eb:a9:dc:68:e4:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3D:2A:64:D7:E1:07:5F:8C:E8:4E:9C:37:95:BA:0C:BA:1C:31:7E
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:10:99:ee:95:ed:7d:0d:fd:81:93:81:a5:97:12:8a:38:8f:
89:ad:ec:28:b4:24:4e:3e:7e:85:51:c2:06:8f:20:61:61:f8:
f4:08:1c:69:a0:1b:b2:a1:8c:fd:f4:82:0c:aa:10:2e:fb:de:
b5:f9:39:47:d1:a2:b2:ab:01:20:c4:3e:50:21:02:6f:bd:d6:
07:3a:1c:eb:38:58:29:8b:67:21:21:c9:65:17:ee:8c:2d:4a:
68:74:43:8a:e7:b5:14:83:89:ea:8d:42:71:bd:9e:c2:9f:d6:
86:e6:b4:06:45:da:a5:cd:1b:c3:72:e9:5c:c5:b8:f7:e7:49:
a1:c0:cf:e2:bd:a5:69:05:47:46:47:04:72:b8:c2:22:1f:86:
d3:0c:f4:56:4b:08:e3:91:28:68:99:39:73:66:f0:2e:3d:f4:
3a:33:83:68:d5:89:6f:a9:6f:4b:49:a5:43:b1:6c:81:f6:7b:
fe:77:44:b9:3d:e2:2c:3c:95:b3:79:f5:52:7e:9c:b1:6f:bd:
b6:f0:ef:93:03:b0:a8:74:51:32:60:75:72:0b:91:51:94:a7:
02:ef:9c:fa:a3:20:c6:3a:17:28:3c:af:dc:55:a6:16:f7:36:
4f:e2:f3:69:2a:12:63:ae:c7:2f:e1:36:d4:f1:e7:ed:97:7b:
7c:5f:54:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZko/DsRfMVF4rvuanxzeT7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj
NThlZTIwHhcNMjUwOTA4MTEwMDQyWhcNMjUwOTA5MTEwMDQyWjAzMTEwLwYDVQQD
EyhkYjNkMmE2NGQ3ZTEwNzVmOGNlODRlOWMzNzk1YmEwY2JhMWMzMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSMgc4FV+lQ1ZiRtgmLGPoCrSlBy
/jghuewU/X1iBIpGgL/E+FFK5/MOCvGZXDdgo2aHnoEARo22FY4AXE/xyX+4zMtq
RjUr39bQokktzRW2z3Z5+PAE++7CBIcSWD82Fl2XtVK/DJSjxTvwUO0obrkT7PYI
G4eg5eLpMjPDhkFBfXpenBsS/ggqU1LhEWAa0YqdQlJsCbpVpe5nlgFu57qDQBa8
vpx59j4F6OI5r5jAB6g2M92i0y9//qJY6w1NiabPEJ1dQ99iwfHM8UldNMWMfCXE
6fF/TtZ86kY+MITJqIU5tJW/IB+0cvu1RdbM0RHEqrar80fP66ncaORxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNs9KmTX4QdfjOhOnDeVugy6HDF+MB8GA1UdIwQY
MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt
YzhjY2RkOWU2ODdhLzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh
LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRCZ7pXt
fQ39gZOBpZcSijiPia3sKLQkTj5+hVHCBo8gYWH49AgcaaAbsqGM/fSCDKoQLvve
tfk5R9GisqsBIMQ+UCECb73WBzoc6zhYKYtnISHJZRfujC1KaHRDiue1FIOJ6o1C
cb2ewp/Whua0BkXapc0bw3LpXMW49+dJocDP4r2laQVHRkcEcrjCIh+G0wz0VksI
45EoaJk5c2bwLj30OjODaNWJb6lvS0mlQ7FsgfZ7/ndEuT3iLDyVs3n1Un6csW+9
tvDvkwOwqHRRMmB1cguRUZSnAu+c+qMgxjoXKDyv3FWmFvc2T+LzaSoSY67HL+E2
1PHn7Zd7fF9UCg==
-----END CERTIFICATE-----
Generated at Mon Sep 8 13:10:43 2025 by rpki-client