Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
File: sq8TPUrDS9z7e93H4RsnBUNi9wk.mft (raw, json)
Hash identifier: EwdDzxlWwMBkzCsPoW8SswocpJay7I2qlw4OI99xrgs=
Subject key identifier: 42:C8:27:69:56:5A:30:7A:47:F6:0B:C8:AF:2F:E2:C0:07:24:26:A6
Authority key identifier: B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
Certificate issuer: /CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Certificate serial: 019A70A53F9FBF01AC732CCDA544FBA760D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
Manifest number: 0F36
Signing time: Tue 11 Nov 2025 02:01:09 +0000
Manifest this update: Tue 11 Nov 2025 02:01:09 +0000
Manifest next update: Wed 12 Nov 2025 02:01:09 +0000
Files and hashes: 1: sq8TPUrDS9z7e93H4RsnBUNi9wk.crl (hash: oqgOcm+ghl1WYxmkxdJdcMQc1K/t/iKF+faEsmM6GKQ=)
2: xXoDvLCzfRoJB4GWdWLxvsrNdQE.roa (hash: RkrqVMW2nuj6+gtG8zfIqk3F/I8r7HrDxMHvJpo4Plw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:3f:9f:bf:01:ac:73:2c:cd:a5:44:fb:a7:60:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2af133d4ac34bdcfb7bddc7e11b27054362f709
Validity
Not Before: Nov 11 02:01:09 2025 GMT
Not After : Nov 12 02:01:09 2025 GMT
Subject: CN=42c82769565a307a47f60bc8af2fe2c0072426a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:94:ca:71:67:57:b1:99:f3:16:cc:7d:ae:
e5:59:6c:99:87:7b:b5:0a:15:72:54:c0:0d:d4:4e:
ee:8b:38:c8:90:6e:38:86:5a:6c:ca:99:c5:24:75:
a6:3f:af:c0:29:db:65:a1:95:eb:c0:e4:35:d6:25:
b8:b6:fd:e8:f9:b8:80:9c:a5:34:4e:4c:4b:e9:68:
a9:87:ce:c3:7c:c1:f9:fe:5a:27:30:84:2f:53:27:
bf:42:71:37:e7:80:95:01:87:02:2f:4c:c4:92:f2:
8e:ad:dc:8f:30:9b:a4:8c:69:d9:a9:ad:45:e2:e5:
39:59:6d:a8:fe:c2:17:1a:3a:db:ef:cf:8d:14:f9:
76:c2:ed:f6:d6:fd:4a:30:14:d5:9a:ac:87:3b:24:
b3:bc:16:27:36:07:72:69:21:52:c2:00:18:ef:7c:
12:5d:6f:03:f8:cf:24:88:b2:91:bd:7a:25:24:4d:
b7:ce:37:f6:09:e4:38:c2:da:a7:40:d9:d7:b0:86:
c1:60:a5:6c:e0:9a:9f:f9:02:3d:c2:dd:47:38:4c:
93:f5:dc:04:4b:51:74:f2:24:7c:c6:24:21:8d:04:
9f:f5:ad:75:79:f5:5a:c4:69:aa:e5:4c:04:43:4d:
c7:12:9e:bd:96:5f:d9:87:21:fc:63:02:6e:c1:0c:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C8:27:69:56:5A:30:7A:47:F6:0B:C8:AF:2F:E2:C0:07:24:26:A6
X509v3 Authority Key Identifier:
keyid:B2:AF:13:3D:4A:C3:4B:DC:FB:7B:DD:C7:E1:1B:27:05:43:62:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sq8TPUrDS9z7e93H4RsnBUNi9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/eaacae-377e-457a-900a-f3eaae633a1e/1/sq8TPUrDS9z7e93H4RsnBUNi9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1b:de:b2:7c:4f:67:27:d2:29:95:a8:7f:31:bc:98:bf:2f:
