Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
File: sqT-PDcZVbkhLK3mScvxfF_FjuI.mft (raw, json)
Hash identifier: chgRnL1vwblXfHd3oKnTPIuZ+gdcKtjucswQN+hMCNk=
Subject key identifier: E2:52:1E:5E:65:C0:05:00:09:6C:6A:A7:DB:02:A6:AE:ED:A6:26:34
Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Certificate serial: 019A29D4E65B84559F1D62AAD025E131875C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
Manifest number: 02AD
Signing time: Tue 28 Oct 2025 08:00:09 +0000
Manifest this update: Tue 28 Oct 2025 08:00:09 +0000
Manifest next update: Wed 29 Oct 2025 08:00:09 +0000
Files and hashes: 1: etRjZbIj12dLl3Cu-wmUuq9jXZg.roa (hash: sbMAcUZawu8ywXd9mLfTWYNQ0XvVNOGuwfVUKcBp2Bo=)
2: sqT-PDcZVbkhLK3mScvxfF_FjuI.crl (hash: EATmsDUdrQ+l/LEdJDYcBxc1FHa9rMqj01eOvU4L1Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:e6:5b:84:55:9f:1d:62:aa:d0:25:e1:31:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2
Validity
Not Before: Oct 28 08:00:09 2025 GMT
Not After : Oct 29 08:00:09 2025 GMT
Subject: CN=e2521e5e65c00500096c6aa7db02a6aeeda62634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:99:32:85:20:55:3e:2b:4d:10:62:e2:a5:
b8:00:ef:7c:27:2a:d2:93:a5:9a:d0:72:d4:2d:f4:
58:13:93:82:2e:c2:d8:a4:51:d4:0a:28:e9:59:b0:
83:85:5a:46:fa:67:6e:bf:b6:af:79:0b:3d:a4:d8:
06:28:b6:36:c6:44:da:07:3d:7e:e0:98:d3:cc:4a:
8c:d8:64:73:4e:5b:54:12:82:1c:98:ba:76:81:8b:
c7:42:82:89:3b:5d:b5:16:d0:52:9b:3e:55:88:ad:
d8:ed:12:de:c6:9a:4c:ed:a4:59:25:19:11:66:cf:
f1:df:21:13:6a:5d:6a:7d:0b:dd:6d:36:c6:4a:c5:
43:a5:51:2f:35:55:fc:32:67:8b:0f:af:f6:24:98:
9c:1f:09:d8:c7:92:ad:0a:47:1a:80:ca:07:0d:29:
90:37:73:f7:7f:29:6d:cb:de:9d:22:50:ea:00:c3:
e5:e7:f9:2a:51:11:b4:6b:3e:e7:d1:16:19:b1:d1:
62:20:6d:ef:2e:e6:c4:f8:b1:2b:82:a1:79:7d:3a:
05:0f:77:34:ff:d5:19:66:ba:96:e6:ec:8b:27:50:
a8:50:cb:40:28:a3:16:83:cc:3d:1b:3e:30:69:d2:
09:79:95:df:d0:71:87:ca:10:19:b3:b8:66:c8:80:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:52:1E:5E:65:C0:05:00:09:6C:6A:A7:DB:02:A6:AE:ED:A6:26:34
X509v3 Authority Key Identifier:
keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:b7:ed:01:64:16:8a:77:a7:50:23:59:d1:b2:5d:89:01:
6e:be:95:e7:88:86:93:55:1f:18:b4:da:ad:88:d8:af:72:92:
6e:4c:5c:61:6b:40:87:5c:22:45:d5:a9:26:d1:e7:86:6f:62:
9e:b0:4e:4d:df:88:ef:35:50:18:56:37:75:e3:46:38:6e:4b:
1a:dc:64:ab:b1:36:f3:27:e6:ba:e2:af:b5:45:1a:1b:eb:fc:
e3:7e:ac:31:c3:2d:0b:04:ee:e2:80:02:47:48:41:03:e5:2f:
59:23:1a:0f:a4:b5:15:5f:ba:37:33:65:1f:b1:c5:b9:fe:54:
5c:00:73:56:20:84:9f:b5:dd:55:1d:c0:e9:5a:e4:3a:ce:34:
72:fb:de:77:96:d4:05:2d:12:0f:fb:51:e0:b9:ae:3d:9a:11:
9e:d0:eb:c2:06:66:fb:00:0d:a1:5e:20:54:2c:00:88:f7:78:
a8:fb:f1:b4:3e:ae:cb:24:de:e0:12:6b:fb:88:20:02:10:df:
ac:fe:23:a4:ef:8d:6d:4d:9f:03:16:91:c9:8c:8e:11:64:a1:
0e:a9:e7:40:f5:97:6b:16:c7:bf:36:1f:be:7c:90:35:be:e9:
f8:e0:5b:17:be:8a:10:25:e2:59:29:69:9f:6a:43:b5:ab:65:
14:0d:41:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:49:54 2025 by rpki-client