f5:9e:96:28:2a:3b:af:98:eb:2c:99:67:47:48:99:0a:1a:a1:
44:45:c3:68:ae:c2:f4:8a:ae:e4:6d:92:2c:39:76:92:46:de:
f4:cc:a9:39:85:92:a2:b5:6b:47:43:fd:72:58:7f:7a:65:97:
90:ce:68:68:ae:b6:06:11:7f:e9:3b:7a:ca:41:4f:ee:4e:8a:
e1:3b:68:c5:dd:d3:e3:ef:fd:f6:66:f3:d0:d0:9a:49:75:74:
78:3d:ca:7c:64:10:a9:74:95:58:69:ea:38:e6:64:4d:33:b7:
08:13:b4:be:e6:9e:ac:aa:57:40:35:c4:27:b7:7a:2b:d8:33:
1c:d7:89:9f:3a:65:0b:dc:80:02:24:f9:83:58:ed:8b:31:3d:
11:f2:4a:f7:10:c4:56:51:99:cb:e4:36:f8:1e:6b:bc:3f:9d:
b7:02:37:99:d7:f7:2f:8d:33:af:b4:d4:b8:19:0b:8d:1b:62:
63:f8:c7:92:c7:db:a4:7f:1b:27:55:9c:1b:47:38:4e:7c:66:
de:6c:2f:bf:63:fc:c2:73:87:c8:e5:c6:7f:b0:1f:e5:4d:46:
3e:68:b7:75:e8:8d:3f:50:0c:95:02:bb:a4:01:0a:a2:3c:44:
1b:0e:d4:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpT+fvwGscyzNpUT7p2DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYWYxMzNkNGFjMzRiZGNmYjdiZGRjN2UxMWIyNzA1NDM2
MmY3MDkwHhcNMjUxMTExMDIwMTA5WhcNMjUxMTEyMDIwMTA5WjAzMTEwLwYDVQQD
Eyg0MmM4Mjc2OTU2NWEzMDdhNDdmNjBiYzhhZjJmZTJjMDA3MjQyNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfeUynFnV7GZ8xbMfa7lWWyZh3u1
ChVyVMAN1E7uizjIkG44hlpsypnFJHWmP6/AKdtloZXrwOQ11iW4tv3o+biAnKU0
TkxL6Wiph87DfMH5/lonMIQvUye/QnE354CVAYcCL0zEkvKOrdyPMJukjGnZqa1F
4uU5WW2o/sIXGjrb78+NFPl2wu321v1KMBTVmqyHOySzvBYnNgdyaSFSwgAY73wS
XW8D+M8kiLKRvXolJE23zjf2CeQ4wtqnQNnXsIbBYKVs4Jqf+QI9wt1HOEyT9dwE
S1F08iR8xiQhjQSf9a11efVaxGmq5UwEQ03HEp69ll/ZhyH8YwJuwQzKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELIJ2lWWjB6R/YLyK8v4sAHJCamMB8GA1UdIwQY
MBaAFLKvEz1Kw0vc+3vdx+EbJwVDYvcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEt
ZjNlYWFlNjMzYTFlLzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lYWFjYWUtMzc3ZS00NTdhLTkwMGEtZjNlYWFlNjMzYTFl
LzEvc3E4VFBVckRTOXo3ZTkzSDRSc25CVU5pOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRvesnxP
ZyfSKZWofzG8mL8v9Z6WKCo7r5jrLJlnR0iZChqhREXDaK7C9Iqu5G2SLDl2kkbe
9MypOYWSorVrR0P9clh/emWXkM5oaK62BhF/6Tt6ykFP7k6K4Ttoxd3T4+/99mbz
0NCaSXV0eD3KfGQQqXSVWGnqOOZkTTO3CBO0vuaerKpXQDXEJ7d6K9gzHNeJnzpl
C9yAAiT5g1jtizE9EfJK9xDEVlGZy+Q2+B5rvD+dtwI3mdf3L40zr7TUuBkLjRti
Y/jHksfbpH8bJ1WcG0c4Tnxm3mwvv2P8wnOHyOXGf7Af5U1GPmi3deiNP1AMlQK7
pAEKojxEGw7U5w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client